---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
      linkageType:     InternalLinkage
      functionLinenumber: 43
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.ssh *'
        - 'struct.ssh *'
        - 'struct.sshbuf *'
        - 'int '
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         24
      ICount:          165
      EdgeCount:       32
      CyclomaticComplexity: 10
      functionsReached:
        - ssh_err
        - ssh_input_append
        - ssh_output_consume
        - ssh_output_ptr
        - ssh_packet_next
        - sshbuf_put
        - sshlog
      functionUses:    2
      BranchProfiles:
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:50,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:51,4'
              BranchSideFuncs:
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:54,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_output_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - ssh_output_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_next
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:54,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:55,4'
              BranchSideFuncs: []
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:56,24'
              BranchSideFuncs:
                - ssh_output_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - ssh_output_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_next
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:58,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:59,4'
              BranchSideFuncs: []
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:60,31'
              BranchSideFuncs:
                - ssh_output_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_next
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_output_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:60,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:61,4'
              BranchSideFuncs:
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:64,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_next
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_output_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - ssh_output_consume
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:64,21'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:64,40'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_next
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_output_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - ssh_output_consume
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:68,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_next
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_output_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - ssh_output_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:64,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:65,4'
              BranchSideFuncs:
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:68,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_next
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_output_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - ssh_output_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:68,16'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:68,41'
              BranchSideFuncs:
                - ssh_packet_next
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_output_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - ssh_output_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:72,2'
              BranchSideFuncs:
                - ssh_packet_next
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_output_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - ssh_output_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:68,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:69,4'
              BranchSideFuncs:
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:72,2'
              BranchSideFuncs:
                - ssh_packet_next
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_output_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - ssh_output_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
      Callsites:
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:50,12'
          Dst:             ssh_packet_next
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:51,4'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:51,4'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:56,9'
          Dst:             ssh_output_ptr
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:57,3'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:60,12'
          Dst:             ssh_output_consume
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:61,4'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:61,4'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:64,29'
          Dst:             sshbuf_put
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:65,4'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:65,4'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:68,24'
          Dst:             ssh_input_append
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:69,4'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:69,4'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ZL7run_kexP10test_stateP3sshS2_
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
      linkageType:     InternalLinkage
      functionLinenumber: 77
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.test_state *'
        - 'struct.ssh *'
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         30
      ICount:          217
      EdgeCount:       40
      CyclomaticComplexity: 12
      functionsReached:
        - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
        - ssh_err
        - ssh_input_append
        - sshbuf_len
        - sshbuf_ptr
        - sshbuf_reset
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:82,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:83,29'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:90,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:83,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:85,4'
              BranchSideFuncs:
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:88,16'
              BranchSideFuncs:
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:90,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:91,29'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - ssh_input_append
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:98,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:91,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:93,4'
              BranchSideFuncs:
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:96,16'
              BranchSideFuncs:
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:98,28'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:98,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:98,2'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:98,2'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:99,11'
              BranchSideFuncs:
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:118,2'
              BranchSideFuncs:
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:101,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:103,4'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:106,3'
              BranchSideFuncs:
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:107,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:109,4'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:112,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:112,15'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:98,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:112,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:112,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:98,2'
              BranchSideFuncs:
                - sshlog
                - ssh_err
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:113,4'
              BranchSideFuncs:
                - sshlog
                - ssh_err
                - sshlog
      Callsites:
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:83,37'
          Dst:             sshbuf_ptr
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:84,7'
          Dst:             sshbuf_len
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:83,12'
          Dst:             ssh_input_append
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:85,4'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:85,4'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:88,3'
          Dst:             sshbuf_reset
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:91,37'
          Dst:             sshbuf_ptr
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:92,7'
          Dst:             sshbuf_len
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:91,12'
          Dst:             ssh_input_append
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:93,4'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:93,4'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:96,3'
          Dst:             sshbuf_reset
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:100,3'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:101,12'
          Dst:             _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:103,4'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:103,4'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:106,3'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:107,12'
          Dst:             _ZL19do_send_and_receiveP3sshS0_P6sshbufiPm
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:109,4'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:109,4'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:113,4'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:118,2'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:118,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ZL11get_privkeyP12shared_statei
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
      linkageType:     InternalLinkage
      functionLinenumber: 167
      functionDepth:   0
      returnType:      'struct.sshkey *'
      argCount:        2
      argTypes:
        - 'struct.shared_state *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         14
      ICount:          78
      EdgeCount:       18
      CyclomaticComplexity: 6
      functionsReached:
        - abort
      functionUses:    1
      BranchProfiles:
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:168,17'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:168,20'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:170,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:168,32'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:168,43'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:170,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:168,64'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:169,6'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:170,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:169,27'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:169,30'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:170,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:168,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:170,3'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:171,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:170,3'
          Dst:             abort
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    abort
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    12
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ZL10get_pubkeyP12shared_statei
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
      linkageType:     InternalLinkage
      functionLinenumber: 158
      functionDepth:   0
      returnType:      'struct.sshkey *'
      argCount:        2
      argTypes:
        - 'struct.shared_state *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         14
      ICount:          78
      EdgeCount:       18
      CyclomaticComplexity: 6
      functionsReached:
        - abort
      functionUses:    1
      BranchProfiles:
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:159,17'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:159,20'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:161,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:159,32'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:159,43'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:161,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:159,64'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:160,6'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:161,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:160,26'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:160,29'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:161,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:159,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:161,3'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:162,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:161,3'
          Dst:             abort
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ZL15do_kex_with_keyP12shared_stateP10test_statePKci
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
      linkageType:     InternalLinkage
      functionLinenumber: 177
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.shared_state *'
        - 'struct.test_state *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         55
      ICount:          371
      EdgeCount:       72
      CyclomaticComplexity: 19
      functionsReached:
        - _ZL10get_pubkeyP12shared_statei
        - _ZL11get_privkeyP12shared_statei
        - _ZL7run_kexP10test_stateP3sshS2_
        - abort
        - ssh_add_hostkey
        - ssh_err
        - ssh_free
        - ssh_init
        - sshbuf_free
        - sshbuf_fromb
        - sshbuf_len
        - sshkey_ssh_name
        - sshlog
        - strdup
        - xstrdup
      functionUses:    4
      BranchProfiles:
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:187,29'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:188,30'
              BranchSideFuncs:
                - sshbuf_fromb
                - _ZL10get_pubkeyP12shared_statei
                - _ZL11get_privkeyP12shared_statei
                - sshkey_ssh_name
                - xstrdup
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - sshlog
                - sshbuf_len
                - sshlog
                - sshbuf_len
                - sshlog
                - sshbuf_fromb
                - abort
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:190,6'
              BranchSideFuncs:
                - _ZL10get_pubkeyP12shared_statei
                - _ZL11get_privkeyP12shared_statei
                - sshkey_ssh_name
                - xstrdup
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - sshlog
                - sshbuf_len
                - sshlog
                - sshbuf_len
                - sshlog
                - sshbuf_fromb
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:187,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:189,3'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:190,6'
              BranchSideFuncs:
                - _ZL10get_pubkeyP12shared_statei
                - _ZL11get_privkeyP12shared_statei
                - sshkey_ssh_name
                - xstrdup
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - sshlog
                - sshbuf_len
                - sshlog
                - sshbuf_len
                - sshlog
                - sshbuf_fromb
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:190,29'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:191,30'
              BranchSideFuncs:
                - sshbuf_fromb
                - _ZL10get_pubkeyP12shared_statei
                - _ZL11get_privkeyP12shared_statei
                - sshkey_ssh_name
                - xstrdup
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - sshlog
                - sshbuf_len
                - sshlog
                - sshbuf_len
                - sshlog
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:194,22'
              BranchSideFuncs:
                - _ZL10get_pubkeyP12shared_statei
                - _ZL11get_privkeyP12shared_statei
                - sshkey_ssh_name
                - xstrdup
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - sshlog
                - sshbuf_len
                - sshlog
                - sshbuf_len
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:190,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:192,3'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:194,22'
              BranchSideFuncs:
                - _ZL10get_pubkeyP12shared_statei
                - _ZL11get_privkeyP12shared_statei
                - sshkey_ssh_name
                - xstrdup
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - sshlog
                - sshbuf_len
                - sshlog
                - sshbuf_len
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:197,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:198,3'
              BranchSideFuncs:
                - sshbuf_len
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:200,13'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - sshlog
                - sshbuf_len
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:200,13'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:201,3'
              BranchSideFuncs:
                - sshbuf_len
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:204,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:206,2'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:207,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:221,20'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:209,35'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:209,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:210,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:209,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:210,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:212,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:212,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:213,10'
              BranchSideFuncs:
                - strdup
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:214,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:216,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:217,4'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:220,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:222,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:223,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:226,11'
              BranchSideFuncs:
                - ssh_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:226,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:227,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:230,27'
              BranchSideFuncs:
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - ssh_add_hostkey
                - __sanitizer_cov_trace_const_cmp4
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:230,50'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:231,27'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:232,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:230,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:232,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:235,19'
              BranchSideFuncs:
                - _ZL7run_kexP10test_stateP3sshS2_
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
                - ssh_err
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:235,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:235,43'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:236,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
                - free
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:241,2'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:242,19'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:243,14'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ssh_free
                - ssh_free
                - free
      Callsites:
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:188,17'
          Dst:             sshbuf_fromb
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:189,3'
          Dst:             abort
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:191,17'
          Dst:             sshbuf_fromb
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:192,3'
          Dst:             abort
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:194,11'
          Dst:             _ZL10get_pubkeyP12shared_statei
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:195,12'
          Dst:             _ZL11get_privkeyP12shared_statei
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:196,20'
          Dst:             sshkey_ssh_name
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:196,12'
          Dst:             xstrdup
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:198,3'
          Dst:             sshbuf_len
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:198,3'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:201,3'
          Dst:             sshbuf_len
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:201,3'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:204,3'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:216,24'
          Dst:             strdup
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:217,4'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:222,11'
          Dst:             ssh_init
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:223,3'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:223,3'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:226,11'
          Dst:             ssh_init
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:227,3'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:227,3'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:230,11'
          Dst:             ssh_add_hostkey
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:231,11'
          Dst:             ssh_add_hostkey
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:232,3'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:232,3'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:235,11'
          Dst:             _ZL7run_kexP10test_stateP3sshS2_
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:236,3'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:236,3'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:243,2'
          Dst:             sshbuf_free
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:244,2'
          Dst:             sshbuf_free
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:245,2'
          Dst:             sshbuf_free
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:246,2'
          Dst:             ssh_free
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:247,2'
          Dst:             ssh_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strdup
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    27
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ZL6do_kexP12shared_stateP10test_statePKc
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
      linkageType:     InternalLinkage
      functionLinenumber: 400
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.shared_state *'
        - 'struct.test_state *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          36
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - _ZL15do_kex_with_keyP12shared_stateP10test_statePKci
      functionUses:    5
      BranchProfiles:  []
      Callsites:
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:401,2'
          Dst:             _ZL15do_kex_with_keyP12shared_stateP10test_statePKci
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:402,2'
          Dst:             _ZL15do_kex_with_keyP12shared_stateP10test_statePKci
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:403,2'
          Dst:             _ZL15do_kex_with_keyP12shared_stateP10test_statePKci
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:404,2'
          Dst:             _ZL15do_kex_with_keyP12shared_stateP10test_statePKci
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ZL9store_keyP12shared_stateP6sshkeyS2_
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
      linkageType:     InternalLinkage
      functionLinenumber: 125
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.shared_state *'
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         20
      ICount:          181
      EdgeCount:       26
      CyclomaticComplexity: 8
      functionsReached:
        - abort
        - sshkey_ssh_name
        - sshlog
        - xrecallocarray
      functionUses:    1
      BranchProfiles:
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:126,17'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:126,20'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:130,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:126,37'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:126,40'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:130,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:126,63'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:127,6'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:130,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:127,36'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:128,15'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:130,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:128,40'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:129,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshkey_ssh_name
                - sshlog
                - xrecallocarray
                - xrecallocarray
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:131,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshkey_ssh_name
                - sshlog
                - xrecallocarray
                - xrecallocarray
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:126,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:130,3'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:131,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshkey_ssh_name
                - sshlog
                - xrecallocarray
                - xrecallocarray
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:131,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:131,6'
              BranchSideFuncs:
                - xrecallocarray
                - xrecallocarray
                - sshkey_ssh_name
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:132,50'
              BranchSideFuncs:
                - xrecallocarray
                - xrecallocarray
                - sshkey_ssh_name
                - sshlog
      Callsites:
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:130,3'
          Dst:             abort
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:132,35'
          Dst:             xrecallocarray
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:134,36'
          Dst:             xrecallocarray
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:138,2'
          Dst:             sshkey_ssh_name
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:138,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ZL11prepare_keyP12shared_stateii
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
      linkageType:     InternalLinkage
      functionLinenumber: 254
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.shared_state *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         17
      ICount:          140
      EdgeCount:       32
      CyclomaticComplexity: 17
      functionsReached:
        - _ZL9store_keyP12shared_stateP6sshkeyS2_
        - abort
        - ssh_err
        - sshbuf_free
        - sshbuf_from
        - sshkey_new
        - sshkey_parse_private_fileblob
        - sshkey_read
        - sshlog
        - strlen
        - xstrdup
      functionUses:    4
      BranchProfiles:
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:262,2'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:264,10'
              BranchSideFuncs:
                - strlen
                - sshbuf_from
                - sshkey_parse_private_fileblob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - xstrdup
                - sshkey_new
                - sshkey_read
                - __sanitizer_cov_trace_const_cmp4
                - free
                - _ZL9store_keyP12shared_stateP6sshkeyS2_
                - ssh_err
                - sshlog
                - abort
                - abort
                - ssh_err
                - sshlog
                - abort
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:268,10'
              BranchSideFuncs:
                - strlen
                - sshbuf_from
                - sshkey_parse_private_fileblob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - xstrdup
                - sshkey_new
                - sshkey_read
                - __sanitizer_cov_trace_const_cmp4
                - free
                - _ZL9store_keyP12shared_stateP6sshkeyS2_
                - ssh_err
                - sshlog
                - abort
                - abort
                - ssh_err
                - sshlog
                - abort
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:272,10'
              BranchSideFuncs:
                - strlen
                - sshbuf_from
                - sshkey_parse_private_fileblob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - xstrdup
                - sshkey_new
                - sshkey_read
                - __sanitizer_cov_trace_const_cmp4
                - free
                - _ZL9store_keyP12shared_stateP6sshkeyS2_
                - ssh_err
                - sshlog
                - abort
                - abort
                - ssh_err
                - sshlog
                - abort
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:276,10'
              BranchSideFuncs:
                - strlen
                - sshbuf_from
                - sshkey_parse_private_fileblob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - xstrdup
                - sshkey_new
                - sshkey_read
                - __sanitizer_cov_trace_const_cmp4
                - free
                - _ZL9store_keyP12shared_stateP6sshkeyS2_
                - ssh_err
                - sshlog
                - abort
                - abort
                - ssh_err
                - sshlog
                - abort
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:280,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:282,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:283,3'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:284,41'
              BranchSideFuncs:
                - sshkey_parse_private_fileblob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - xstrdup
                - sshkey_new
                - sshkey_read
                - __sanitizer_cov_trace_const_cmp4
                - free
                - _ZL9store_keyP12shared_stateP6sshkeyS2_
                - ssh_err
                - sshlog
                - abort
                - abort
                - ssh_err
                - sshlog
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:284,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:285,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:288,14'
              BranchSideFuncs:
                - sshbuf_free
                - xstrdup
                - sshkey_new
                - sshkey_read
                - __sanitizer_cov_trace_const_cmp4
                - free
                - _ZL9store_keyP12shared_stateP6sshkeyS2_
                - ssh_err
                - sshlog
                - abort
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:290,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:291,3'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:292,23'
              BranchSideFuncs:
                - sshkey_read
                - __sanitizer_cov_trace_const_cmp4
                - free
                - _ZL9store_keyP12shared_stateP6sshkeyS2_
                - ssh_err
                - sshlog
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:292,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:293,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:296,7'
              BranchSideFuncs:
                - free
                - _ZL9store_keyP12shared_stateP6sshkeyS2_
      Callsites:
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:280,3'
          Dst:             abort
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:282,32'
          Dst:             strlen
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:282,11'
          Dst:             sshbuf_from
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:283,3'
          Dst:             abort
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:284,11'
          Dst:             sshkey_parse_private_fileblob
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:285,3'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:285,3'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:286,3'
          Dst:             abort
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:288,2'
          Dst:             sshbuf_free
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:289,13'
          Dst:             xstrdup
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:290,16'
          Dst:             sshkey_new
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:291,3'
          Dst:             abort
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:292,11'
          Dst:             sshkey_read
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:293,3'
          Dst:             ssh_err
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:293,3'
          Dst:             sshlog
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:294,3'
          Dst:             abort
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:298,2'
          Dst:             _ZL9store_keyP12shared_stateP6sshkeyS2_
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strlen
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    70
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ZL9kex_testsP12shared_stateP10test_state
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
      linkageType:     InternalLinkage
      functionLinenumber: 409
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.shared_state *'
        - 'struct.test_state *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          32
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - _ZL6do_kexP12shared_stateP10test_statePKc
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:410,2'
          Dst:             _ZL6do_kexP12shared_stateP10test_statePKc
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:411,2'
          Dst:             _ZL6do_kexP12shared_stateP10test_statePKc
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:412,2'
          Dst:             _ZL6do_kexP12shared_stateP10test_statePKc
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:413,2'
          Dst:             _ZL6do_kexP12shared_stateP10test_statePKc
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:414,2'
          Dst:             _ZL6do_kexP12shared_stateP10test_statePKc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ZL12prepare_keysP12shared_state
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
      linkageType:     InternalLinkage
      functionLinenumber: 145
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.shared_state *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         13
      ICount:          60
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - _ZL11prepare_keyP12shared_stateii
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:146,42'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:147,18'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:150,3'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:147,42'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:148,18'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:150,3'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:148,43'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:149,18'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:150,3'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:146,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:150,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:153,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:146,6'
          Dst:             _ZL11prepare_keyP12shared_stateii
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:147,6'
          Dst:             _ZL11prepare_keyP12shared_stateii
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:148,6'
          Dst:             _ZL11prepare_keyP12shared_stateii
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:149,6'
          Dst:             _ZL11prepare_keyP12shared_stateii
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:150,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    LLVMFuzzerTestOneInput
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
      linkageType:     externalLinkage
      functionLinenumber: 418
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         30
      ICount:          189
      EdgeCount:       39
      CyclomaticComplexity: 11
      functionsReached:
        - _ZL12prepare_keysP12shared_state
        - _ZL9kex_testsP12shared_stateP10test_state
        - abort
        - getenv
        - log_init
        - sshbuf_free
        - sshbuf_new
        - sshbuf_put
        - xcalloc
      functionUses:    0
      BranchProfiles:
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:425,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:426,7'
              BranchSideFuncs:
                - getenv
                - getenv
                - log_init
                - xcalloc
                - _ZL12prepare_keysP12shared_state
                - llvm.memset.p0i8.i64
                - xcalloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - xcalloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - abort
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:435,2'
              BranchSideFuncs:
                - llvm.memset.p0i8.i64
                - xcalloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - xcalloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - abort
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:426,31'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:426,34'
              BranchSideFuncs:
                - log_init
                - xcalloc
                - _ZL12prepare_keysP12shared_state
                - llvm.memset.p0i8.i64
                - xcalloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - xcalloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - abort
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:427,13'
              BranchSideFuncs:
                - log_init
                - xcalloc
                - _ZL12prepare_keysP12shared_state
                - llvm.memset.p0i8.i64
                - xcalloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - xcalloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - abort
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:426,7'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:427,13'
              BranchSideFuncs:
                - log_init
                - xcalloc
                - _ZL12prepare_keysP12shared_state
                - llvm.memset.p0i8.i64
                - xcalloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - xcalloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - abort
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:429,7'
              BranchSideFuncs:
                - log_init
                - xcalloc
                - _ZL12prepare_keysP12shared_state
                - llvm.memset.p0i8.i64
                - xcalloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - xcalloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - abort
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:438,46'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:439,17'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:442,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:439,50'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:440,17'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:442,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:440,60'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:441,17'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:442,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:438,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:442,3'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:443,12'
              BranchSideFuncs:
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - xcalloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:448,46'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:449,17'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:452,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:449,50'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:450,17'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:452,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:450,60'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:451,17'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:452,3'
              BranchSideFuncs:
                - abort
        - Branch String:   'regress/misc/fuzz-harness/kex_fuzz.cc:448,6'
          Branch Sides:
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:452,3'
              BranchSideFuncs:
                - abort
            - BranchSide:      'regress/misc/fuzz-harness/kex_fuzz.cc:453,12'
              BranchSideFuncs:
                - _ZL9kex_testsP12shared_stateP10test_state
                - sshbuf_free
                - free
      Callsites:
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:426,7'
          Dst:             getenv
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:426,34'
          Dst:             getenv
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:428,3'
          Dst:             log_init
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:430,31'
          Dst:             xcalloc
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:431,3'
          Dst:             _ZL12prepare_keysP12shared_state
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:437,28'
          Dst:             xcalloc
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:438,24'
          Dst:             sshbuf_new
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:439,6'
          Dst:             sshbuf_put
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:440,6'
          Dst:             sshbuf_put
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:441,6'
          Dst:             sshbuf_put
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:442,3'
          Dst:             abort
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:443,2'
          Dst:             _ZL9kex_testsP12shared_stateP10test_state
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:444,2'
          Dst:             sshbuf_free
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:447,28'
          Dst:             xcalloc
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:448,24'
          Dst:             sshbuf_new
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:449,6'
          Dst:             sshbuf_put
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:450,6'
          Dst:             sshbuf_put
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:451,6'
          Dst:             sshbuf_put
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:452,3'
          Dst:             abort
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:453,2'
          Dst:             _ZL9kex_testsP12shared_stateP10test_state
        - Src:             'regress/misc/fuzz-harness/kex_fuzz.cc:454,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getenv
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshsk_load_resident
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/ssh-sk-null.cc'
      linkageType:     InternalLinkage
      functionLinenumber: 48
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int '
        - 'struct.sshsk_resident_key ***'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          22
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshsk_sign
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/ssh-sk-null.cc'
      linkageType:     InternalLinkage
      functionLinenumber: 40
      functionDepth:   0
      returnType:      'int '
      argCount:        8
      argTypes:
        - 'char *'
        - 'struct.sshkey *'
        - 'char **'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          28
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshsk_enroll
      functionSourceFile: '/src/openssh/regress/misc/fuzz-harness/ssh-sk-null.cc'
      linkageType:     InternalLinkage
      functionLinenumber: 32
      functionDepth:   0
      returnType:      'int '
      argCount:        10
      argTypes:
        - 'int '
        - 'char *'
        - 'char *'
        - 'char *'
        - 'char *'
        - 'char '
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey **'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          34
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ssh_order_hostkeyalgs
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 513
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         38
      ICount:          256
      EdgeCount:       50
      CyclomaticComplexity: 14
      functionsReached:
        - calloc
        - kex_buf2prop
        - kex_prop2buf
        - kex_prop_free
        - sshkey_is_cert
        - sshkey_type_from_name
        - sshkey_type_plain
        - sshlog
        - strdup
        - strlcat
        - strlen
        - strsep
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh_api.c:521,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:522,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:523,9'
              BranchSideFuncs:
                - strdup
                - strlen
                - calloc
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:524,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:525,5'
              BranchSideFuncs:
                - free
                - free
                - kex_prop_free
            - BranchSide:      'ssh_api.c:528,18'
              BranchSideFuncs:
                - strlen
                - calloc
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:529,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:530,5'
              BranchSideFuncs:
                - free
                - free
                - kex_prop_free
            - BranchSide:      'ssh_api.c:533,3'
              BranchSideFuncs:
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:534,37'
          Branch Sides:
            - BranchSide:      'ssh_api.c:534,41'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - strsep
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
            - BranchSide:      'ssh_api.c:534,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
        - Branch String:   'ssh_api.c:534,2'
          Branch Sides:
            - BranchSide:      'ssh_api.c:535,38'
              BranchSideFuncs:
                - sshkey_type_from_name
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
            - BranchSide:      'ssh_api.c:548,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
        - Branch String:   'ssh_api.c:535,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:536,4'
              BranchSideFuncs:
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:537,3'
              BranchSideFuncs:
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
        - Branch String:   'ssh_api.c:537,3'
          Branch Sides:
            - BranchSide:      'ssh_api.c:534,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
            - BranchSide:      'ssh_api.c:538,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
        - Branch String:   'ssh_api.c:538,30'
          Branch Sides:
            - BranchSide:      'ssh_api.c:539,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
            - BranchSide:      'ssh_api.c:541,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
        - Branch String:   'ssh_api.c:539,32'
          Branch Sides:
            - BranchSide:      'ssh_api.c:539,35'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
            - BranchSide:      'ssh_api.c:546,3'
              BranchSideFuncs:
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
        - Branch String:   'ssh_api.c:538,8'
          Branch Sides:
            - BranchSide:      'ssh_api.c:541,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
            - BranchSide:      'ssh_api.c:546,3'
              BranchSideFuncs:
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
        - Branch String:   'ssh_api.c:541,9'
          Branch Sides:
            - BranchSide:      'ssh_api.c:542,14'
              BranchSideFuncs:
                - strlcat
                - strlcat
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:543,13'
              BranchSideFuncs:
                - strlcat
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - kex_prop_free
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - sshkey_type_from_name
                - __sanitizer_cov_trace_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:548,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:548,18'
              BranchSideFuncs:
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - free
                - free
                - kex_prop_free
            - BranchSide:      'ssh_api.c:549,3'
              BranchSideFuncs:
                - sshlog
                - sshlog
                - free
                - kex_prop2buf
                - free
                - free
                - kex_prop_free
      Callsites:
        - Src:             'ssh_api.c:521,11'
          Dst:             kex_buf2prop
        - Src:             'ssh_api.c:524,24'
          Dst:             strdup
        - Src:             'ssh_api.c:528,11'
          Dst:             strlen
        - Src:             'ssh_api.c:529,17'
          Dst:             calloc
        - Src:             'ssh_api.c:534,16'
          Dst:             strsep
        - Src:             'ssh_api.c:535,16'
          Dst:             sshkey_type_from_name
        - Src:             'ssh_api.c:539,9'
          Dst:             sshkey_is_cert
        - Src:             'ssh_api.c:540,8'
          Dst:             sshkey_type_plain
        - Src:             'ssh_api.c:542,6'
          Dst:             strlcat
        - Src:             'ssh_api.c:543,5'
          Dst:             strlcat
        - Src:             'ssh_api.c:549,3'
          Dst:             sshlog
        - Src:             'ssh_api.c:550,3'
          Dst:             sshlog
        - Src:             'ssh_api.c:554,7'
          Dst:             kex_prop2buf
        - Src:             'ssh_api.c:559,2'
          Dst:             kex_prop_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    calloc
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'size_t '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    48
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strsep
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char **'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    25
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ssh_send_banner
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 409
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         12
      ICount:          81
      EdgeCount:       16
      CyclomaticComplexity: 6
      functionsReached:
        - ssh_packet_get_output
        - sshbuf_consume_end
        - sshbuf_dup_string
        - sshbuf_putb
        - sshbuf_putf
        - sshlog
      functionUses:    2
      BranchProfiles:
        - Branch String:   'ssh_api.c:413,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:414,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:415,45'
              BranchSideFuncs:
                - ssh_packet_get_output
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - free
        - Branch String:   'ssh_api.c:415,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:416,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:418,30'
              BranchSideFuncs:
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - free
        - Branch String:   'ssh_api.c:418,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:419,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:420,30'
              BranchSideFuncs:
                - sshbuf_dup_string
                - sshlog
                - free
        - Branch String:   'ssh_api.c:420,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:421,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:422,2'
              BranchSideFuncs:
                - sshlog
                - free
      Callsites:
        - Src:             'ssh_api.c:413,11'
          Dst:             sshbuf_putf
        - Src:             'ssh_api.c:415,23'
          Dst:             ssh_packet_get_output
        - Src:             'ssh_api.c:415,11'
          Dst:             sshbuf_putb
        - Src:             'ssh_api.c:418,11'
          Dst:             sshbuf_consume_end
        - Src:             'ssh_api.c:420,12'
          Dst:             sshbuf_dup_string
        - Src:             'ssh_api.c:422,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ssh_read_banner
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 326
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         51
      ICount:          300
      EdgeCount:       69
      CyclomaticComplexity: 20
      functionsReached:
        - __isoc99_sscanf
        - calloc
        - compat_banner
        - memcmp
        - ssh_packet_get_input
        - ssh_packet_get_output
        - sshbuf_consume
        - sshbuf_dup_string
        - sshbuf_len
        - sshbuf_ptr
        - sshbuf_put
        - sshbuf_put_u8
        - sshbuf_reset
        - sshlog
        - strlen
      functionUses:    2
      BranchProfiles:
        - Branch String:   'ssh_api.c:339,8'
          Branch Sides:
            - BranchSide:      'ssh_api.c:340,5'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:341,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_ptr
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:342,8'
          Branch Sides:
            - BranchSide:      'ssh_api.c:343,15'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_ptr
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:346,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_ptr
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:346,8'
          Branch Sides:
            - BranchSide:      'ssh_api.c:347,5'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_ptr
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:348,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_ptr
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:348,8'
          Branch Sides:
            - BranchSide:      'ssh_api.c:349,5'
              BranchSideFuncs:
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:350,27'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_ptr
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:350,8'
          Branch Sides:
            - BranchSide:      'ssh_api.c:351,12'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:352,19'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_ptr
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:352,8'
          Branch Sides:
            - BranchSide:      'ssh_api.c:338,3'
              BranchSideFuncs:
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:353,5'
              BranchSideFuncs:
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:355,31'
          Branch Sides:
            - BranchSide:      'ssh_api.c:356,25'
              BranchSideFuncs:
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_ptr
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:358,3'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_ptr
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:355,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:357,4'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:358,3'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_ptr
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:361,24'
          Branch Sides:
            - BranchSide:      'ssh_api.c:361,59'
              BranchSideFuncs:
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:361,27'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_ptr
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:361,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:335,2'
              BranchSideFuncs:
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:361,59'
              BranchSideFuncs:
                - ssh_packet_get_output
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:363,8'
          Branch Sides:
            - BranchSide:      'ssh_api.c:365,12'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:366,4'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:369,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:370,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:373,30'
              BranchSideFuncs:
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:373,47'
          Branch Sides:
            - BranchSide:      'ssh_api.c:374,45'
              BranchSideFuncs:
                - free
                - free
            - BranchSide:      'ssh_api.c:375,5'
              BranchSideFuncs:
                - free
                - free
        - Branch String:   'ssh_api.c:373,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:375,5'
              BranchSideFuncs:
                - free
                - free
            - BranchSide:      'ssh_api.c:383,13'
              BranchSideFuncs:
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:383,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:385,5'
              BranchSideFuncs:
                - free
                - free
            - BranchSide:      'ssh_api.c:388,2'
              BranchSideFuncs:
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:392,25'
          Branch Sides:
            - BranchSide:      'ssh_api.c:392,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
            - BranchSide:      'ssh_api.c:396,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
        - Branch String:   'ssh_api.c:392,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:393,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
            - BranchSide:      'ssh_api.c:396,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
        - Branch String:   'ssh_api.c:396,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:397,5'
              BranchSideFuncs:
                - sshlog
                - free
                - free
            - BranchSide:      'ssh_api.c:399,2'
              BranchSideFuncs:
                - sshlog
                - free
                - free
      Callsites:
        - Src:             'ssh_api.c:327,25'
          Dst:             ssh_packet_get_input
        - Src:             'ssh_api.c:329,20'
          Dst:             sshbuf_ptr
        - Src:             'ssh_api.c:336,3'
          Dst:             sshbuf_reset
        - Src:             'ssh_api.c:339,13'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:350,13'
          Dst:             sshbuf_put_u8
        - Src:             'ssh_api.c:352,8'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:355,7'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:356,14'
          Dst:             sshbuf_ptr
        - Src:             'ssh_api.c:356,7'
          Dst:             memcmp
        - Src:             'ssh_api.c:358,3'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:358,3'
          Dst:             sshbuf_ptr
        - Src:             'ssh_api.c:358,3'
          Dst:             sshlog
        - Src:             'ssh_api.c:363,24'
          Dst:             ssh_packet_get_output
        - Src:             'ssh_api.c:364,18'
          Dst:             strlen
        - Src:             'ssh_api.c:363,13'
          Dst:             sshbuf_put
        - Src:             'ssh_api.c:369,11'
          Dst:             sshbuf_consume
        - Src:             'ssh_api.c:373,12'
          Dst:             sshbuf_dup_string
        - Src:             'ssh_api.c:374,34'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:374,24'
          Dst:             calloc
        - Src:             'ssh_api.c:383,6'
          Dst:             __isoc99_sscanf
        - Src:             'ssh_api.c:388,2'
          Dst:             sshlog
        - Src:             'ssh_api.c:391,2'
          Dst:             compat_banner
        - Src:             'ssh_api.c:399,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    memcmp
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    11
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    __isoc99_sscanf
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_input_space
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 319
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          25
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_packet_get_input
        - sshbuf_check_reserve
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh_api.c:320,36'
          Dst:             ssh_packet_get_input
        - Src:             'ssh_api.c:320,15'
          Dst:             sshbuf_check_reserve
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_output_space
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 313
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          25
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_packet_get_output
        - sshbuf_check_reserve
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh_api.c:314,36'
          Dst:             ssh_packet_get_output
        - Src:             'ssh_api.c:314,15'
          Dst:             sshbuf_check_reserve
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_output_consume
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 307
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          22
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_packet_get_output
        - sshbuf_consume
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh_api.c:308,24'
          Dst:             ssh_packet_get_output
        - Src:             'ssh_api.c:308,9'
          Dst:             sshbuf_consume
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_output_ptr
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 298
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          29
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_packet_get_output
        - sshbuf_len
        - sshbuf_ptr
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh_api.c:299,26'
          Dst:             ssh_packet_get_output
        - Src:             'ssh_api.c:301,9'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:302,9'
          Dst:             sshbuf_ptr
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_put
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 286
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.ssh *'
        - 'int '
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          69
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - sshpkt_put
        - sshpkt_send
        - sshpkt_start
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh_api.c:289,41'
          Branch Sides:
            - BranchSide:      'ssh_api.c:290,22'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:292,10'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:290,44'
          Branch Sides:
            - BranchSide:      'ssh_api.c:291,23'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:292,10'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:289,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:292,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:293,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh_api.c:289,11'
          Dst:             sshpkt_start
        - Src:             'ssh_api.c:290,11'
          Dst:             sshpkt_put
        - Src:             'ssh_api.c:291,11'
          Dst:             sshpkt_send
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_payload
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 280
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshpkt_ptr
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh_api.c:281,9'
          Dst:             sshpkt_ptr
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ssh_exchange_banner
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 429
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         39
      ICount:          240
      EdgeCount:       53
      CyclomaticComplexity: 16
      functionsReached:
        - _ssh_order_hostkeyalgs
        - _ssh_read_banner
        - _ssh_send_banner
        - kex_send_kexinit
        - sshbuf_len
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh_api.c:439,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:440,18'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_read_banner
                - _ssh_send_banner
            - BranchSide:      'ssh_api.c:447,18'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_send_banner
                - _ssh_read_banner
        - Branch String:   'ssh_api.c:440,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:441,25'
              BranchSideFuncs:
                - _ssh_send_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_read_banner
            - BranchSide:      'ssh_api.c:442,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_read_banner
        - Branch String:   'ssh_api.c:442,14'
          Branch Sides:
            - BranchSide:      'ssh_api.c:443,18'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_read_banner
            - BranchSide:      'ssh_api.c:446,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:443,49'
          Branch Sides:
            - BranchSide:      'ssh_api.c:444,18'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - _ssh_read_banner
            - BranchSide:      'ssh_api.c:446,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:442,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:445,25'
              BranchSideFuncs:
                - _ssh_read_banner
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:446,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:447,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:448,25'
              BranchSideFuncs:
                - _ssh_read_banner
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_send_banner
            - BranchSide:      'ssh_api.c:449,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_send_banner
        - Branch String:   'ssh_api.c:454,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:455,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:457,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:457,48'
          Branch Sides:
            - BranchSide:      'ssh_api.c:458,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:463,2'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:457,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:459,35'
              BranchSideFuncs:
                - _ssh_order_hostkeyalgs
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:463,2'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:459,46'
          Branch Sides:
            - BranchSide:      'ssh_api.c:460,29'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:461,11'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:459,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:461,11'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:462,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh_api.c:440,7'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:441,8'
          Dst:             _ssh_send_banner
        - Src:             'ssh_api.c:443,7'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:444,7'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:445,8'
          Dst:             _ssh_read_banner
        - Src:             'ssh_api.c:447,7'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:448,8'
          Dst:             _ssh_read_banner
        - Src:             'ssh_api.c:450,7'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:451,7'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:452,8'
          Dst:             _ssh_send_banner
        - Src:             'ssh_api.c:457,6'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:458,6'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:459,12'
          Dst:             _ssh_order_hostkeyalgs
        - Src:             'ssh_api.c:460,12'
          Dst:             kex_send_kexinit
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_next
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 239
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         26
      ICount:          151
      EdgeCount:       35
      CyclomaticComplexity: 11
      functionsReached:
        - _ssh_exchange_banner
        - ssh_packet_read_poll2
        - sshbuf_len
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh_api.c:249,48'
          Branch Sides:
            - BranchSide:      'ssh_api.c:250,17'
              BranchSideFuncs:
                - _ssh_exchange_banner
            - BranchSide:      'ssh_api.c:251,31'
              BranchSideFuncs:
                - _ssh_exchange_banner
        - Branch String:   'ssh_api.c:249,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:251,31'
              BranchSideFuncs:
                - _ssh_exchange_banner
            - BranchSide:      'ssh_api.c:263,2'
              BranchSideFuncs:
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:264,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:265,11'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:266,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:266,16'
          Branch Sides:
            - BranchSide:      'ssh_api.c:266,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:272,13'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:266,39'
          Branch Sides:
            - BranchSide:      'ssh_api.c:267,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:272,13'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:267,32'
          Branch Sides:
            - BranchSide:      'ssh_api.c:267,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:272,13'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:267,66'
          Branch Sides:
            - BranchSide:      'ssh_api.c:268,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:272,13'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:266,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:269,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:272,13'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:269,8'
          Branch Sides:
            - BranchSide:      'ssh_api.c:270,12'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:271,3'
              BranchSideFuncs:
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'ssh_api.c:249,6'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:250,6'
          Dst:             sshbuf_len
        - Src:             'ssh_api.c:251,10'
          Dst:             _ssh_exchange_banner
        - Src:             'ssh_api.c:264,12'
          Dst:             ssh_packet_read_poll2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_input_append
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 233
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          26
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_packet_get_input
        - sshbuf_put
      functionUses:    3
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh_api.c:234,20'
          Dst:             ssh_packet_get_input
        - Src:             'ssh_api.c:234,9'
          Dst:             sshbuf_put
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_set_verify_host_key_callback
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 222
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'func_type *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         7
      ICount:          41
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh_api.c:223,17'
          Branch Sides:
            - BranchSide:      'ssh_api.c:223,20'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:224,3'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:223,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:224,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:226,30'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_add_hostkey
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 187
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         22
      ICount:          191
      EdgeCount:       27
      CyclomaticComplexity: 7
      functionsReached:
        - sshkey_free
        - sshkey_from_private
      functionUses:    2
      BranchProfiles:
        - Branch String:   'ssh_api.c:192,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:193,32'
              BranchSideFuncs:
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - malloc
                - free
                - sshkey_free
            - BranchSide:      'ssh_api.c:209,12'
              BranchSideFuncs:
                - malloc
        - Branch String:   'ssh_api.c:193,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:194,11'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:195,12'
              BranchSideFuncs:
                - malloc
                - malloc
                - free
                - sshkey_free
        - Branch String:   'ssh_api.c:195,40'
          Branch Sides:
            - BranchSide:      'ssh_api.c:196,16'
              BranchSideFuncs:
                - free
                - sshkey_free
            - BranchSide:      'ssh_api.c:197,9'
              BranchSideFuncs:
                - free
                - sshkey_free
        - Branch String:   'ssh_api.c:195,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:197,9'
              BranchSideFuncs:
                - free
                - sshkey_free
            - BranchSide:      'ssh_api.c:201,16'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:209,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:210,4'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:211,12'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh_api.c:193,12'
          Dst:             sshkey_from_private
        - Src:             'ssh_api.c:198,4'
          Dst:             sshkey_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_get_app_data
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 180
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_set_app_data
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 174
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ssh_verify_host_key
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 498
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         10
      ICount:          66
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_equal_public
        - sshkey_type
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh_api.c:502,2'
          Branch Sides:
            - BranchSide:      'ssh_api.c:503,3'
              BranchSideFuncs:
                - sshkey_type
                - sshlog
                - sshkey_equal_public
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:507,2'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:504,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:505,4'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:506,2'
              BranchSideFuncs:
                - sshkey_type
                - sshlog
                - sshkey_equal_public
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'ssh_api.c:501,2'
          Dst:             sshkey_type
        - Src:             'ssh_api.c:501,2'
          Dst:             sshlog
        - Src:             'ssh_api.c:503,3'
          Dst:             sshkey_type
        - Src:             'ssh_api.c:503,3'
          Dst:             sshlog
        - Src:             'ssh_api.c:504,7'
          Dst:             sshkey_equal_public
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ssh_host_key_sign
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 567
      functionDepth:   0
      returnType:      'int '
      argCount:        8
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshkey *'
        - 'struct.sshkey *'
        - 'char **'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          45
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshkey_sign
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh_api.c:568,9'
          Dst:             sshkey_sign
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ssh_host_private_key
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 483
      functionDepth:   0
      returnType:      'struct.sshkey *'
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         16
      ICount:          98
      EdgeCount:       20
      CyclomaticComplexity: 6
      functionsReached:
        - sshkey_type
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh_api.c:487,2'
          Branch Sides:
            - BranchSide:      'ssh_api.c:488,3'
              BranchSideFuncs:
                - sshkey_type
                - sshlog
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'ssh_api.c:493,2'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:489,28'
          Branch Sides:
            - BranchSide:      'ssh_api.c:490,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshkey_type
                - sshlog
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'ssh_api.c:492,2'
              BranchSideFuncs:
                - sshkey_type
                - sshlog
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'ssh_api.c:490,26'
          Branch Sides:
            - BranchSide:      'ssh_api.c:490,29'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:491,12'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:489,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:491,12'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:492,2'
              BranchSideFuncs:
                - sshkey_type
                - sshlog
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
      Callsites:
        - Src:             'ssh_api.c:486,2'
          Dst:             sshlog
        - Src:             'ssh_api.c:488,3'
          Dst:             sshkey_type
        - Src:             'ssh_api.c:488,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ssh_host_public_key
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 468
      functionDepth:   0
      returnType:      'struct.sshkey *'
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         16
      ICount:          98
      EdgeCount:       20
      CyclomaticComplexity: 6
      functionsReached:
        - sshkey_type
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh_api.c:472,2'
          Branch Sides:
            - BranchSide:      'ssh_api.c:473,3'
              BranchSideFuncs:
                - sshkey_type
                - sshlog
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'ssh_api.c:478,2'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:474,28'
          Branch Sides:
            - BranchSide:      'ssh_api.c:475,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshkey_type
                - sshlog
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'ssh_api.c:477,2'
              BranchSideFuncs:
                - sshkey_type
                - sshlog
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'ssh_api.c:475,26'
          Branch Sides:
            - BranchSide:      'ssh_api.c:475,29'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:476,12'
              BranchSideFuncs: []
        - Branch String:   'ssh_api.c:474,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:476,12'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:477,2'
              BranchSideFuncs:
                - sshkey_type
                - sshlog
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
      Callsites:
        - Src:             'ssh_api.c:471,2'
          Dst:             sshlog
        - Src:             'ssh_api.c:473,3'
          Dst:             sshkey_type
        - Src:             'ssh_api.c:473,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_free
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 148
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         27
      ICount:          176
      EdgeCount:       34
      CyclomaticComplexity: 9
      functionsReached:
        - ssh_packet_close
        - sshkey_free
      functionUses:    3
      BranchProfiles:
        - Branch String:   'ssh_api.c:151,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:152,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:158,2'
              BranchSideFuncs:
                - ssh_packet_close
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
        - Branch String:   'ssh_api.c:158,2'
          Branch Sides:
            - BranchSide:      'ssh_api.c:159,3'
              BranchSideFuncs:
                - free
                - ssh_packet_close
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
            - BranchSide:      'ssh_api.c:164,2'
              BranchSideFuncs:
                - ssh_packet_close
                - free
                - free
        - Branch String:   'ssh_api.c:159,3'
          Branch Sides:
            - BranchSide:      'ssh_api.c:159,3'
              BranchSideFuncs:
                - free
                - ssh_packet_close
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
            - BranchSide:      'ssh_api.c:159,3'
              BranchSideFuncs:
                - free
                - ssh_packet_close
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
        - Branch String:   'ssh_api.c:160,16'
          Branch Sides:
            - BranchSide:      'ssh_api.c:160,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_packet_close
                - free
                - free
                - sshkey_free
            - BranchSide:      'ssh_api.c:162,8'
              BranchSideFuncs:
                - free
                - ssh_packet_close
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
        - Branch String:   'ssh_api.c:160,7'
          Branch Sides:
            - BranchSide:      'ssh_api.c:161,16'
              BranchSideFuncs:
                - sshkey_free
                - free
                - ssh_packet_close
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh_api.c:162,8'
              BranchSideFuncs:
                - free
                - ssh_packet_close
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
        - Branch String:   'ssh_api.c:164,2'
          Branch Sides:
            - BranchSide:      'ssh_api.c:165,3'
              BranchSideFuncs:
                - free
                - ssh_packet_close
                - free
            - BranchSide:      'ssh_api.c:168,19'
              BranchSideFuncs:
                - ssh_packet_close
                - free
        - Branch String:   'ssh_api.c:165,3'
          Branch Sides:
            - BranchSide:      'ssh_api.c:165,3'
              BranchSideFuncs:
                - free
                - ssh_packet_close
                - free
            - BranchSide:      'ssh_api.c:165,3'
              BranchSideFuncs:
                - free
                - ssh_packet_close
                - free
      Callsites:
        - Src:             'ssh_api.c:161,4'
          Dst:             sshkey_free
        - Src:             'ssh_api.c:168,2'
          Dst:             ssh_packet_close
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_init
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 83
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh **'
        - 'int '
        - 'struct.kex_params *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         20
      ICount:          264
      EdgeCount:       26
      CyclomaticComplexity: 8
      functionsReached:
        - _ssh_host_key_sign
        - _ssh_host_private_key
        - _ssh_host_public_key
        - _ssh_verify_host_key
        - kex_ready
        - seed_rng
        - ssh_free
        - ssh_packet_set_connection
        - ssh_packet_set_server
      functionUses:    2
      BranchProfiles:
        - Branch String:   'ssh_api.c:90,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:91,3'
              BranchSideFuncs:
                - ssh_packet_set_connection
                - __sanitizer_cov_trace_const_cmp4
                - kex_ready
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_free
                - ssh_packet_set_server
            - BranchSide:      'ssh_api.c:95,13'
              BranchSideFuncs:
                - ssh_packet_set_connection
                - __sanitizer_cov_trace_const_cmp4
                - kex_ready
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_free
                - ssh_packet_set_server
        - Branch String:   'ssh_api.c:95,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:96,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:97,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_ready
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_free
                - ssh_packet_set_server
        - Branch String:   'ssh_api.c:97,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:98,25'
              BranchSideFuncs:
                - ssh_packet_set_server
                - kex_ready
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_free
            - BranchSide:      'ssh_api.c:101,13'
              BranchSideFuncs:
                - kex_ready
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_free
        - Branch String:   'ssh_api.c:101,13'
          Branch Sides:
            - BranchSide:      'ssh_api.c:101,26'
              BranchSideFuncs:
                - kex_ready
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_free
            - BranchSide:      'ssh_api.c:101,49'
              BranchSideFuncs:
                - kex_ready
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_free
        - Branch String:   'ssh_api.c:102,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:103,12'
              BranchSideFuncs:
                - ssh_free
            - BranchSide:      'ssh_api.c:106,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh_api.c:107,6'
          Branch Sides:
            - BranchSide:      'ssh_api.c:109,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh_api.c:127,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh_api.c:91,3'
          Dst:             seed_rng
        - Src:             'ssh_api.c:95,13'
          Dst:             ssh_packet_set_connection
        - Src:             'ssh_api.c:98,3'
          Dst:             ssh_packet_set_server
        - Src:             'ssh_api.c:102,11'
          Dst:             kex_ready
        - Src:             'ssh_api.c:103,3'
          Dst:             ssh_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mm_choose_dh
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 74
      functionDepth:   0
      returnType:      'struct.dh_st *'
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          13
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mm_sshkey_sign
      functionSourceFile: '/src/openssh/ssh_api.c'
      linkageType:     InternalLinkage
      functionLinenumber: 67
      functionDepth:   0
      returnType:      'int '
      argCount:        9
      argTypes:
        - 'struct.sshkey *'
        - 'char **'
        - 'int *'
        - 'char *'
        - 'int '
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          31
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_err
      functionSourceFile: '/src/openssh/ssherr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 24
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         66
      ICount:          333
      EdgeCount:       131
      CyclomaticComplexity: 67
      functionsReached:
        - __errno_location
      functionUses:    37
      BranchProfiles:
        - Branch String:   'ssherr.c:25,2'
          Branch Sides:
            - BranchSide:      'ssherr.c:27,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:29,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:31,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:33,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:35,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:37,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:39,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:41,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:43,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:45,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:47,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:49,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:51,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:53,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:55,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:57,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:59,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:61,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:63,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:65,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:67,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:69,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:71,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:73,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:75,19'
              BranchSideFuncs:
                - __errno_location
                - strerror
            - BranchSide:      'ssherr.c:77,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:79,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:81,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:83,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:85,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:87,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:89,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:91,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:93,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:95,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:97,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:99,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:101,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:103,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:105,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:107,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:109,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:111,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:113,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:115,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:117,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:119,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:121,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:123,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:125,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:127,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:129,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:131,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:133,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:135,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:137,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:139,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:141,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:143,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:145,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:147,3'
              BranchSideFuncs: []
            - BranchSide:      'ssherr.c:149,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssherr.c:75,19'
          Dst:             __errno_location
        - Src:             'ssherr.c:75,10'
          Dst:             strerror
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    __errno_location
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    128
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strerror
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    53
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_consume_end
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 413
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         10
      ICount:          64
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - sshbuf_check_sanity
        - sshbuf_len
      functionUses:    7
      BranchProfiles:
        - Branch String:   'sshbuf.c:417,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:418,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:419,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf.c:419,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:420,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:421,6'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf.c:421,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:422,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:423,15'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:417,11'
          Dst:             sshbuf_check_sanity
        - Src:             'sshbuf.c:421,12'
          Dst:             sshbuf_len
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_check_sanity
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 56
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         26
      ICount:          147
      EdgeCount:       36
      CyclomaticComplexity: 12
      functionsReached:
        - raise
        - ssh_signal
      functionUses:    13
      BranchProfiles:
        - Branch String:   'sshbuf.c:58,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
        - Branch String:   'sshbuf.c:58,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
        - Branch String:   'sshbuf.c:58,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
        - Branch String:   'sshbuf.c:58,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
        - Branch String:   'sshbuf.c:58,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
        - Branch String:   'sshbuf.c:58,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
        - Branch String:   'sshbuf.c:58,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
        - Branch String:   'sshbuf.c:58,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
        - Branch String:   'sshbuf.c:58,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
            - BranchSide:      'sshbuf.c:58,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_signal
                - raise
        - Branch String:   'sshbuf.c:58,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:68,3'
              BranchSideFuncs:
                - ssh_signal
                - raise
            - BranchSide:      'sshbuf.c:72,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:68,3'
          Dst:             ssh_signal
        - Src:             'sshbuf.c:69,3'
          Dst:             raise
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_len
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 282
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          38
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_check_sanity
      functionUses:    157
      BranchProfiles:
        - Branch String:   'sshbuf.c:283,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:284,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:285,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:283,6'
          Dst:             sshbuf_check_sanity
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    raise
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_consume
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 393
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         13
      ICount:          84
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - sshbuf_check_sanity
        - sshbuf_len
      functionUses:    24
      BranchProfiles:
        - Branch String:   'sshbuf.c:397,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:398,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:399,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf.c:399,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:400,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:401,6'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf.c:401,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:402,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:403,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf.c:405,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:406,14'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:408,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:397,11'
          Dst:             sshbuf_check_sanity
        - Src:             'sshbuf.c:401,12'
          Dst:             sshbuf_len
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_reserve
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 373
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          82
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - sshbuf_allocate
      functionUses:    25
      BranchProfiles:
        - Branch String:   'sshbuf.c:377,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:378,4'
              BranchSideFuncs:
                - sshbuf_allocate
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf.c:381,27'
              BranchSideFuncs:
                - sshbuf_allocate
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf.c:381,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:382,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:384,7'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:386,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:387,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:388,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:381,11'
          Dst:             sshbuf_allocate
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_allocate
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 330
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         15
      ICount:          154
      EdgeCount:       20
      CyclomaticComplexity: 7
      functionsReached:
        - recallocarray
        - sshbuf_check_reserve
        - sshbuf_maybe_pack
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshbuf.c:336,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:337,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:342,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshbuf_maybe_pack
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - recallocarray
                - sshbuf_check_reserve
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf.c:344,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:345,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:351,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - recallocarray
                - sshbuf_check_reserve
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf.c:354,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:355,10'
              BranchSideFuncs:
                - recallocarray
                - sshbuf_check_reserve
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf.c:357,26'
              BranchSideFuncs:
                - recallocarray
                - sshbuf_check_reserve
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf.c:357,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:359,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:361,15'
              BranchSideFuncs:
                - sshbuf_check_reserve
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf.c:363,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:365,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:368,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:336,11'
          Dst:             sshbuf_check_reserve
        - Src:             'sshbuf.c:342,2'
          Dst:             sshbuf_maybe_pack
        - Src:             'sshbuf.c:357,12'
          Dst:             recallocarray
        - Src:             'sshbuf.c:363,11'
          Dst:             sshbuf_check_reserve
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_check_reserve
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 314
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         16
      ICount:          92
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - sshbuf_check_sanity
      functionUses:    4
      BranchProfiles:
        - Branch String:   'sshbuf.c:317,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:318,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:319,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf.c:319,20'
          Branch Sides:
            - BranchSide:      'sshbuf.c:319,23'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:320,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:319,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:320,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:323,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf.c:323,26'
          Branch Sides:
            - BranchSide:      'sshbuf.c:323,29'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:324,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:323,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:324,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:325,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:317,11'
          Dst:             sshbuf_check_sanity
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_maybe_pack
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 77
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         16
      ICount:          107
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshbuf.c:80,20'
          Branch Sides:
            - BranchSide:      'sshbuf.c:80,23'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:81,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:80,37'
          Branch Sides:
            - BranchSide:      'sshbuf.c:80,40'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:81,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:80,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:81,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:82,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memmove.p0i8.p0i8.i64
        - Branch String:   'sshbuf.c:82,12'
          Branch Sides:
            - BranchSide:      'sshbuf.c:83,7'
              BranchSideFuncs:
                - llvm.memmove.p0i8.p0i8.i64
            - BranchSide:      'sshbuf.c:84,11'
              BranchSideFuncs:
                - llvm.memmove.p0i8.p0i8.i64
        - Branch String:   'sshbuf.c:83,35'
          Branch Sides:
            - BranchSide:      'sshbuf.c:83,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memmove.p0i8.p0i8.i64
            - BranchSide:      'sshbuf.c:83,35'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:82,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:82,6'
              BranchSideFuncs:
                - llvm.memmove.p0i8.p0i8.i64
            - BranchSide:      'sshbuf.c:84,11'
              BranchSideFuncs:
                - llvm.memmove.p0i8.p0i8.i64
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_mutable_ptr
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 306
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         11
      ICount:          59
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - sshbuf_check_sanity
      functionUses:    10
      BranchProfiles:
        - Branch String:   'sshbuf.c:307,36'
          Branch Sides:
            - BranchSide:      'sshbuf.c:307,39'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:308,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:307,53'
          Branch Sides:
            - BranchSide:      'sshbuf.c:307,56'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:308,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:307,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:308,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:309,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:307,6'
          Dst:             sshbuf_check_sanity
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_avail
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 290
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         11
      ICount:          63
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - sshbuf_check_sanity
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf.c:291,36'
          Branch Sides:
            - BranchSide:      'sshbuf.c:291,39'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:292,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:291,53'
          Branch Sides:
            - BranchSide:      'sshbuf.c:291,56'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:292,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:291,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:292,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:293,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:291,6'
          Dst:             sshbuf_check_sanity
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_set_max_size
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 244
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         30
      ICount:          200
      EdgeCount:       41
      CyclomaticComplexity: 13
      functionsReached:
        - recallocarray
        - sshbuf_check_sanity
        - sshbuf_maybe_pack
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf.c:250,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:251,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:252,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_maybe_pack
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - recallocarray
        - Branch String:   'sshbuf.c:252,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:253,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:254,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_maybe_pack
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - recallocarray
        - Branch String:   'sshbuf.c:254,20'
          Branch Sides:
            - BranchSide:      'sshbuf.c:254,23'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:255,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:254,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:255,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:256,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_maybe_pack
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - recallocarray
        - Branch String:   'sshbuf.c:256,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:257,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:259,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshbuf_maybe_pack
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - recallocarray
        - Branch String:   'sshbuf.c:260,28'
          Branch Sides:
            - BranchSide:      'sshbuf.c:260,31'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - recallocarray
            - BranchSide:      'sshbuf.c:274,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf.c:260,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:261,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - recallocarray
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshbuf.c:274,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf.c:261,7'
          Branch Sides:
            - BranchSide:      'sshbuf.c:262,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - recallocarray
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshbuf.c:264,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - recallocarray
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf.c:265,7'
          Branch Sides:
            - BranchSide:      'sshbuf.c:266,11'
              BranchSideFuncs:
                - recallocarray
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshbuf.c:268,27'
              BranchSideFuncs:
                - recallocarray
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf.c:268,7'
          Branch Sides:
            - BranchSide:      'sshbuf.c:269,4'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:270,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf.c:274,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:275,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:276,18'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:250,11'
          Dst:             sshbuf_check_sanity
        - Src:             'sshbuf.c:259,2'
          Dst:             sshbuf_maybe_pack
        - Src:             'sshbuf.c:268,13'
          Dst:             recallocarray
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_refcount
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 238
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_parent
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 232
      functionDepth:   0
      returnType:      'struct.sshbuf *'
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_alloc
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 226
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_max_size
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 220
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_reset
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 197
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         17
      ICount:          105
      EdgeCount:       22
      CyclomaticComplexity: 7
      functionsReached:
        - explicit_bzero
        - recallocarray
        - sshbuf_check_sanity
      functionUses:    29
      BranchProfiles:
        - Branch String:   'sshbuf.c:200,20'
          Branch Sides:
            - BranchSide:      'sshbuf.c:200,23'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:202,14'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:200,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:202,14'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:205,26'
              BranchSideFuncs:
                - sshbuf_check_sanity
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - explicit_bzero
                - recallocarray
        - Branch String:   'sshbuf.c:205,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:206,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:207,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - explicit_bzero
                - recallocarray
        - Branch String:   'sshbuf.c:208,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:209,26'
              BranchSideFuncs:
                - recallocarray
                - explicit_bzero
            - BranchSide:      'sshbuf.c:215,17'
              BranchSideFuncs:
                - explicit_bzero
        - Branch String:   'sshbuf.c:209,7'
          Branch Sides:
            - BranchSide:      'sshbuf.c:211,23'
              BranchSideFuncs:
                - explicit_bzero
            - BranchSide:      'sshbuf.c:214,2'
              BranchSideFuncs:
                - explicit_bzero
      Callsites:
        - Src:             'sshbuf.c:205,6'
          Dst:             sshbuf_check_sanity
        - Src:             'sshbuf.c:209,12'
          Dst:             recallocarray
        - Src:             'sshbuf.c:215,2'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    explicit_bzero
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    74
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_free
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 160
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         13
      ICount:          81
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - explicit_bzero
        - freezero
        - sshbuf_check_sanity
        - sshbuf_free
      functionUses:    135
      BranchProfiles:
        - Branch String:   'sshbuf.c:161,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:162,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:169,26'
              BranchSideFuncs:
                - sshbuf_check_sanity
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - freezero
        - Branch String:   'sshbuf.c:169,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:170,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:177,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - freezero
        - Branch String:   'sshbuf.c:178,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:179,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:185,14'
              BranchSideFuncs:
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - freezero
        - Branch String:   'sshbuf.c:188,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:189,18'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'sshbuf.c:192,11'
              BranchSideFuncs:
                - freezero
      Callsites:
        - Src:             'sshbuf.c:169,6'
          Dst:             sshbuf_check_sanity
        - Src:             'sshbuf.c:185,2'
          Dst:             sshbuf_free
        - Src:             'sshbuf.c:189,3'
          Dst:             explicit_bzero
        - Src:             'sshbuf.c:192,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_ptr
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 298
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          38
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_check_sanity
      functionUses:    81
      BranchProfiles:
        - Branch String:   'sshbuf.c:299,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:300,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:301,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:299,6'
          Dst:             sshbuf_check_sanity
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_fromb
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 144
      functionDepth:   0
      returnType:      'struct.sshbuf *'
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          60
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - sshbuf_check_sanity
        - sshbuf_free
        - sshbuf_ptr
        - sshbuf_set_parent
      functionUses:    7
      BranchProfiles:
        - Branch String:   'sshbuf.c:147,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:148,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:149,36'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_from
                - sshbuf_set_parent
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
        - Branch String:   'sshbuf.c:149,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:150,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:151,24'
              BranchSideFuncs:
                - sshbuf_set_parent
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
        - Branch String:   'sshbuf.c:151,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:152,15'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshbuf.c:155,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:147,6'
          Dst:             sshbuf_check_sanity
        - Src:             'sshbuf.c:149,25'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf.c:149,42'
          Dst:             sshbuf_len
        - Src:             'sshbuf.c:149,13'
          Dst:             sshbuf_from
        - Src:             'sshbuf.c:151,6'
          Dst:             sshbuf_set_parent
        - Src:             'sshbuf.c:152,3'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_from
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 112
      functionDepth:   0
      returnType:      'struct.sshbuf *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          79
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - calloc
      functionUses:    14
      BranchProfiles:
        - Branch String:   'sshbuf.c:115,19'
          Branch Sides:
            - BranchSide:      'sshbuf.c:115,22'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:117,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:115,44'
          Branch Sides:
            - BranchSide:      'sshbuf.c:116,13'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:117,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:115,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:117,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:118,43'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:116,13'
          Dst:             calloc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_set_parent
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 129
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         14
      ICount:          81
      EdgeCount:       18
      CyclomaticComplexity: 6
      functionsReached:
        - sshbuf_check_sanity
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshbuf.c:132,44'
          Branch Sides:
            - BranchSide:      'sshbuf.c:133,31'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:134,10'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:132,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:134,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:135,6'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:135,28'
          Branch Sides:
            - BranchSide:      'sshbuf.c:135,31'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:137,18'
              BranchSideFuncs: []
        - Branch String:   'sshbuf.c:135,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:136,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:137,18'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:132,11'
          Dst:             sshbuf_check_sanity
        - Src:             'sshbuf.c:133,11'
          Dst:             sshbuf_check_sanity
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_new
      functionSourceFile: '/src/openssh/sshbuf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 93
      functionDepth:   0
      returnType:      'struct.sshbuf *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         8
      ICount:          66
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - calloc
      functionUses:    76
      BranchProfiles:
        - Branch String:   'sshbuf.c:94,17'
          Branch Sides:
            - BranchSide:      'sshbuf.c:96,13'
              BranchSideFuncs:
                - calloc
                - calloc
                - free
            - BranchSide:      'sshbuf.c:96,13'
              BranchSideFuncs:
                - calloc
                - calloc
                - free
        - Branch String:   'sshbuf.c:96,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:97,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf.c:98,2'
              BranchSideFuncs:
                - calloc
                - free
        - Branch String:   'sshbuf.c:103,6'
          Branch Sides:
            - BranchSide:      'sshbuf.c:104,8'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshbuf.c:107,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf.c:96,13'
          Dst:             calloc
        - Src:             'sshbuf.c:103,26'
          Dst:             calloc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    translate_libcrypto_error
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3335
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         16
      ICount:          79
      EdgeCount:       28
      CyclomaticComplexity: 14
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:3338,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:3340,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
            - BranchSide:      'sshkey.c:3353,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
            - BranchSide:      'sshkey.c:3370,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3372,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:3340,3'
          Branch Sides:
            - BranchSide:      'sshkey.c:3348,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3348,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3348,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3350,4'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:3353,3'
          Branch Sides:
            - BranchSide:      'sshkey.c:3356,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3365,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3365,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3367,4'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    convert_libcrypto_error
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3388
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         6
      ICount:          30
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - ERR_peek_error
        - ERR_peek_last_error
        - translate_libcrypto_error
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:3393,32'
          Branch Sides:
            - BranchSide:      'sshkey.c:3393,32'
              BranchSideFuncs:
                - ERR_peek_error
                - translate_libcrypto_error
                - __sanitizer_cov_trace_const_cmp4
                - ERR_peek_last_error
                - translate_libcrypto_error
            - BranchSide:      'sshkey.c:3393,32'
              BranchSideFuncs:
                - ERR_peek_error
                - translate_libcrypto_error
                - __sanitizer_cov_trace_const_cmp4
                - ERR_peek_last_error
                - translate_libcrypto_error
        - Branch String:   'sshkey.c:3393,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3395,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3396,35'
              BranchSideFuncs:
                - ERR_peek_last_error
                - translate_libcrypto_error
      Callsites:
        - Src:             'sshkey.c:3393,32'
          Dst:             ERR_peek_error
        - Src:             'sshkey.c:3393,6'
          Dst:             translate_libcrypto_error
        - Src:             'sshkey.c:3396,35'
          Dst:             ERR_peek_last_error
        - Src:             'sshkey.c:3396,9'
          Dst:             translate_libcrypto_error
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ERR_peek_error
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ERR_peek_last_error
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    pem_passphrase_cb
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3401
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'int '
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         14
      ICount:          81
      EdgeCount:       18
      CyclomaticComplexity: 6
      functionsReached:
        - strlen
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:3405,16'
          Branch Sides:
            - BranchSide:      'sshkey.c:3405,33'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3406,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:3405,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3406,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3407,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshkey.c:3407,15'
          Branch Sides:
            - BranchSide:      'sshkey.c:3407,18'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3408,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:3407,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3408,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3409,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:
        - Src:             'sshkey.c:3405,26'
          Dst:             strlen
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    clear_libcrypto_errors
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3377
      functionDepth:   0
      returnType:      'N/A'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         6
      ICount:          22
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - ERR_get_error
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:3378,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:3378,9'
              BranchSideFuncs:
                - ERR_get_error
            - BranchSide:      'sshkey.c:3378,9'
              BranchSideFuncs:
                - ERR_get_error
        - Branch String:   'sshkey.c:3378,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:3378,9'
              BranchSideFuncs:
                - ERR_get_error
            - BranchSide:      'sshkey.c:3380,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:3378,9'
          Dst:             ERR_get_error
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ERR_get_error
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    private2_decrypt
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2943
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.sshbuf *'
        - 'char *'
        - 'struct.sshbuf **'
        - 'struct.sshkey **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         101
      ICount:          589
      EdgeCount:       141
      CyclomaticComplexity: 42
      functionsReached:
        - bcrypt_pbkdf
        - calloc
        - cipher_authlen
        - cipher_blocksize
        - cipher_by_name
        - cipher_crypt
        - cipher_free
        - cipher_init
        - cipher_ivlen
        - cipher_keylen
        - explicit_bzero
        - sshbuf_consume
        - sshbuf_free
        - sshbuf_froms
        - sshbuf_get_cstring
        - sshbuf_get_string
        - sshbuf_get_u32
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_reserve
        - sshkey_free
        - sshkey_froms
        - strcmp
        - strlen
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:2954,22'
          Branch Sides:
            - BranchSide:      'sshkey.c:2954,25'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2955,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2954,44'
          Branch Sides:
            - BranchSide:      'sshkey.c:2954,47'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2955,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2954,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2955,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2957,3'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - cipher_by_name
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2960,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2961,5'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:2966,26'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - cipher_by_name
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2966,61'
          Branch Sides:
            - BranchSide:      'sshkey.c:2967,30'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:2971,3'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:2967,64'
          Branch Sides:
            - BranchSide:      'sshkey.c:2968,30'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:2971,3'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:2968,61'
          Branch Sides:
            - BranchSide:      'sshkey.c:2969,24'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:2971,3'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:2969,45'
          Branch Sides:
            - BranchSide:      'sshkey.c:2970,26'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:2971,3'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:2966,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2971,3'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:2973,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - cipher_by_name
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2973,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2975,5'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:2979,24'
              BranchSideFuncs:
                - sshkey_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - cipher_by_name
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2979,48'
          Branch Sides:
            - BranchSide:      'sshkey.c:2980,26'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:2981,3'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:2979,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2981,3'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:2983,31'
              BranchSideFuncs:
                - cipher_by_name
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2983,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2984,5'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:2987,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2987,35'
          Branch Sides:
            - BranchSide:      'sshkey.c:2987,45'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2991,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2987,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2988,5'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:2991,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2991,35'
          Branch Sides:
            - BranchSide:      'sshkey.c:2991,45'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2995,7'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2991,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2992,5'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:2995,7'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2995,26'
          Branch Sides:
            - BranchSide:      'sshkey.c:2995,36'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2996,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2995,54'
          Branch Sides:
            - BranchSide:      'sshkey.c:2996,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3003,31'
              BranchSideFuncs:
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2995,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2998,5'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3003,31'
              BranchSideFuncs:
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3004,32'
          Branch Sides:
            - BranchSide:      'sshkey.c:3004,36'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3005,5'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:3004,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3005,5'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3010,25'
              BranchSideFuncs:
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3013,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3014,5'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3017,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3017,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3018,30'
              BranchSideFuncs:
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3029,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3018,55'
          Branch Sides:
            - BranchSide:      'sshkey.c:3019,27'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3020,4'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:3018,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3020,4'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3021,20'
              BranchSideFuncs:
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3021,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3023,6'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3026,2'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3029,36'
          Branch Sides:
            - BranchSide:      'sshkey.c:3030,17'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3031,5'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:3029,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3031,5'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3036,26'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3036,63'
          Branch Sides:
            - BranchSide:      'sshkey.c:3037,39'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3039,3'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:3036,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3039,3'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3040,24'
              BranchSideFuncs:
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3040,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3043,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3047,26'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:3043,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3044,6'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3045,3'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:3047,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3048,3'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3050,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:3050,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3051,5'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3056,26'
              BranchSideFuncs:
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:3056,52'
          Branch Sides:
            - BranchSide:      'sshkey.c:3057,26'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3058,3'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:3056,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3058,3'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3059,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:3059,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3060,5'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3064,16'
              BranchSideFuncs:
                - cipher_free
                - free
                - free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:3074,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3075,18'
              BranchSideFuncs:
                - explicit_bzero
                - free
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey.c:3078,6'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - explicit_bzero
                - free
        - Branch String:   'sshkey.c:3078,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3079,18'
              BranchSideFuncs:
                - explicit_bzero
                - free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:3082,14'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
      Callsites:
        - Src:             'sshkey.c:2960,19'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:2966,11'
          Dst:             sshbuf_consume
        - Src:             'sshkey.c:2967,11'
          Dst:             sshbuf_get_cstring
        - Src:             'sshkey.c:2968,11'
          Dst:             sshbuf_get_cstring
        - Src:             'sshkey.c:2969,11'
          Dst:             sshbuf_froms
        - Src:             'sshkey.c:2970,11'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey.c:2979,11'
          Dst:             sshkey_froms
        - Src:             'sshkey.c:2980,11'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey.c:2983,16'
          Dst:             cipher_by_name
        - Src:             'sshkey.c:2987,6'
          Dst:             strcmp
        - Src:             'sshkey.c:2987,38'
          Dst:             strcmp
        - Src:             'sshkey.c:2991,6'
          Dst:             strcmp
        - Src:             'sshkey.c:2991,38'
          Dst:             strcmp
        - Src:             'sshkey.c:2995,29'
          Dst:             strlen
        - Src:             'sshkey.c:2996,6'
          Dst:             strcmp
        - Src:             'sshkey.c:3003,14'
          Dst:             cipher_blocksize
        - Src:             'sshkey.c:3010,11'
          Dst:             cipher_keylen
        - Src:             'sshkey.c:3011,10'
          Dst:             cipher_ivlen
        - Src:             'sshkey.c:3012,12'
          Dst:             cipher_authlen
        - Src:             'sshkey.c:3013,13'
          Dst:             calloc
        - Src:             'sshkey.c:3017,6'
          Dst:             strcmp
        - Src:             'sshkey.c:3018,12'
          Dst:             sshbuf_get_string
        - Src:             'sshkey.c:3019,12'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey.c:3021,32'
          Dst:             strlen
        - Src:             'sshkey.c:3021,7'
          Dst:             bcrypt_pbkdf
        - Src:             'sshkey.c:3029,6'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:3030,6'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:3036,11'
          Dst:             sshbuf_reserve
        - Src:             'sshkey.c:3037,11'
          Dst:             cipher_init
        - Src:             'sshkey.c:3040,46'
          Dst:             sshbuf_ptr
        - Src:             'sshkey.c:3040,11'
          Dst:             cipher_crypt
        - Src:             'sshkey.c:3047,11'
          Dst:             sshbuf_consume
        - Src:             'sshkey.c:3050,6'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:3056,11'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey.c:3057,11'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey.c:3070,2'
          Dst:             cipher_free
        - Src:             'sshkey.c:3073,2'
          Dst:             sshkey_free
        - Src:             'sshkey.c:3075,3'
          Dst:             explicit_bzero
        - Src:             'sshkey.c:3079,3'
          Dst:             explicit_bzero
        - Src:             'sshkey.c:3082,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:3083,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_froms
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1976
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshkey **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          47
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_free
        - sshbuf_froms
        - sshkey_from_blob_internal
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshkey.c:1980,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1981,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1982,32'
              BranchSideFuncs:
                - sshkey_from_blob_internal
                - sshbuf_free
      Callsites:
        - Src:             'sshkey.c:1980,11'
          Dst:             sshbuf_froms
        - Src:             'sshkey.c:1982,6'
          Dst:             sshkey_from_blob_internal
        - Src:             'sshkey.c:1983,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strcmp
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    58
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_free
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 660
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          19
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - freezero
        - sshkey_free_contents
      functionUses:    20
      BranchProfiles:  []
      Callsites:
        - Src:             'sshkey.c:661,2'
          Dst:             sshkey_free_contents
        - Src:             'sshkey.c:662,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_free_contents
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 644
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         14
      ICount:          90
      EdgeCount:       18
      CyclomaticComplexity: 6
      functionsReached:
        - cert_free
        - freezero
        - sshkey_impl_from_type
        - sshkey_is_cert
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:647,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:648,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:649,36'
              BranchSideFuncs:
                - sshkey_impl_from_type
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - freezero
                - cert_free
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'sshkey.c:649,54'
          Branch Sides:
            - BranchSide:      'sshkey.c:650,6'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - freezero
                - cert_free
                - __sanitizer_cov_trace_pc_indir
            - BranchSide:      'sshkey.c:652,21'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - freezero
                - cert_free
        - Branch String:   'sshkey.c:649,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:651,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - freezero
                - cert_free
            - BranchSide:      'sshkey.c:652,21'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - freezero
                - cert_free
        - Branch String:   'sshkey.c:652,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:653,13'
              BranchSideFuncs:
                - cert_free
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:654,11'
              BranchSideFuncs:
                - freezero
                - freezero
      Callsites:
        - Src:             'sshkey.c:649,14'
          Dst:             sshkey_impl_from_type
        - Src:             'sshkey.c:652,6'
          Dst:             sshkey_is_cert
        - Src:             'sshkey.c:653,3'
          Dst:             cert_free
        - Src:             'sshkey.c:654,2'
          Dst:             freezero
        - Src:             'sshkey.c:655,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_impl_from_type
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 172
      functionDepth:   0
      returnType:      'struct.sshkey_impl *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         8
      ICount:          51
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    10
      BranchProfiles:
        - Branch String:   'sshkey.c:175,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:176,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:179,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:176,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:177,20'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:178,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_is_cert
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 407
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          33
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshkey_type_is_cert
      functionUses:    19
      BranchProfiles:
        - Branch String:   'sshkey.c:408,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:409,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:410,29'
              BranchSideFuncs:
                - sshkey_type_is_cert
      Callsites:
        - Src:             'sshkey.c:410,9'
          Dst:             sshkey_type_is_cert
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cert_free
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 563
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey_cert *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          84
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - freezero
        - sshbuf_free
        - sshkey_free
      functionUses:    5
      BranchProfiles:
        - Branch String:   'sshkey.c:566,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:567,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:568,14'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - __sanitizer_cov_trace_cmp4
                - free
                - sshkey_free
                - free
                - freezero
                - free
        - Branch String:   'sshkey.c:572,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:573,8'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_cmp4
                - free
                - sshkey_free
                - free
                - freezero
            - BranchSide:      'sshkey.c:574,7'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - freezero
      Callsites:
        - Src:             'sshkey.c:568,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:569,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:570,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:575,2'
          Dst:             sshkey_free
        - Src:             'sshkey.c:577,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_type_is_cert
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 225
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          36
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshkey_impl_from_type
      functionUses:    8
      BranchProfiles:
        - Branch String:   'sshkey.c:228,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:229,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:230,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:228,14'
          Dst:             sshkey_impl_from_type
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_from_blob_internal
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1891
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshkey **'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         40
      ICount:          226
      EdgeCount:       55
      CyclomaticComplexity: 17
      functionsReached:
        - sshbuf_free
        - sshbuf_fromb
        - sshbuf_get_cstring
        - sshbuf_get_string_direct
        - sshbuf_len
        - sshkey_free
        - sshkey_impl_from_type
        - sshkey_is_cert
        - sshkey_new
        - sshkey_type_from_name
        - sshkey_type_is_cert
      functionUses:    4
      BranchProfiles:
        - Branch String:   'sshkey.c:1901,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1902,4'
              BranchSideFuncs:
                - sshbuf_fromb
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_impl_from_type
                - sshkey_new
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:1903,27'
              BranchSideFuncs:
                - sshbuf_fromb
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_impl_from_type
                - sshkey_new
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1903,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1904,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
            - BranchSide:      'sshkey.c:1907,25'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_impl_from_type
                - sshkey_new
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1907,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1908,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
            - BranchSide:      'sshkey.c:1912,31'
              BranchSideFuncs:
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_impl_from_type
                - sshkey_new
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1913,18'
          Branch Sides:
            - BranchSide:      'sshkey.c:1913,41'
              BranchSideFuncs:
                - sshkey_impl_from_type
                - sshkey_new
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:1917,36'
              BranchSideFuncs:
                - sshkey_impl_from_type
                - sshkey_new
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1913,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1914,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
            - BranchSide:      'sshkey.c:1917,36'
              BranchSideFuncs:
                - sshkey_impl_from_type
                - sshkey_new
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1917,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1918,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
            - BranchSide:      'sshkey.c:1921,24'
              BranchSideFuncs:
                - sshkey_new
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1921,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1922,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
            - BranchSide:      'sshkey.c:1925,26'
              BranchSideFuncs:
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1925,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1927,32'
              BranchSideFuncs:
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:1932,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1927,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1928,8'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
            - BranchSide:      'sshkey.c:1931,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1932,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1933,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
            - BranchSide:      'sshkey.c:1936,21'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1936,26'
          Branch Sides:
            - BranchSide:      'sshkey.c:1936,47'
              BranchSideFuncs:
                - cert_parse
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'sshkey.c:1939,6'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'sshkey.c:1936,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1937,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
            - BranchSide:      'sshkey.c:1939,6'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'sshkey.c:1939,18'
          Branch Sides:
            - BranchSide:      'sshkey.c:1939,32'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_free
                - sshkey_free
                - free
            - BranchSide:      'sshkey.c:1943,6'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
        - Branch String:   'sshkey.c:1939,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1940,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
            - BranchSide:      'sshkey.c:1943,6'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
        - Branch String:   'sshkey.c:1944,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1944,14'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
            - BranchSide:      'sshkey.c:1945,11'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
                - free
      Callsites:
        - Src:             'sshkey.c:1903,14'
          Dst:             sshbuf_fromb
        - Src:             'sshkey.c:1907,6'
          Dst:             sshbuf_get_cstring
        - Src:             'sshkey.c:1912,9'
          Dst:             sshkey_type_from_name
        - Src:             'sshkey.c:1913,21'
          Dst:             sshkey_type_is_cert
        - Src:             'sshkey.c:1917,14'
          Dst:             sshkey_impl_from_type
        - Src:             'sshkey.c:1921,13'
          Dst:             sshkey_new
        - Src:             'sshkey.c:1925,6'
          Dst:             sshkey_type_is_cert
        - Src:             'sshkey.c:1927,7'
          Dst:             sshbuf_get_string_direct
        - Src:             'sshkey.c:1936,6'
          Dst:             sshkey_is_cert
        - Src:             'sshkey.c:1936,36'
          Dst:             cert_parse
        - Src:             'sshkey.c:1939,21'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:1949,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:1950,2'
          Dst:             sshkey_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_type_from_name
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 248
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         19
      ICount:          102
      EdgeCount:       24
      CyclomaticComplexity: 7
      functionsReached:
        - strcasecmp
        - strcmp
      functionUses:    6
      BranchProfiles:
        - Branch String:   'sshkey.c:252,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:253,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:259,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:255,27'
          Branch Sides:
            - BranchSide:      'sshkey.c:255,37'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:256,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:255,61'
          Branch Sides:
            - BranchSide:      'sshkey.c:256,9'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:257,11'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:256,20'
          Branch Sides:
            - BranchSide:      'sshkey.c:256,34'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:258,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:255,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:257,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:258,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'sshkey.c:255,30'
          Dst:             strcmp
        - Src:             'sshkey.c:256,23'
          Dst:             strcasecmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_new
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 602
      functionDepth:   0
      returnType:      'struct.sshkey *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         23
      ICount:          131
      EdgeCount:       31
      CyclomaticComplexity: 10
      functionsReached:
        - calloc
        - cert_new
        - sshkey_free
        - sshkey_impl_from_type
        - sshkey_is_cert
      functionUses:    8
      BranchProfiles:
        - Branch String:   'sshkey.c:606,25'
          Branch Sides:
            - BranchSide:      'sshkey.c:607,36'
              BranchSideFuncs:
                - sshkey_impl_from_type
                - calloc
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - cert_new
                - sshkey_free
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
            - BranchSide:      'sshkey.c:611,11'
              BranchSideFuncs:
                - calloc
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - cert_new
                - sshkey_free
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'sshkey.c:606,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:608,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:611,11'
              BranchSideFuncs:
                - calloc
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - cert_new
                - sshkey_free
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'sshkey.c:611,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:612,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:613,12'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - cert_new
                - sshkey_free
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'sshkey.c:615,19'
          Branch Sides:
            - BranchSide:      'sshkey.c:615,22'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - cert_new
                - sshkey_free
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
            - BranchSide:      'sshkey.c:621,21'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - cert_new
                - sshkey_free
        - Branch String:   'sshkey.c:615,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:616,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - cert_new
                - sshkey_free
                - free
            - BranchSide:      'sshkey.c:621,21'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - cert_new
                - sshkey_free
        - Branch String:   'sshkey.c:616,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:617,9'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey.c:620,2'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - cert_new
                - sshkey_free
        - Branch String:   'sshkey.c:621,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:622,18'
              BranchSideFuncs:
                - cert_new
                - sshkey_free
            - BranchSide:      'sshkey.c:628,9'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:622,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:623,16'
              BranchSideFuncs:
                - sshkey_free
            - BranchSide:      'sshkey.c:626,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:607,14'
          Dst:             sshkey_impl_from_type
        - Src:             'sshkey.c:611,11'
          Dst:             calloc
        - Src:             'sshkey.c:621,6'
          Dst:             sshkey_is_cert
        - Src:             'sshkey.c:622,18'
          Dst:             cert_new
        - Src:             'sshkey.c:623,4'
          Dst:             sshkey_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cert_parse
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1755
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         79
      ICount:          561
      EdgeCount:       111
      CyclomaticComplexity: 34
      functionsReached:
        - recallocarray
        - sshbuf_free
        - sshbuf_froms
        - sshbuf_get_cstring
        - sshbuf_get_string
        - sshbuf_get_string_direct
        - sshbuf_get_u32
        - sshbuf_get_u64
        - sshbuf_len
        - sshbuf_ptr
        - sshbuf_putb
        - sshbuf_reset
        - sshkey_from_blob_internal
        - sshkey_get_sigtype
        - sshkey_type_is_valid_ca
        - sshkey_verify
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:1763,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1764,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1767,28'
              BranchSideFuncs:
                - sshbuf_get_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_len
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - recallocarray
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1767,57'
          Branch Sides:
            - BranchSide:      'sshkey.c:1768,28'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1778,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1768,55'
          Branch Sides:
            - BranchSide:      'sshkey.c:1769,32'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1778,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1769,70'
          Branch Sides:
            - BranchSide:      'sshkey.c:1770,26'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1778,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1770,48'
          Branch Sides:
            - BranchSide:      'sshkey.c:1771,28'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1778,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1771,62'
          Branch Sides:
            - BranchSide:      'sshkey.c:1772,28'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1778,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1772,63'
          Branch Sides:
            - BranchSide:      'sshkey.c:1773,26'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1778,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1773,42'
          Branch Sides:
            - BranchSide:      'sshkey.c:1774,26'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1778,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1774,42'
          Branch Sides:
            - BranchSide:      'sshkey.c:1775,38'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1778,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1775,59'
          Branch Sides:
            - BranchSide:      'sshkey.c:1776,26'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1778,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1767,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1778,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1783,26'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_len
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - recallocarray
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1785,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1786,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1790,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - recallocarray
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1790,45'
          Branch Sides:
            - BranchSide:      'sshkey.c:1791,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - recallocarray
                - free
            - BranchSide:      'sshkey.c:1797,2'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - recallocarray
                - free
        - Branch String:   'sshkey.c:1790,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1792,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1797,2'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - recallocarray
                - free
        - Branch String:   'sshkey.c:1797,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1798,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - recallocarray
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - free
            - BranchSide:      'sshkey.c:1827,25'
              BranchSideFuncs:
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1801,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1802,8'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1805,33'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - recallocarray
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'sshkey.c:1805,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1807,8'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1810,17'
              BranchSideFuncs:
                - recallocarray
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'sshkey.c:1814,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1815,9'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1820,53'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - recallocarray
                - free
        - Branch String:   'sshkey.c:1827,58'
          Branch Sides:
            - BranchSide:      'sshkey.c:1828,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1830,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1828,20'
          Branch Sides:
            - BranchSide:      'sshkey.c:1829,25'
              BranchSideFuncs:
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
            - BranchSide:      'sshkey.c:1835,2'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
        - Branch String:   'sshkey.c:1827,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1830,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1835,2'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
        - Branch String:   'sshkey.c:1835,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1836,39'
              BranchSideFuncs:
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
            - BranchSide:      'sshkey.c:1843,2'
              BranchSideFuncs:
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'sshkey.c:1836,63'
          Branch Sides:
            - BranchSide:      'sshkey.c:1837,39'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1838,17'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1836,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1835,2'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1838,17'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1843,22'
          Branch Sides:
            - BranchSide:      'sshkey.c:1843,36'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_reset
            - BranchSide:      'sshkey.c:1843,2'
              BranchSideFuncs:
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
        - Branch String:   'sshkey.c:1843,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1844,39'
              BranchSideFuncs:
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
            - BranchSide:      'sshkey.c:1853,32'
              BranchSideFuncs:
                - sshkey_from_blob_internal
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1844,63'
          Branch Sides:
            - BranchSide:      'sshkey.c:1845,39'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1846,17'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1844,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1843,2'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1846,17'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1853,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1854,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1857,31'
              BranchSideFuncs:
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1857,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1858,7'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1861,27'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1861,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1863,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1864,32'
              BranchSideFuncs:
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1864,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1866,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1869,6'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
      Callsites:
        - Src:             'sshkey.c:1763,13'
          Dst:             sshbuf_putb
        - Src:             'sshkey.c:1767,13'
          Dst:             sshbuf_get_u64
        - Src:             'sshkey.c:1768,13'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey.c:1769,13'
          Dst:             sshbuf_get_cstring
        - Src:             'sshkey.c:1770,13'
          Dst:             sshbuf_froms
        - Src:             'sshkey.c:1771,13'
          Dst:             sshbuf_get_u64
        - Src:             'sshkey.c:1772,13'
          Dst:             sshbuf_get_u64
        - Src:             'sshkey.c:1773,13'
          Dst:             sshbuf_froms
        - Src:             'sshkey.c:1774,13'
          Dst:             sshbuf_froms
        - Src:             'sshkey.c:1775,13'
          Dst:             sshbuf_get_string_direct
        - Src:             'sshkey.c:1776,13'
          Dst:             sshbuf_froms
        - Src:             'sshkey.c:1783,15'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:1783,49'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:1785,13'
          Dst:             sshbuf_get_string
        - Src:             'sshkey.c:1797,9'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:1805,14'
          Dst:             sshbuf_get_cstring
        - Src:             'sshkey.c:1811,27'
          Dst:             recallocarray
        - Src:             'sshkey.c:1827,13'
          Dst:             sshbuf_putb
        - Src:             'sshkey.c:1829,13'
          Dst:             sshbuf_putb
        - Src:             'sshkey.c:1835,9'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:1836,14'
          Dst:             sshbuf_get_string_direct
        - Src:             'sshkey.c:1837,14'
          Dst:             sshbuf_get_string_direct
        - Src:             'sshkey.c:1838,4'
          Dst:             sshbuf_reset
        - Src:             'sshkey.c:1843,25'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:1844,14'
          Dst:             sshbuf_get_string_direct
        - Src:             'sshkey.c:1845,14'
          Dst:             sshbuf_get_string_direct
        - Src:             'sshkey.c:1846,4'
          Dst:             sshbuf_reset
        - Src:             'sshkey.c:1853,6'
          Dst:             sshkey_from_blob_internal
        - Src:             'sshkey.c:1857,7'
          Dst:             sshkey_type_is_valid_ca
        - Src:             'sshkey.c:1862,6'
          Dst:             sshbuf_ptr
        - Src:             'sshkey.c:1861,13'
          Dst:             sshkey_verify
        - Src:             'sshkey.c:1864,13'
          Dst:             sshkey_get_sigtype
        - Src:             'sshkey.c:1871,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:1872,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:1873,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:1874,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_type_is_valid_ca
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 396
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          40
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshkey_impl_from_type
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:399,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:400,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:402,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'sshkey.c:399,14'
          Dst:             sshkey_impl_from_type
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_verify
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2124
      functionDepth:   0
      returnType:      'int '
      argCount:        8
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'int '
        - 'struct.sshkey_sig_details **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         14
      ICount:          101
      EdgeCount:       18
      CyclomaticComplexity: 6
      functionsReached:
        - sshkey_impl_from_key
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshkey.c:2127,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2128,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_impl_from_key
                - __sanitizer_cov_trace_pc_indir
            - BranchSide:      'sshkey.c:2129,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_impl_from_key
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'sshkey.c:2129,18'
          Branch Sides:
            - BranchSide:      'sshkey.c:2129,21'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2130,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2129,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2130,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2131,35'
              BranchSideFuncs:
                - sshkey_impl_from_key
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'sshkey.c:2131,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2132,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2133,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
      Callsites:
        - Src:             'sshkey.c:2131,14'
          Dst:             sshkey_impl_from_key
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_get_sigtype
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1989
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'size_t '
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         15
      ICount:          89
      EdgeCount:       19
      CyclomaticComplexity: 6
      functionsReached:
        - sshbuf_free
        - sshbuf_from
        - sshbuf_get_cstring
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshkey.c:1994,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1995,4'
              BranchSideFuncs:
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1996,23'
              BranchSideFuncs:
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
        - Branch String:   'sshkey.c:1996,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1997,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1998,30'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
        - Branch String:   'sshkey.c:1998,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1999,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2001,6'
              BranchSideFuncs:
                - free
                - sshbuf_free
        - Branch String:   'sshkey.c:2001,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2002,15'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2005,4'
              BranchSideFuncs:
                - free
                - sshbuf_free
      Callsites:
        - Src:             'sshkey.c:1996,11'
          Dst:             sshbuf_from
        - Src:             'sshkey.c:1998,11'
          Dst:             sshbuf_get_cstring
        - Src:             'sshkey.c:2008,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_impl_from_key
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 197
      functionDepth:   0
      returnType:      'struct.sshkey_impl *'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          36
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshkey_impl_from_type_nid
      functionUses:    7
      BranchProfiles:
        - Branch String:   'sshkey.c:198,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:199,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:200,35'
              BranchSideFuncs:
                - sshkey_impl_from_type_nid
      Callsites:
        - Src:             'sshkey.c:200,9'
          Dst:             sshkey_impl_from_type_nid
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_impl_from_type_nid
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 184
      functionDepth:   0
      returnType:      'struct.sshkey_impl *'
      argCount:        2
      argTypes:
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         14
      ICount:          86
      EdgeCount:       17
      CyclomaticComplexity: 5
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:187,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:188,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:192,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:188,33'
          Branch Sides:
            - BranchSide:      'sshkey.c:189,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:191,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:189,30'
          Branch Sides:
            - BranchSide:      'sshkey.c:189,42'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:190,20'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:188,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:190,20'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:191,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cert_new
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 582
      functionDepth:   0
      returnType:      'struct.sshkey_cert *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         13
      ICount:          77
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - calloc
        - cert_free
        - sshbuf_new
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshkey.c:583,22'
          Branch Sides:
            - BranchSide:      'sshkey.c:585,14'
              BranchSideFuncs:
                - calloc
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - cert_free
            - BranchSide:      'sshkey.c:585,14'
              BranchSideFuncs:
                - calloc
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - cert_free
        - Branch String:   'sshkey.c:585,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:586,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:587,24'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - cert_free
        - Branch String:   'sshkey.c:587,46'
          Branch Sides:
            - BranchSide:      'sshkey.c:588,24'
              BranchSideFuncs:
                - cert_free
            - BranchSide:      'sshkey.c:590,13'
              BranchSideFuncs:
                - cert_free
        - Branch String:   'sshkey.c:588,46'
          Branch Sides:
            - BranchSide:      'sshkey.c:589,26'
              BranchSideFuncs:
                - cert_free
            - BranchSide:      'sshkey.c:590,13'
              BranchSideFuncs:
                - cert_free
        - Branch String:   'sshkey.c:587,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:590,13'
              BranchSideFuncs:
                - cert_free
            - BranchSide:      'sshkey.c:593,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:585,14'
          Dst:             calloc
        - Src:             'sshkey.c:587,24'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:588,24'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:589,26'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:590,3'
          Dst:             cert_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strcasecmp
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    8
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    private2_uudecode
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2867
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         50
      ICount:          255
      EdgeCount:       68
      CyclomaticComplexity: 20
      functionsReached:
        - memcmp
        - sshbuf_b64tod
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put_u8
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:2874,19'
          Branch Sides:
            - BranchSide:      'sshkey.c:2874,22'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2875,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2874,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2875,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2877,3'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_new
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2879,39'
          Branch Sides:
            - BranchSide:      'sshkey.c:2880,17'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2881,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'sshkey.c:2879,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2881,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2886,18'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2888,52'
          Branch Sides:
            - BranchSide:      'sshkey.c:2889,13'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2890,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'sshkey.c:2888,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2890,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2893,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2897,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:2898,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2915,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'sshkey.c:2898,19'
          Branch Sides:
            - BranchSide:      'sshkey.c:2898,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2902,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2898,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2899,27'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2902,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2899,8'
          Branch Sides:
            - BranchSide:      'sshkey.c:2900,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2901,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2905,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2897,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2906,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2906,36'
          Branch Sides:
            - BranchSide:      'sshkey.c:2907,15'
              BranchSideFuncs:
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2913,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2906,8'
          Branch Sides:
            - BranchSide:      'sshkey.c:2909,28'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2913,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2909,9'
          Branch Sides:
            - BranchSide:      'sshkey.c:2910,6'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2911,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'sshkey.c:2915,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2916,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2921,25'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'sshkey.c:2921,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2922,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2925,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'sshkey.c:2925,47'
          Branch Sides:
            - BranchSide:      'sshkey.c:2926,24'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2927,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'sshkey.c:2925,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2927,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2931,14'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
      Callsites:
        - Src:             'sshkey.c:2879,17'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:2880,17'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:2886,7'
          Dst:             sshbuf_ptr
        - Src:             'sshkey.c:2887,16'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:2889,6'
          Dst:             memcmp
        - Src:             'sshkey.c:2899,13'
          Dst:             sshbuf_put_u8
        - Src:             'sshkey.c:2907,8'
          Dst:             memcmp
        - Src:             'sshkey.c:2909,14'
          Dst:             sshbuf_put_u8
        - Src:             'sshkey.c:2921,42'
          Dst:             sshbuf_ptr
        - Src:             'sshkey.c:2921,11'
          Dst:             sshbuf_b64tod
        - Src:             'sshkey.c:2925,6'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:2926,13'
          Dst:             sshbuf_ptr
        - Src:             'sshkey.c:2926,6'
          Dst:             memcmp
        - Src:             'sshkey.c:2935,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:2936,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_set_filename
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3628
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         12
      ICount:          64
      EdgeCount:       16
      CyclomaticComplexity: 6
      functionsReached:
        - sshkey_type_plain
        - strdup
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:3629,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3630,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3631,24'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - strdup
        - Branch String:   'sshkey.c:3631,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3632,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3633,6'
              BranchSideFuncs:
                - strdup
        - Branch String:   'sshkey.c:3633,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3634,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3635,33'
              BranchSideFuncs:
                - strdup
        - Branch String:   'sshkey.c:3635,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3636,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3637,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:3631,6'
          Dst:             sshkey_type_plain
        - Src:             'sshkey.c:3635,26'
          Dst:             strdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_type_plain
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 430
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          54
      EdgeCount:       18
      CyclomaticComplexity: 10
      functionsReached: []
      functionUses:    31
      BranchProfiles:
        - Branch String:   'sshkey.c:431,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:433,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:435,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:437,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:439,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:441,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:443,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:445,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:447,10'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_enable_maxsign
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3620
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          39
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshkey_type_plain
        - sshkey_xmss_enable_maxsign
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:3621,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3622,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3623,36'
              BranchSideFuncs:
                - sshkey_xmss_enable_maxsign
      Callsites:
        - Src:             'sshkey.c:3621,6'
          Dst:             sshkey_type_plain
        - Src:             'sshkey.c:3623,9'
          Dst:             sshkey_xmss_enable_maxsign
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_signatures_left
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3612
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          35
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshkey_type_plain
        - sshkey_xmss_signatures_left
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:3613,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3614,38'
              BranchSideFuncs:
                - sshkey_xmss_signatures_left
            - BranchSide:      'sshkey.c:3615,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:3613,6'
          Dst:             sshkey_type_plain
        - Src:             'sshkey.c:3614,10'
          Dst:             sshkey_xmss_signatures_left
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_private_serialize_maxsign
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3589
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         23
      ICount:          122
      EdgeCount:       30
      CyclomaticComplexity: 9
      functionsReached:
        - sshkey_private_serialize_opt
        - sshkey_type_plain
        - sshkey_xmss_forward_state
        - sshkey_xmss_get_state
        - sshkey_xmss_update_state
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:3592,19'
          Branch Sides:
            - BranchSide:      'sshkey.c:3593,24'
              BranchSideFuncs:
                - sshkey_private_serialize_opt
            - BranchSide:      'sshkey.c:3594,39'
              BranchSideFuncs:
                - sshkey_private_serialize_opt
        - Branch String:   'sshkey.c:3592,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3594,39'
              BranchSideFuncs:
                - sshkey_private_serialize_opt
            - BranchSide:      'sshkey.c:3596,33'
              BranchSideFuncs:
                - sshkey_xmss_get_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_forward_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3596,54'
          Branch Sides:
            - BranchSide:      'sshkey.c:3597,40'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3600,3'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3598,36'
          Branch Sides:
            - BranchSide:      'sshkey.c:3599,37'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3600,3'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3596,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3600,3'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3601,4'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3603,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3604,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3607,9'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:3604,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3605,8'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3606,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:3593,6'
          Dst:             sshkey_type_plain
        - Src:             'sshkey.c:3594,10'
          Dst:             sshkey_private_serialize_opt
        - Src:             'sshkey.c:3596,11'
          Dst:             sshkey_xmss_get_state
        - Src:             'sshkey.c:3597,11'
          Dst:             sshkey_private_serialize_opt
        - Src:             'sshkey.c:3599,11'
          Dst:             sshkey_xmss_forward_state
        - Src:             'sshkey.c:3603,17'
          Dst:             sshkey_xmss_update_state
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_private_serialize_opt
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2436
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         31
      ICount:          191
      EdgeCount:       42
      CyclomaticComplexity: 13
      functionsReached:
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_put_cstring
        - sshbuf_put_stringb
        - sshbuf_putb
        - sshkey_impl_from_key
        - sshkey_is_cert
        - sshkey_is_shielded
        - sshkey_shield_private
        - sshkey_ssh_name
        - sshkey_unshield_private
      functionUses:    5
      BranchProfiles:
        - Branch String:   'sshkey.c:2442,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2443,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2444,35'
              BranchSideFuncs:
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2444,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2445,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2446,11'
              BranchSideFuncs:
                - sshbuf_new
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2446,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2447,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2448,30'
              BranchSideFuncs:
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2448,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2449,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:2450,21'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2450,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2451,7'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:2459,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
        - Branch String:   'sshkey.c:2451,25'
          Branch Sides:
            - BranchSide:      'sshkey.c:2452,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:2453,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
        - Branch String:   'sshkey.c:2451,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2453,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:2456,31'
              BranchSideFuncs:
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
        - Branch String:   'sshkey.c:2456,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2457,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:2458,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
        - Branch String:   'sshkey.c:2459,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2460,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:2466,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
                - sshkey_shield_private
        - Branch String:   'sshkey.c:2468,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2469,29'
              BranchSideFuncs:
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
            - BranchSide:      'sshkey.c:2470,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_putb
        - Branch String:   'sshkey.c:2470,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2471,19'
              BranchSideFuncs:
                - sshbuf_putb
                - sshbuf_free
            - BranchSide:      'sshkey.c:2472,14'
              BranchSideFuncs:
                - sshbuf_free
      Callsites:
        - Src:             'sshkey.c:2438,21'
          Dst:             sshkey_is_shielded
        - Src:             'sshkey.c:2442,14'
          Dst:             sshkey_impl_from_key
        - Src:             'sshkey.c:2444,11'
          Dst:             sshkey_unshield_private
        - Src:             'sshkey.c:2446,11'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:2448,33'
          Dst:             sshkey_ssh_name
        - Src:             'sshkey.c:2448,11'
          Dst:             sshbuf_put_cstring
        - Src:             'sshkey.c:2450,6'
          Dst:             sshkey_is_cert
        - Src:             'sshkey.c:2452,7'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:2456,12'
          Dst:             sshbuf_put_stringb
        - Src:             'sshkey.c:2469,7'
          Dst:             sshkey_shield_private
        - Src:             'sshkey.c:2471,7'
          Dst:             sshbuf_putb
        - Src:             'sshkey.c:2472,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_is_shielded
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1523
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         4
      ICount:          24
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:
        - Branch String:   'sshkey.c:1524,19'
          Branch Sides:
            - BranchSide:      'sshkey.c:1524,22'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1524,19'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_unshield_private
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1666
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         30
      ICount:          227
      EdgeCount:       42
      CyclomaticComplexity: 14
      functionsReached:
        - cipher_blocksize
        - cipher_by_name
        - cipher_crypt
        - cipher_free
        - cipher_keylen
        - explicit_bzero
        - private2_check_padding
        - ssh_digest_bytes
        - ssh_digest_memory
        - sshbuf_free
        - sshbuf_new
        - sshbuf_reserve
        - sshkey_free
        - sshkey_is_shielded
        - sshkey_private_deserialize
      functionUses:    4
      BranchProfiles:
        - Branch String:   'sshkey.c:1677,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1678,3'
              BranchSideFuncs:
                - cipher_by_name
                - cipher_keylen
                - cipher_ivlen
                - ssh_digest_bytes
                - __sanitizer_cov_trace_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_keylen
                - cipher_ivlen
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1680,16'
              BranchSideFuncs:
                - cipher_by_name
                - cipher_keylen
                - cipher_ivlen
                - ssh_digest_bytes
                - __sanitizer_cov_trace_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_keylen
                - cipher_ivlen
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1680,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1681,5'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1684,20'
              BranchSideFuncs:
                - cipher_keylen
                - cipher_ivlen
                - ssh_digest_bytes
                - __sanitizer_cov_trace_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_keylen
                - cipher_ivlen
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1684,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1686,5'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1690,6'
              BranchSideFuncs:
                - cipher_blocksize
                - __sanitizer_cov_trace_cmp8
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_keylen
                - cipher_ivlen
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1690,49'
          Branch Sides:
            - BranchSide:      'sshkey.c:1691,7'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1692,5'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1690,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1692,5'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1698,6'
              BranchSideFuncs:
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_keylen
                - cipher_ivlen
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1697,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1700,3'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1701,30'
              BranchSideFuncs:
                - cipher_keylen
                - cipher_keylen
                - cipher_ivlen
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1701,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1703,3'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1711,16'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1711,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1712,5'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1715,26'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1715,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1716,3'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1722,24'
              BranchSideFuncs:
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1722,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1724,3'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1730,38'
              BranchSideFuncs:
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1730,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1731,3'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1733,34'
              BranchSideFuncs:
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1733,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1734,3'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1737,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - sshkey_free
                - sshbuf_free
      Callsites:
        - Src:             'sshkey.c:1677,7'
          Dst:             sshkey_is_shielded
        - Src:             'sshkey.c:1680,16'
          Dst:             cipher_by_name
        - Src:             'sshkey.c:1684,6'
          Dst:             cipher_keylen
        - Src:             'sshkey.c:1684,30'
          Dst:             cipher_ivlen
        - Src:             'sshkey.c:1685,6'
          Dst:             ssh_digest_bytes
        - Src:             'sshkey.c:1690,24'
          Dst:             cipher_blocksize
        - Src:             'sshkey.c:1691,25'
          Dst:             cipher_blocksize
        - Src:             'sshkey.c:1697,11'
          Dst:             ssh_digest_memory
        - Src:             'sshkey.c:1701,45'
          Dst:             cipher_keylen
        - Src:             'sshkey.c:1702,14'
          Dst:             cipher_keylen
        - Src:             'sshkey.c:1702,37'
          Dst:             cipher_ivlen
        - Src:             'sshkey.c:1701,11'
          Dst:             cipher_init
        - Src:             'sshkey.c:1711,16'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:1715,11'
          Dst:             sshbuf_reserve
        - Src:             'sshkey.c:1722,11'
          Dst:             cipher_crypt
        - Src:             'sshkey.c:1730,11'
          Dst:             sshkey_private_deserialize
        - Src:             'sshkey.c:1733,11'
          Dst:             private2_check_padding
        - Src:             'sshkey.c:1745,2'
          Dst:             cipher_free
        - Src:             'sshkey.c:1746,2'
          Dst:             explicit_bzero
        - Src:             'sshkey.c:1747,2'
          Dst:             explicit_bzero
        - Src:             'sshkey.c:1748,2'
          Dst:             sshkey_free
        - Src:             'sshkey.c:1749,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_ssh_name
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 235
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          21
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshkey_ssh_name_from_type_nid
      functionUses:    5
      BranchProfiles:  []
      Callsites:
        - Src:             'sshkey.c:236,9'
          Dst:             sshkey_ssh_name_from_type_nid
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_shield_private
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1529
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         34
      ICount:          279
      EdgeCount:       48
      CyclomaticComplexity: 16
      functionsReached:
        - arc4random_buf
        - cipher_blocksize
        - cipher_by_name
        - cipher_crypt
        - cipher_free
        - cipher_keylen
        - explicit_bzero
        - freezero
        - ssh_digest_bytes
        - ssh_digest_memory
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put_u8
        - sshkey_free
        - sshkey_from_private
        - sshkey_is_shielded
        - sshkey_private_serialize_opt
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshkey.c:1541,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1542,5'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1545,20'
              BranchSideFuncs:
                - cipher_keylen
                - cipher_ivlen
                - ssh_digest_bytes
                - __sanitizer_cov_trace_cmp8
                - malloc
                - arc4random_buf
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_keylen
                - cipher_ivlen
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_is_shielded
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
                - sshbuf_put_u8
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1545,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1547,5'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1552,16'
              BranchSideFuncs:
                - malloc
                - arc4random_buf
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_keylen
                - cipher_ivlen
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_is_shielded
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
                - sshbuf_put_u8
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1552,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1553,5'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1556,17'
              BranchSideFuncs:
                - arc4random_buf
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - cipher_keylen
                - cipher_keylen
                - cipher_ivlen
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_is_shielded
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
                - sshbuf_put_u8
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1557,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1560,3'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1566,30'
              BranchSideFuncs:
                - cipher_keylen
                - cipher_keylen
                - cipher_ivlen
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_is_shielded
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
                - sshbuf_put_u8
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1566,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1568,3'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1571,16'
              BranchSideFuncs:
                - sshbuf_new
                - sshkey_is_shielded
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
                - sshbuf_put_u8
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1571,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1572,5'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1575,25'
              BranchSideFuncs:
                - sshkey_is_shielded
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
                - sshbuf_put_u8
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1575,28'
          Branch Sides:
            - BranchSide:      'sshkey.c:1575,60'
              BranchSideFuncs:
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
                - sshbuf_put_u8
            - BranchSide:      'sshkey.c:1577,40'
              BranchSideFuncs:
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
                - sshbuf_put_u8
        - Branch String:   'sshkey.c:1575,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1576,3'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1577,40'
              BranchSideFuncs:
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
                - sshbuf_put_u8
        - Branch String:   'sshkey.c:1577,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1579,3'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1581,4'
              BranchSideFuncs:
                - sshbuf_len
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
                - sshbuf_put_u8
        - Branch String:   'sshkey.c:1582,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1583,26'
              BranchSideFuncs:
                - sshbuf_put_u8
                - sshbuf_len
                - cipher_blocksize
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1591,22'
              BranchSideFuncs:
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1583,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1582,2'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1584,4'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1592,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1593,5'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1596,24'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1596,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1598,3'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1605,31'
              BranchSideFuncs:
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1605,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1606,3'
              BranchSideFuncs:
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1609,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - cipher_free
                - explicit_bzero
                - explicit_bzero
                - freezero
                - freezero
                - sshkey_free
                - sshbuf_free
      Callsites:
        - Src:             'sshkey.c:1541,16'
          Dst:             cipher_by_name
        - Src:             'sshkey.c:1545,6'
          Dst:             cipher_keylen
        - Src:             'sshkey.c:1545,30'
          Dst:             cipher_ivlen
        - Src:             'sshkey.c:1546,6'
          Dst:             ssh_digest_bytes
        - Src:             'sshkey.c:1556,2'
          Dst:             arc4random_buf
        - Src:             'sshkey.c:1557,11'
          Dst:             ssh_digest_memory
        - Src:             'sshkey.c:1566,45'
          Dst:             cipher_keylen
        - Src:             'sshkey.c:1567,14'
          Dst:             cipher_keylen
        - Src:             'sshkey.c:1567,37'
          Dst:             cipher_ivlen
        - Src:             'sshkey.c:1566,11'
          Dst:             cipher_init
        - Src:             'sshkey.c:1571,16'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:1575,6'
          Dst:             sshkey_is_shielded
        - Src:             'sshkey.c:1575,36'
          Dst:             sshkey_unshield_private
        - Src:             'sshkey.c:1577,11'
          Dst:             sshkey_private_serialize_opt
        - Src:             'sshkey.c:1582,9'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:1582,30'
          Dst:             cipher_blocksize
        - Src:             'sshkey.c:1583,12'
          Dst:             sshbuf_put_u8
        - Src:             'sshkey.c:1591,11'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:1597,6'
          Dst:             sshbuf_ptr
        - Src:             'sshkey.c:1597,26'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:1596,11'
          Dst:             cipher_crypt
        - Src:             'sshkey.c:1605,11'
          Dst:             sshkey_from_private
        - Src:             'sshkey.c:1629,2'
          Dst:             cipher_free
        - Src:             'sshkey.c:1630,2'
          Dst:             explicit_bzero
        - Src:             'sshkey.c:1631,2'
          Dst:             explicit_bzero
        - Src:             'sshkey.c:1632,2'
          Dst:             freezero
        - Src:             'sshkey.c:1633,2'
          Dst:             freezero
        - Src:             'sshkey.c:1634,2'
          Dst:             sshkey_free
        - Src:             'sshkey.c:1635,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_from_private
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1496
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         16
      ICount:          105
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - sshkey_free
        - sshkey_impl_from_key
        - sshkey_is_cert
        - sshkey_new
      functionUses:    5
      BranchProfiles:
        - Branch String:   'sshkey.c:1502,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1503,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1504,22'
              BranchSideFuncs:
                - sshkey_new
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
                - sshkey_cert_copy
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1504,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1505,5'
              BranchSideFuncs:
                - sshkey_free
            - BranchSide:      'sshkey.c:1508,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
                - sshkey_cert_copy
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1508,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1509,3'
              BranchSideFuncs:
                - sshkey_free
            - BranchSide:      'sshkey.c:1510,21'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
                - sshkey_cert_copy
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1510,24'
          Branch Sides:
            - BranchSide:      'sshkey.c:1510,49'
              BranchSideFuncs:
                - sshkey_cert_copy
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
            - BranchSide:      'sshkey.c:1513,9'
              BranchSideFuncs:
                - sshkey_free
        - Branch String:   'sshkey.c:1510,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1511,3'
              BranchSideFuncs:
                - sshkey_free
            - BranchSide:      'sshkey.c:1513,9'
              BranchSideFuncs:
                - sshkey_free
      Callsites:
        - Src:             'sshkey.c:1502,14'
          Dst:             sshkey_impl_from_key
        - Src:             'sshkey.c:1504,11'
          Dst:             sshkey_new
        - Src:             'sshkey.c:1510,6'
          Dst:             sshkey_is_cert
        - Src:             'sshkey.c:1510,32'
          Dst:             sshkey_cert_copy
        - Src:             'sshkey.c:1517,2'
          Dst:             sshkey_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_cert_copy
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1417
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         47
      ICount:          327
      EdgeCount:       64
      CyclomaticComplexity: 19
      functionsReached:
        - calloc
        - cert_free
        - cert_new
        - sshbuf_putb
        - sshkey_from_private
        - strdup
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:1423,21'
          Branch Sides:
            - BranchSide:      'sshkey.c:1423,32'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1424,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:1423,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1424,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1426,12'
              BranchSideFuncs:
                - cert_new
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cert_free
                - cert_free
                - calloc
                - __sanitizer_cov_trace_cmp4
                - strdup
                - strdup
        - Branch String:   'sshkey.c:1426,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1427,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1429,23'
              BranchSideFuncs:
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cert_free
                - cert_free
                - calloc
                - __sanitizer_cov_trace_cmp4
                - strdup
                - strdup
        - Branch String:   'sshkey.c:1429,59'
          Branch Sides:
            - BranchSide:      'sshkey.c:1430,23'
              BranchSideFuncs:
                - cert_free
            - BranchSide:      'sshkey.c:1432,3'
              BranchSideFuncs:
                - cert_free
        - Branch String:   'sshkey.c:1430,59'
          Branch Sides:
            - BranchSide:      'sshkey.c:1431,23'
              BranchSideFuncs:
                - cert_free
            - BranchSide:      'sshkey.c:1432,3'
              BranchSideFuncs:
                - cert_free
        - Branch String:   'sshkey.c:1429,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1432,3'
              BranchSideFuncs:
                - cert_free
            - BranchSide:      'sshkey.c:1434,15'
              BranchSideFuncs:
                - strdup
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cert_free
                - cert_free
                - calloc
                - __sanitizer_cov_trace_cmp4
                - strdup
                - strdup
        - Branch String:   'sshkey.c:1436,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1437,3'
              BranchSideFuncs:
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cert_free
                - cert_free
                - calloc
                - __sanitizer_cov_trace_cmp4
                - strdup
                - strdup
            - BranchSide:      'sshkey.c:1438,32'
              BranchSideFuncs:
                - strdup
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cert_free
                - cert_free
                - calloc
                - __sanitizer_cov_trace_cmp4
                - strdup
                - strdup
        - Branch String:   'sshkey.c:1438,11'
          Branch Sides:
            - BranchSide:      'sshkey.c:0,0'
              BranchSideFuncs:
                - cert_free
            - BranchSide:      'sshkey.c:1439,5'
              BranchSideFuncs:
                - cert_free
        - Branch String:   'sshkey.c:1444,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1445,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cert_free
                - cert_free
                - calloc
                - __sanitizer_cov_trace_cmp4
                - strdup
                - strdup
            - BranchSide:      'sshkey.c:1446,36'
              BranchSideFuncs:
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cert_free
                - cert_free
                - calloc
                - __sanitizer_cov_trace_cmp4
                - strdup
                - strdup
        - Branch String:   'sshkey.c:1446,11'
          Branch Sides:
            - BranchSide:      'sshkey.c:0,0'
              BranchSideFuncs:
                - cert_free
            - BranchSide:      'sshkey.c:1448,3'
              BranchSideFuncs:
                - cert_free
        - Branch String:   'sshkey.c:1449,35'
          Branch Sides:
            - BranchSide:      'sshkey.c:1450,35'
              BranchSideFuncs:
                - strdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cert_free
                - cert_free
                - calloc
                - __sanitizer_cov_trace_cmp4
                - strdup
            - BranchSide:      'sshkey.c:1454,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cert_free
                - cert_free
                - calloc
                - __sanitizer_cov_trace_cmp4
                - strdup
        - Branch String:   'sshkey.c:1449,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1451,5'
              BranchSideFuncs:
                - cert_free
            - BranchSide:      'sshkey.c:1454,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cert_free
                - cert_free
                - calloc
                - __sanitizer_cov_trace_cmp4
                - strdup
        - Branch String:   'sshkey.c:1454,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1455,5'
              BranchSideFuncs:
                - cert_free
            - BranchSide:      'sshkey.c:1458,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - cert_free
                - cert_free
                - calloc
                - __sanitizer_cov_trace_cmp4
                - strdup
        - Branch String:   'sshkey.c:1458,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1459,32'
              BranchSideFuncs:
                - calloc
                - __sanitizer_cov_trace_cmp4
                - cert_free
                - cert_free
                - strdup
            - BranchSide:      'sshkey.c:1473,20'
              BranchSideFuncs:
                - cert_free
                - cert_free
        - Branch String:   'sshkey.c:1459,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1461,6'
              BranchSideFuncs:
                - cert_free
            - BranchSide:      'sshkey.c:1464,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - cert_free
                - cert_free
                - strdup
        - Branch String:   'sshkey.c:1464,3'
          Branch Sides:
            - BranchSide:      'sshkey.c:1465,31'
              BranchSideFuncs:
                - strdup
                - __sanitizer_cov_trace_cmp4
                - cert_free
                - cert_free
            - BranchSide:      'sshkey.c:1472,2'
              BranchSideFuncs:
                - cert_free
                - cert_free
        - Branch String:   'sshkey.c:1466,8'
          Branch Sides:
            - BranchSide:      'sshkey.c:1467,23'
              BranchSideFuncs:
                - cert_free
            - BranchSide:      'sshkey.c:1471,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - cert_free
                - cert_free
                - strdup
      Callsites:
        - Src:             'sshkey.c:1426,12'
          Dst:             cert_new
        - Src:             'sshkey.c:1429,11'
          Dst:             sshbuf_putb
        - Src:             'sshkey.c:1430,11'
          Dst:             sshbuf_putb
        - Src:             'sshkey.c:1431,11'
          Dst:             sshbuf_putb
        - Src:             'sshkey.c:1438,25'
          Dst:             strdup
        - Src:             'sshkey.c:1446,16'
          Dst:             sshkey_from_private
        - Src:             'sshkey.c:1450,28'
          Dst:             strdup
        - Src:             'sshkey.c:1459,25'
          Dst:             calloc
        - Src:             'sshkey.c:1465,24'
          Dst:             strdup
        - Src:             'sshkey.c:1476,2'
          Dst:             cert_free
        - Src:             'sshkey.c:1481,2'
          Dst:             cert_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_ssh_name_from_type_nid
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 215
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          40
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshkey_impl_from_type_nid
      functionUses:    4
      BranchProfiles:
        - Branch String:   'sshkey.c:218,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:219,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:220,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:218,14'
          Dst:             sshkey_impl_from_type_nid
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_private_deserialize
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2504
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshkey **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         45
      ICount:          267
      EdgeCount:       62
      CyclomaticComplexity: 19
      functionsReached:
        - memcmp
        - sshbuf_get_cstring
        - sshkey_ecdsa_nid_from_name
        - sshkey_free
        - sshkey_froms
        - sshkey_impl_from_type
        - sshkey_new
        - sshkey_type_from_name
        - sshkey_type_is_cert
        - strcmp
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:2512,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2513,4'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_from_name
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - sshkey_impl_from_type
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_froms
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ecdsa_nid_from_name
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:2514,30'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_from_name
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - sshkey_impl_from_type
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_froms
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ecdsa_nid_from_name
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:2514,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2515,3'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
            - BranchSide:      'sshkey.c:2516,31'
              BranchSideFuncs:
                - sshkey_type_from_name
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - sshkey_impl_from_type
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_froms
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ecdsa_nid_from_name
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:2517,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2523,25'
              BranchSideFuncs:
                - sshkey_froms
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_impl_from_type
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ecdsa_nid_from_name
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:2545,23'
              BranchSideFuncs:
                - sshkey_new
                - sshkey_impl_from_type
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2523,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2524,4'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
            - BranchSide:      'sshkey.c:2525,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_impl_from_type
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ecdsa_nid_from_name
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:2525,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2526,6'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
            - BranchSide:      'sshkey.c:2530,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_impl_from_type
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ecdsa_nid_from_name
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:2530,28'
          Branch Sides:
            - BranchSide:      'sshkey.c:2531,7'
              BranchSideFuncs:
                - sshkey_ecdsa_nid_from_name
                - __sanitizer_cov_trace_cmp4
                - sshkey_impl_from_type
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2539,27'
              BranchSideFuncs:
                - sshkey_impl_from_type
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2530,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2532,6'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
            - BranchSide:      'sshkey.c:2539,27'
              BranchSideFuncs:
                - sshkey_impl_from_type
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2545,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:0,0'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
            - BranchSide:      'sshkey.c:2546,6'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
        - Branch String:   'sshkey.c:2550,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2551,5'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
            - BranchSide:      'sshkey.c:2554,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2554,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2555,3'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
            - BranchSide:      'sshkey.c:2558,7'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2558,37'
          Branch Sides:
            - BranchSide:      'sshkey.c:2558,41'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2560,7'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2558,67'
          Branch Sides:
            - BranchSide:      'sshkey.c:2559,13'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
            - BranchSide:      'sshkey.c:2562,5'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
        - Branch String:   'sshkey.c:2559,62'
          Branch Sides:
            - BranchSide:      'sshkey.c:2560,7'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
            - BranchSide:      'sshkey.c:2562,5'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
        - Branch String:   'sshkey.c:2560,33'
          Branch Sides:
            - BranchSide:      'sshkey.c:2560,37'
              BranchSideFuncs:
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_free
                - free
                - free
            - BranchSide:      'sshkey.c:2566,4'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
        - Branch String:   'sshkey.c:2560,59'
          Branch Sides:
            - BranchSide:      'sshkey.c:2561,13'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
            - BranchSide:      'sshkey.c:2562,5'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
        - Branch String:   'sshkey.c:2558,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2562,5'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
            - BranchSide:      'sshkey.c:2566,4'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
        - Branch String:   'sshkey.c:2567,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2567,12'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
            - BranchSide:      'sshkey.c:2568,9'
              BranchSideFuncs:
                - free
                - sshkey_free
                - free
                - free
      Callsites:
        - Src:             'sshkey.c:2514,11'
          Dst:             sshbuf_get_cstring
        - Src:             'sshkey.c:2516,9'
          Dst:             sshkey_type_from_name
        - Src:             'sshkey.c:2517,6'
          Dst:             sshkey_type_is_cert
        - Src:             'sshkey.c:2523,12'
          Dst:             sshkey_froms
        - Src:             'sshkey.c:2531,23'
          Dst:             sshkey_ecdsa_nid_from_name
        - Src:             'sshkey.c:2545,12'
          Dst:             sshkey_new
        - Src:             'sshkey.c:2550,14'
          Dst:             sshkey_impl_from_type
        - Src:             'sshkey.c:2559,6'
          Dst:             strcmp
        - Src:             'sshkey.c:2561,6'
          Dst:             memcmp
        - Src:             'sshkey.c:2573,2'
          Dst:             sshkey_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    private2_check_padding
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1642
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         11
      ICount:          64
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - explicit_bzero
        - sshbuf_get_u8
        - sshbuf_len
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:1648,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1649,26'
              BranchSideFuncs:
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      'sshkey.c:1657,4'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
        - Branch String:   'sshkey.c:1649,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1650,4'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      'sshkey.c:1651,7'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - explicit_bzero
                - explicit_bzero
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1651,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1648,2'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      'sshkey.c:1652,6'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
      Callsites:
        - Src:             'sshkey.c:1648,9'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:1649,12'
          Dst:             sshbuf_get_u8
        - Src:             'sshkey.c:1659,2'
          Dst:             explicit_bzero
        - Src:             'sshkey.c:1660,2'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_ecdsa_nid_from_name
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 277
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         15
      ICount:          88
      EdgeCount:       19
      CyclomaticComplexity: 6
      functionsReached:
        - key_type_is_ecdsa_variant
        - strcmp
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshkey.c:280,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:281,43'
              BranchSideFuncs:
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:287,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:281,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:282,4'
              BranchSideFuncs:
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:283,16'
              BranchSideFuncs:
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:283,33'
          Branch Sides:
            - BranchSide:      'sshkey.c:284,14'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:286,2'
              BranchSideFuncs:
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:283,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:285,20'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:286,2'
              BranchSideFuncs:
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'sshkey.c:281,8'
          Dst:             key_type_is_ecdsa_variant
        - Src:             'sshkey.c:284,7'
          Dst:             strcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    key_type_is_ecdsa_variant
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 264
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         8
      ICount:          36
      EdgeCount:       14
      CyclomaticComplexity: 8
      functionsReached: []
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshkey.c:265,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:270,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:270,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:270,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:270,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:272,2'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_parse_private2_pubkey
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3150
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'int '
        - 'struct.sshkey **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         32
      ICount:          174
      EdgeCount:       44
      CyclomaticComplexity: 14
      functionsReached:
        - private2_uudecode
        - sshbuf_consume
        - sshbuf_free
        - sshbuf_get_string_direct
        - sshbuf_get_u32
        - sshkey_free
        - sshkey_froms
        - sshkey_type_plain
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:3156,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3157,4'
              BranchSideFuncs:
                - private2_uudecode
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_froms
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - sshkey_type_plain
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:3159,29'
              BranchSideFuncs:
                - private2_uudecode
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_froms
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - sshkey_type_plain
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:3159,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3160,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3162,26'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_froms
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - sshkey_type_plain
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:3162,61'
          Branch Sides:
            - BranchSide:      'sshkey.c:3163,11'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3167,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
        - Branch String:   'sshkey.c:3163,45'
          Branch Sides:
            - BranchSide:      'sshkey.c:3164,11'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3167,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
        - Branch String:   'sshkey.c:3164,45'
          Branch Sides:
            - BranchSide:      'sshkey.c:3165,11'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3167,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
        - Branch String:   'sshkey.c:3165,45'
          Branch Sides:
            - BranchSide:      'sshkey.c:3166,26'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3167,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
        - Branch String:   'sshkey.c:3162,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3167,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3169,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_froms
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - sshkey_type_plain
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:3169,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3171,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3176,24'
              BranchSideFuncs:
                - sshkey_froms
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - sshkey_type_plain
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:3176,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3177,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3179,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshkey_free
                - sshkey_type_plain
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:3179,25'
          Branch Sides:
            - BranchSide:      'sshkey.c:3180,24'
              BranchSideFuncs:
                - sshkey_type_plain
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - sshbuf_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3186,4'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
        - Branch String:   'sshkey.c:3179,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3181,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3186,4'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
        - Branch String:   'sshkey.c:3187,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3187,14'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3188,11'
              BranchSideFuncs:
                - sshbuf_free
                - sshkey_free
      Callsites:
        - Src:             'sshkey.c:3159,11'
          Dst:             private2_uudecode
        - Src:             'sshkey.c:3162,11'
          Dst:             sshbuf_consume
        - Src:             'sshkey.c:3163,11'
          Dst:             sshbuf_get_string_direct
        - Src:             'sshkey.c:3164,11'
          Dst:             sshbuf_get_string_direct
        - Src:             'sshkey.c:3165,11'
          Dst:             sshbuf_get_string_direct
        - Src:             'sshkey.c:3166,11'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey.c:3176,11'
          Dst:             sshkey_froms
        - Src:             'sshkey.c:3180,6'
          Dst:             sshkey_type_plain
        - Src:             'sshkey.c:3180,33'
          Dst:             sshkey_type_plain
        - Src:             'sshkey.c:3192,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:3193,2'
          Dst:             sshkey_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_parse_pubkey_from_private_fileblob_type
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3570
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'int '
        - 'struct.sshkey **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         9
      ICount:          57
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_parse_private2_pubkey
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:3573,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3574,4'
              BranchSideFuncs:
                - sshkey_parse_private2_pubkey
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3576,40'
              BranchSideFuncs:
                - sshkey_parse_private2_pubkey
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3576,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3577,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3578,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:3576,11'
          Dst:             sshkey_parse_private2_pubkey
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_sig_details_free
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3563
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey_sig_details *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          17
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - freezero
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'sshkey.c:3564,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_parse_private_fileblob
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3551
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.sshbuf *'
        - 'char *'
        - 'struct.sshkey **'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         9
      ICount:          54
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_parse_private_fileblob_type
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:3552,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3553,4'
              BranchSideFuncs:
                - sshkey_parse_private_fileblob_type
            - BranchSide:      'sshkey.c:3554,6'
              BranchSideFuncs:
                - sshkey_parse_private_fileblob_type
        - Branch String:   'sshkey.c:3554,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3554,6'
              BranchSideFuncs:
                - sshkey_parse_private_fileblob_type
            - BranchSide:      'sshkey.c:3555,4'
              BranchSideFuncs:
                - sshkey_parse_private_fileblob_type
      Callsites:
        - Src:             'sshkey.c:3557,9'
          Dst:             sshkey_parse_private_fileblob_type
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_parse_private_fileblob_type
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3519
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.sshbuf *'
        - 'int '
        - 'char *'
        - 'struct.sshkey **'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         16
      ICount:          104
      EdgeCount:       18
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_parse_private2
        - sshkey_parse_private_pem_fileblob
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:3522,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3523,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - sshkey_parse_private2
                - sshkey_parse_private2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_parse_private_pem_fileblob
            - BranchSide:      'sshkey.c:3524,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - sshkey_parse_private2
                - sshkey_parse_private2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_parse_private_pem_fileblob
        - Branch String:   'sshkey.c:3524,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3525,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - sshkey_parse_private2
                - sshkey_parse_private2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_parse_private_pem_fileblob
            - BranchSide:      'sshkey.c:3527,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - sshkey_parse_private2
                - sshkey_parse_private2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_parse_private_pem_fileblob
        - Branch String:   'sshkey.c:3527,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:3531,32'
              BranchSideFuncs:
                - sshkey_parse_private2
            - BranchSide:      'sshkey.c:3531,32'
              BranchSideFuncs:
                - sshkey_parse_private2
            - BranchSide:      'sshkey.c:3534,29'
              BranchSideFuncs:
                - sshkey_parse_private2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_parse_private_pem_fileblob
        - Branch String:   'sshkey.c:3537,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3538,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3540,44'
              BranchSideFuncs:
                - sshkey_parse_private_pem_fileblob
      Callsites:
        - Src:             'sshkey.c:3531,10'
          Dst:             sshkey_parse_private2
        - Src:             'sshkey.c:3534,7'
          Dst:             sshkey_parse_private2
        - Src:             'sshkey.c:3540,10'
          Dst:             sshkey_parse_private_pem_fileblob
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_parse_private2
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3090
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.sshbuf *'
        - 'int '
        - 'char *'
        - 'struct.sshkey **'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         35
      ICount:          204
      EdgeCount:       47
      CyclomaticComplexity: 14
      functionsReached:
        - private2_check_padding
        - private2_decrypt
        - private2_uudecode
        - sshbuf_free
        - sshbuf_get_cstring
        - sshkey_equal
        - sshkey_free
        - sshkey_private_deserialize
        - sshkey_type_plain
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:3096,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3097,4'
              BranchSideFuncs:
                - private2_uudecode
                - __sanitizer_cov_trace_const_cmp4
                - private2_decrypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_equal
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
                - sshkey_type_plain
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:3098,6'
              BranchSideFuncs:
                - private2_uudecode
                - __sanitizer_cov_trace_const_cmp4
                - private2_decrypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_equal
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
                - sshkey_type_plain
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:3098,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3099,4'
              BranchSideFuncs:
                - private2_uudecode
                - __sanitizer_cov_trace_const_cmp4
                - private2_decrypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_equal
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
                - sshkey_type_plain
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:3102,29'
              BranchSideFuncs:
                - private2_uudecode
                - __sanitizer_cov_trace_const_cmp4
                - private2_decrypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_equal
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
                - sshkey_type_plain
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:3102,51'
          Branch Sides:
            - BranchSide:      'sshkey.c:3103,28'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3105,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
        - Branch String:   'sshkey.c:3102,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3105,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3107,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_equal
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
                - sshkey_type_plain
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:3107,25'
          Branch Sides:
            - BranchSide:      'sshkey.c:3108,24'
              BranchSideFuncs:
                - sshkey_type_plain
                - sshkey_type_plain
                - __sanitizer_cov_trace_cmp4
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_equal
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3114,38'
              BranchSideFuncs:
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_equal
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
        - Branch String:   'sshkey.c:3107,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3109,5'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3114,38'
              BranchSideFuncs:
                - sshkey_private_deserialize
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_equal
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
        - Branch String:   'sshkey.c:3114,59'
          Branch Sides:
            - BranchSide:      'sshkey.c:3115,30'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3116,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
        - Branch String:   'sshkey.c:3114,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3116,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3119,34'
              BranchSideFuncs:
                - private2_check_padding
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_equal
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
        - Branch String:   'sshkey.c:3119,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3120,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3123,20'
              BranchSideFuncs:
                - sshkey_equal
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
        - Branch String:   'sshkey.c:3123,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3124,5'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3129,4'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
        - Branch String:   'sshkey.c:3130,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3131,11'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3134,6'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
        - Branch String:   'sshkey.c:3134,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3134,18'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3135,15'
              BranchSideFuncs:
                - free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - sshkey_free
      Callsites:
        - Src:             'sshkey.c:3102,11'
          Dst:             private2_uudecode
        - Src:             'sshkey.c:3103,11'
          Dst:             private2_decrypt
        - Src:             'sshkey.c:3108,6'
          Dst:             sshkey_type_plain
        - Src:             'sshkey.c:3108,33'
          Dst:             sshkey_type_plain
        - Src:             'sshkey.c:3114,11'
          Dst:             sshkey_private_deserialize
        - Src:             'sshkey.c:3115,11'
          Dst:             sshbuf_get_cstring
        - Src:             'sshkey.c:3119,11'
          Dst:             private2_check_padding
        - Src:             'sshkey.c:3123,7'
          Dst:             sshkey_equal
        - Src:             'sshkey.c:3140,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:3141,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:3142,2'
          Dst:             sshkey_free
        - Src:             'sshkey.c:3143,2'
          Dst:             sshkey_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_parse_private_pem_fileblob
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3416
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.sshbuf *'
        - 'int '
        - 'char *'
        - 'struct.sshkey **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         72
      ICount:          379
      EdgeCount:       98
      CyclomaticComplexity: 28
      functionsReached:
        - BIO_free
        - BIO_s_mem
        - BIO_write
        - EC_KEY_get0_group
        - EC_KEY_get0_public_key
        - EVP_PKEY_base_id
        - EVP_PKEY_free
        - EVP_PKEY_get1_DSA
        - EVP_PKEY_get1_EC_KEY
        - EVP_PKEY_get1_RSA
        - PEM_read_bio_PrivateKey
        - RSA_blinding_on
        - clear_libcrypto_errors
        - convert_libcrypto_error
        - pem_passphrase_cb
        - sshbuf_len
        - sshbuf_ptr
        - sshkey_check_rsa_length
        - sshkey_curve_nid_to_name
        - sshkey_ec_validate_private
        - sshkey_ec_validate_public
        - sshkey_ecdsa_key_to_nid
        - sshkey_free
        - sshkey_new
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:3422,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3423,4'
              BranchSideFuncs:
                - BIO_s_mem
                - BIO_new
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_len
                - BIO_write
                - sshbuf_len
                - __sanitizer_cov_trace_cmp4
                - clear_libcrypto_errors
                - PEM_read_bio_PrivateKey
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_DSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_RSA
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - convert_libcrypto_error
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3425,21'
              BranchSideFuncs:
                - BIO_s_mem
                - BIO_new
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_len
                - BIO_write
                - sshbuf_len
                - __sanitizer_cov_trace_cmp4
                - clear_libcrypto_errors
                - PEM_read_bio_PrivateKey
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_DSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_RSA
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - convert_libcrypto_error
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3425,43'
          Branch Sides:
            - BranchSide:      'sshkey.c:3425,57'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3426,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:3425,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3426,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3427,16'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - BIO_write
                - sshbuf_len
                - __sanitizer_cov_trace_cmp4
                - clear_libcrypto_errors
                - PEM_read_bio_PrivateKey
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_DSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_RSA
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - convert_libcrypto_error
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3427,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3429,5'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3433,2'
              BranchSideFuncs:
                - clear_libcrypto_errors
                - PEM_read_bio_PrivateKey
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_DSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_RSA
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - convert_libcrypto_error
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3434,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3442,7'
              BranchSideFuncs:
                - convert_libcrypto_error
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3448,23'
              BranchSideFuncs:
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_DSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_RSA
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3442,26'
          Branch Sides:
            - BranchSide:      'sshkey.c:3442,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - convert_libcrypto_error
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3445,8'
              BranchSideFuncs:
                - convert_libcrypto_error
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3442,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3443,6'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3445,8'
              BranchSideFuncs:
                - convert_libcrypto_error
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3448,43'
          Branch Sides:
            - BranchSide:      'sshkey.c:3449,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_DSA
                - sshkey_new
                - EVP_PKEY_get1_RSA
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3465,30'
              BranchSideFuncs:
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_DSA
        - Branch String:   'sshkey.c:3449,26'
          Branch Sides:
            - BranchSide:      'sshkey.c:3449,29'
              BranchSideFuncs:
                - sshkey_new
                - EVP_PKEY_get1_RSA
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3450,14'
              BranchSideFuncs:
                - sshkey_new
                - EVP_PKEY_get1_RSA
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3448,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3450,14'
              BranchSideFuncs:
                - sshkey_new
                - EVP_PKEY_get1_RSA
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3465,30'
              BranchSideFuncs:
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_DSA
        - Branch String:   'sshkey.c:3450,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3451,6'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3454,32'
              BranchSideFuncs:
                - EVP_PKEY_get1_RSA
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3459,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3460,6'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3463,36'
              BranchSideFuncs:
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3463,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3464,4'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3465,2'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3465,50'
          Branch Sides:
            - BranchSide:      'sshkey.c:3466,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_DSA
            - BranchSide:      'sshkey.c:3477,30'
              BranchSideFuncs:
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3466,26'
          Branch Sides:
            - BranchSide:      'sshkey.c:3466,29'
              BranchSideFuncs:
                - sshkey_new
                - EVP_PKEY_get1_DSA
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3467,14'
              BranchSideFuncs:
                - sshkey_new
                - EVP_PKEY_get1_DSA
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3465,13'
          Branch Sides:
            - BranchSide:      'sshkey.c:3467,14'
              BranchSideFuncs:
                - sshkey_new
                - EVP_PKEY_get1_DSA
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3477,30'
              BranchSideFuncs:
                - EVP_PKEY_base_id
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3467,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3468,6'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3471,32'
              BranchSideFuncs:
                - EVP_PKEY_get1_DSA
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3477,49'
          Branch Sides:
            - BranchSide:      'sshkey.c:3478,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3500,5'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3478,26'
          Branch Sides:
            - BranchSide:      'sshkey.c:3478,29'
              BranchSideFuncs:
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3479,14'
              BranchSideFuncs:
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3477,13'
          Branch Sides:
            - BranchSide:      'sshkey.c:3479,14'
              BranchSideFuncs:
                - sshkey_new
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3500,5'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3479,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3480,6'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3483,37'
              BranchSideFuncs:
                - EVP_PKEY_get1_EC_KEY
                - sshkey_ecdsa_key_to_nid
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_nid_to_name
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3486,28'
          Branch Sides:
            - BranchSide:      'sshkey.c:3487,32'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3491,6'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3487,56'
          Branch Sides:
            - BranchSide:      'sshkey.c:3488,51'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3491,6'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3489,48'
          Branch Sides:
            - BranchSide:      'sshkey.c:3490,34'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3491,6'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3486,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3491,6'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3499,2'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
        - Branch String:   'sshkey.c:3504,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3504,14'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
            - BranchSide:      'sshkey.c:3505,11'
              BranchSideFuncs:
                - BIO_free
                - EVP_PKEY_free
                - sshkey_free
      Callsites:
        - Src:             'sshkey.c:3425,21'
          Dst:             BIO_s_mem
        - Src:             'sshkey.c:3425,13'
          Dst:             BIO_new
        - Src:             'sshkey.c:3425,46'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:3427,21'
          Dst:             sshbuf_ptr
        - Src:             'sshkey.c:3427,39'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:3427,6'
          Dst:             BIO_write
        - Src:             'sshkey.c:3428,11'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:3433,2'
          Dst:             clear_libcrypto_errors
        - Src:             'sshkey.c:3434,12'
          Dst:             PEM_read_bio_PrivateKey
        - Src:             'sshkey.c:3434,12'
          Dst:             pem_passphrase_cb
        - Src:             'sshkey.c:3445,8'
          Dst:             convert_libcrypto_error
        - Src:             'sshkey.c:3448,6'
          Dst:             EVP_PKEY_base_id
        - Src:             'sshkey.c:3450,14'
          Dst:             sshkey_new
        - Src:             'sshkey.c:3454,14'
          Dst:             EVP_PKEY_get1_RSA
        - Src:             'sshkey.c:3459,7'
          Dst:             RSA_blinding_on
        - Src:             'sshkey.c:3463,12'
          Dst:             sshkey_check_rsa_length
        - Src:             'sshkey.c:3465,13'
          Dst:             EVP_PKEY_base_id
        - Src:             'sshkey.c:3467,14'
          Dst:             sshkey_new
        - Src:             'sshkey.c:3471,14'
          Dst:             EVP_PKEY_get1_DSA
        - Src:             'sshkey.c:3477,13'
          Dst:             EVP_PKEY_base_id
        - Src:             'sshkey.c:3479,14'
          Dst:             sshkey_new
        - Src:             'sshkey.c:3483,16'
          Dst:             EVP_PKEY_get1_EC_KEY
        - Src:             'sshkey.c:3485,20'
          Dst:             sshkey_ecdsa_key_to_nid
        - Src:             'sshkey.c:3487,7'
          Dst:             sshkey_curve_nid_to_name
        - Src:             'sshkey.c:3488,33'
          Dst:             EC_KEY_get0_group
        - Src:             'sshkey.c:3489,7'
          Dst:             EC_KEY_get0_public_key
        - Src:             'sshkey.c:3488,7'
          Dst:             sshkey_ec_validate_public
        - Src:             'sshkey.c:3490,7'
          Dst:             sshkey_ec_validate_private
        - Src:             'sshkey.c:3509,2'
          Dst:             BIO_free
        - Src:             'sshkey.c:3510,2'
          Dst:             EVP_PKEY_free
        - Src:             'sshkey.c:3511,2'
          Dst:             sshkey_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BIO_s_mem
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.bio_method_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BIO_new
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.bio_st *'
      argCount:        1
      argTypes:
        - 'struct.bio_method_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BIO_write
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.bio_st *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    PEM_read_bio_PrivateKey
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_pkey_st *'
      argCount:        4
      argTypes:
        - 'struct.bio_st *'
        - 'struct.evp_pkey_st **'
        - 'func_type *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_PKEY_base_id
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.evp_pkey_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_PKEY_get1_RSA
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.rsa_st *'
      argCount:        1
      argTypes:
        - 'struct.evp_pkey_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RSA_blinding_on
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.rsa_st *'
        - 'struct.bignum_ctx *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_check_rsa_length
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1324
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         22
      ICount:          105
      EdgeCount:       29
      CyclomaticComplexity: 9
      functionsReached:
        - BN_num_bits
        - RSA_get0_key
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshkey.c:1329,16'
          Branch Sides:
            - BranchSide:      'sshkey.c:1329,19'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1331,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:1329,34'
          Branch Sides:
            - BranchSide:      'sshkey.c:1330,7'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1331,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:1330,26'
          Branch Sides:
            - BranchSide:      'sshkey.c:1330,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - RSA_get0_key
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:1332,15'
              BranchSideFuncs:
                - RSA_get0_key
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:1329,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1331,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1332,15'
              BranchSideFuncs:
                - RSA_get0_key
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:1334,43'
          Branch Sides:
            - BranchSide:      'sshkey.c:1335,7'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1336,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:1335,20'
          Branch Sides:
            - BranchSide:      'sshkey.c:1335,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:1338,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:1334,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1336,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1338,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:1332,2'
          Dst:             RSA_get0_key
        - Src:             'sshkey.c:1333,10'
          Dst:             BN_num_bits
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_PKEY_get1_DSA
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.dsa_st *'
      argCount:        1
      argTypes:
        - 'struct.evp_pkey_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_PKEY_get1_EC_KEY
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.ec_key_st *'
      argCount:        1
      argTypes:
        - 'struct.evp_pkey_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_ecdsa_key_to_nid
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1345
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ec_key_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         20
      ICount:          125
      EdgeCount:       26
      CyclomaticComplexity: 8
      functionsReached:
        - EC_GROUP_cmp
        - EC_GROUP_free
        - EC_GROUP_get_curve_name
        - EC_GROUP_new_by_curve_name
        - EC_GROUP_set_asn1_flag
        - EC_KEY_get0_group
        - EC_KEY_set_group
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:1367,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1368,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1369,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_set_asn1_flag
                - EC_KEY_set_group
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_free
                - EC_GROUP_new_by_curve_name
                - EC_GROUP_cmp
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_free
        - Branch String:   'sshkey.c:1369,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1370,45'
              BranchSideFuncs:
                - EC_GROUP_new_by_curve_name
                - EC_GROUP_cmp
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_set_asn1_flag
                - EC_KEY_set_group
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_free
            - BranchSide:      'sshkey.c:1376,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_set_asn1_flag
                - EC_KEY_set_group
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_free
        - Branch String:   'sshkey.c:1370,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1371,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1372,20'
              BranchSideFuncs:
                - EC_GROUP_cmp
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_set_asn1_flag
                - EC_KEY_set_group
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_free
                - EC_GROUP_new_by_curve_name
        - Branch String:   'sshkey.c:1372,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1373,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_set_asn1_flag
                - EC_KEY_set_group
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_free
            - BranchSide:      'sshkey.c:1374,17'
              BranchSideFuncs:
                - EC_GROUP_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_set_asn1_flag
                - EC_KEY_set_group
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_free
                - EC_GROUP_new_by_curve_name
                - EC_GROUP_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1376,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1378,26'
              BranchSideFuncs:
                - EC_GROUP_set_asn1_flag
                - EC_KEY_set_group
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_free
            - BranchSide:      'sshkey.c:1384,14'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:1379,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1380,18'
              BranchSideFuncs:
                - EC_GROUP_free
            - BranchSide:      'sshkey.c:1383,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:1357,22'
          Dst:             EC_KEY_get0_group
        - Src:             'sshkey.c:1367,13'
          Dst:             EC_GROUP_get_curve_name
        - Src:             'sshkey.c:1370,13'
          Dst:             EC_GROUP_new_by_curve_name
        - Src:             'sshkey.c:1372,7'
          Dst:             EC_GROUP_cmp
        - Src:             'sshkey.c:1374,3'
          Dst:             EC_GROUP_free
        - Src:             'sshkey.c:1378,3'
          Dst:             EC_GROUP_set_asn1_flag
        - Src:             'sshkey.c:1379,7'
          Dst:             EC_KEY_set_group
        - Src:             'sshkey.c:1380,4'
          Dst:             EC_GROUP_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_curve_nid_to_name
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 528
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          33
      EdgeCount:       10
      CyclomaticComplexity: 6
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:529,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:531,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:533,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:536,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:539,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_KEY_get0_group
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.ec_group_st *'
      argCount:        1
      argTypes:
        - 'struct.ec_key_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    12
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_KEY_get0_public_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.ec_point_st *'
      argCount:        1
      argTypes:
        - 'struct.ec_key_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    9
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_ec_validate_public
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2582
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ec_group_st *'
        - 'struct.ec_point_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         40
      ICount:          221
      EdgeCount:       56
      CyclomaticComplexity: 18
      functionsReached:
        - BN_clear_free
        - BN_cmp
        - BN_new
        - BN_num_bits
        - BN_value_one
        - EC_GROUP_get_order
        - EC_GROUP_method_of
        - EC_POINT_free
        - EC_POINT_get_affine_coordinates_GFp
        - EC_POINT_is_at_infinity
        - EC_POINT_mul
        - EC_POINT_new
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshkey.c:2599,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2601,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2604,30'
              BranchSideFuncs:
                - EC_POINT_is_at_infinity
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_new
                - BN_new
                - EC_GROUP_get_order
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_get_affine_coordinates_GFp
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - EC_POINT_new
                - EC_POINT_mul
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_is_at_infinity
                - __sanitizer_cov_trace_const_cmp4
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2604,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2605,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2607,11'
              BranchSideFuncs:
                - BN_new
                - BN_new
                - BN_new
                - BN_new
                - EC_GROUP_get_order
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_get_affine_coordinates_GFp
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - EC_POINT_new
                - EC_POINT_mul
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_is_at_infinity
                - __sanitizer_cov_trace_const_cmp4
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2607,29'
          Branch Sides:
            - BranchSide:      'sshkey.c:2608,11'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2611,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
        - Branch String:   'sshkey.c:2608,29'
          Branch Sides:
            - BranchSide:      'sshkey.c:2609,15'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2611,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
        - Branch String:   'sshkey.c:2609,33'
          Branch Sides:
            - BranchSide:      'sshkey.c:2610,13'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2611,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
        - Branch String:   'sshkey.c:2607,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2611,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2616,25'
              BranchSideFuncs:
                - EC_GROUP_get_order
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_get_affine_coordinates_GFp
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - EC_POINT_new
                - EC_POINT_mul
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_is_at_infinity
                - __sanitizer_cov_trace_const_cmp4
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2616,50'
          Branch Sides:
            - BranchSide:      'sshkey.c:2617,42'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2619,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
        - Branch String:   'sshkey.c:2616,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2619,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2622,18'
              BranchSideFuncs:
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - EC_POINT_new
                - EC_POINT_mul
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_is_at_infinity
                - __sanitizer_cov_trace_const_cmp4
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2622,47'
          Branch Sides:
            - BranchSide:      'sshkey.c:2623,18'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2624,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
        - Branch String:   'sshkey.c:2622,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2624,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2627,25'
              BranchSideFuncs:
                - EC_POINT_new
                - EC_POINT_mul
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_is_at_infinity
                - __sanitizer_cov_trace_const_cmp4
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2627,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2628,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2631,19'
              BranchSideFuncs:
                - EC_POINT_mul
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_is_at_infinity
                - __sanitizer_cov_trace_const_cmp4
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2631,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2632,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2635,30'
              BranchSideFuncs:
                - EC_POINT_is_at_infinity
                - __sanitizer_cov_trace_const_cmp4
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2635,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2636,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2639,14'
              BranchSideFuncs:
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2639,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2640,7'
              BranchSideFuncs:
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2643,13'
              BranchSideFuncs:
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
        - Branch String:   'sshkey.c:2643,26'
          Branch Sides:
            - BranchSide:      'sshkey.c:2643,36'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2644,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
        - Branch String:   'sshkey.c:2643,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2644,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
            - BranchSide:      'sshkey.c:2645,6'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - EC_POINT_free
      Callsites:
        - Src:             'sshkey.c:2599,31'
          Dst:             EC_GROUP_method_of
        - Src:             'sshkey.c:2599,6'
          Dst:             EC_METHOD_get_field_type
        - Src:             'sshkey.c:2604,6'
          Dst:             EC_POINT_is_at_infinity
        - Src:             'sshkey.c:2607,11'
          Dst:             BN_new
        - Src:             'sshkey.c:2608,11'
          Dst:             BN_new
        - Src:             'sshkey.c:2609,15'
          Dst:             BN_new
        - Src:             'sshkey.c:2610,13'
          Dst:             BN_new
        - Src:             'sshkey.c:2616,6'
          Dst:             EC_GROUP_get_order
        - Src:             'sshkey.c:2617,6'
          Dst:             EC_POINT_get_affine_coordinates_GFp
        - Src:             'sshkey.c:2622,6'
          Dst:             BN_num_bits
        - Src:             'sshkey.c:2622,24'
          Dst:             BN_num_bits
        - Src:             'sshkey.c:2623,6'
          Dst:             BN_num_bits
        - Src:             'sshkey.c:2623,24'
          Dst:             BN_num_bits
        - Src:             'sshkey.c:2627,12'
          Dst:             EC_POINT_new
        - Src:             'sshkey.c:2631,6'
          Dst:             EC_POINT_mul
        - Src:             'sshkey.c:2635,6'
          Dst:             EC_POINT_is_at_infinity
        - Src:             'sshkey.c:2639,26'
          Dst:             BN_value_one
        - Src:             'sshkey.c:2639,7'
          Dst:             BN_sub
        - Src:             'sshkey.c:2643,6'
          Dst:             BN_cmp
        - Src:             'sshkey.c:2643,29'
          Dst:             BN_cmp
        - Src:             'sshkey.c:2647,2'
          Dst:             BN_clear_free
        - Src:             'sshkey.c:2648,2'
          Dst:             BN_clear_free
        - Src:             'sshkey.c:2649,2'
          Dst:             BN_clear_free
        - Src:             'sshkey.c:2650,2'
          Dst:             BN_clear_free
        - Src:             'sshkey.c:2651,2'
          Dst:             EC_POINT_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_ec_validate_private
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2657
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ec_key_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         17
      ICount:          100
      EdgeCount:       23
      CyclomaticComplexity: 8
      functionsReached:
        - BN_clear_free
        - BN_new
        - BN_num_bits
        - BN_value_one
        - EC_KEY_get0_group
        - EC_KEY_get0_private_key
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:2661,33'
          Branch Sides:
            - BranchSide:      'sshkey.c:2661,43'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'sshkey.c:2662,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'sshkey.c:2661,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2662,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'sshkey.c:2667,43'
              BranchSideFuncs:
                - EC_KEY_get0_group
                - EC_GROUP_get_order
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_get0_private_key
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - EC_KEY_get0_private_key
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2667,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2668,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'sshkey.c:2671,42'
              BranchSideFuncs:
                - EC_KEY_get0_private_key
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - EC_KEY_get0_private_key
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2671,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2673,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'sshkey.c:2676,14'
              BranchSideFuncs:
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - EC_KEY_get0_private_key
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2676,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2677,7'
              BranchSideFuncs:
                - EC_KEY_get0_private_key
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'sshkey.c:2680,37'
              BranchSideFuncs:
                - EC_KEY_get0_private_key
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'sshkey.c:2680,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2681,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'sshkey.c:2682,6'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
      Callsites:
        - Src:             'sshkey.c:2661,15'
          Dst:             BN_new
        - Src:             'sshkey.c:2661,43'
          Dst:             BN_new
        - Src:             'sshkey.c:2667,25'
          Dst:             EC_KEY_get0_group
        - Src:             'sshkey.c:2667,6'
          Dst:             EC_GROUP_get_order
        - Src:             'sshkey.c:2671,18'
          Dst:             EC_KEY_get0_private_key
        - Src:             'sshkey.c:2671,6'
          Dst:             BN_num_bits
        - Src:             'sshkey.c:2672,6'
          Dst:             BN_num_bits
        - Src:             'sshkey.c:2676,26'
          Dst:             BN_value_one
        - Src:             'sshkey.c:2676,7'
          Dst:             BN_sub
        - Src:             'sshkey.c:2680,13'
          Dst:             EC_KEY_get0_private_key
        - Src:             'sshkey.c:2680,6'
          Dst:             BN_cmp
        - Src:             'sshkey.c:2684,2'
          Dst:             BN_clear_free
        - Src:             'sshkey.c:2685,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BIO_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.bio_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_PKEY_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.evp_pkey_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_new
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.bignum_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    20
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_GROUP_get_order
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ec_group_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_ctx *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_KEY_get0_private_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.bignum_st *'
      argCount:        1
      argTypes:
        - 'struct.ec_key_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_num_bits
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    21
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_value_one
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.bignum_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_sub
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_cmp
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    12
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_clear_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    56
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_GROUP_method_of
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.ec_method_st *'
      argCount:        1
      argTypes:
        - 'struct.ec_group_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_METHOD_get_field_type
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ec_method_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_POINT_is_at_infinity
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ec_group_st *'
        - 'struct.ec_point_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_POINT_get_affine_coordinates_GFp
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.ec_group_st *'
        - 'struct.ec_point_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_ctx *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_POINT_new
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.ec_point_st *'
      argCount:        1
      argTypes:
        - 'struct.ec_group_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_POINT_mul
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'struct.ec_group_st *'
        - 'struct.ec_point_st *'
        - 'struct.bignum_st *'
        - 'struct.ec_point_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_ctx *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_POINT_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ec_point_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_GROUP_get_curve_name
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ec_group_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_GROUP_new_by_curve_name
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.ec_group_st *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_GROUP_cmp
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ec_group_st *'
        - 'struct.ec_group_st *'
        - 'struct.bignum_ctx *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_GROUP_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ec_group_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_GROUP_set_asn1_flag
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ec_group_st *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_KEY_set_group
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ec_key_st *'
        - 'struct.ec_group_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RSA_get0_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'struct.rsa_st *'
        - 'struct.bignum_st **'
        - 'struct.bignum_st **'
        - 'struct.bignum_st **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    10
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_equal
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 710
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         16
      ICount:          81
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - cert_compare
        - sshkey_equal_public
        - sshkey_is_cert
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:711,16'
          Branch Sides:
            - BranchSide:      'sshkey.c:711,19'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:712,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:711,29'
          Branch Sides:
            - BranchSide:      'sshkey.c:711,32'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:712,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:711,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:712,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:713,21'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_equal_public
                - cert_compare
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:713,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:714,21'
              BranchSideFuncs:
                - cert_compare
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_equal_public
            - BranchSide:      'sshkey.c:717,29'
              BranchSideFuncs:
                - sshkey_equal_public
        - Branch String:   'sshkey.c:714,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:715,4'
              BranchSideFuncs:
                - sshkey_equal_public
            - BranchSide:      'sshkey.c:716,2'
              BranchSideFuncs:
                - sshkey_equal_public
      Callsites:
        - Src:             'sshkey.c:713,6'
          Dst:             sshkey_is_cert
        - Src:             'sshkey.c:714,8'
          Dst:             cert_compare
        - Src:             'sshkey.c:717,9'
          Dst:             sshkey_equal_public
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cert_compare
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 667
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey_cert *'
        - 'struct.sshkey_cert *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         18
      ICount:          96
      EdgeCount:       24
      CyclomaticComplexity: 8
      functionsReached:
        - sshbuf_len
        - sshbuf_ptr
        - timingsafe_bcmp
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:668,16'
          Branch Sides:
            - BranchSide:      'sshkey.c:668,19'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_len
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:670,6'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_len
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:668,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:669,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:670,6'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_len
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:670,16'
          Branch Sides:
            - BranchSide:      'sshkey.c:670,19'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:671,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:670,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:671,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:672,17'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_len
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:672,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:673,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:674,33'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_len
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:674,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:676,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:677,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:672,6'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:672,33'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:674,22'
          Dst:             sshbuf_ptr
        - Src:             'sshkey.c:674,47'
          Dst:             sshbuf_ptr
        - Src:             'sshkey.c:675,6'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:674,6'
          Dst:             timingsafe_bcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_equal_public
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 697
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         13
      ICount:          79
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - sshkey_impl_from_type
        - sshkey_type_plain
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:700,16'
          Branch Sides:
            - BranchSide:      'sshkey.c:700,19'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:702,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:700,29'
          Branch Sides:
            - BranchSide:      'sshkey.c:701,24'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:702,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:700,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:702,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:703,36'
              BranchSideFuncs:
                - sshkey_impl_from_type
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'sshkey.c:703,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:704,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:705,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
      Callsites:
        - Src:             'sshkey.c:701,6'
          Dst:             sshkey_type_plain
        - Src:             'sshkey.c:701,36'
          Dst:             sshkey_type_plain
        - Src:             'sshkey.c:703,14'
          Dst:             sshkey_impl_from_type
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_private_to_blob_pem_pkcs8
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3202
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         58
      ICount:          363
      EdgeCount:       76
      CyclomaticComplexity: 20
      functionsReached:
        - BIO_ctrl
        - BIO_free
        - BIO_s_mem
        - EVP_PKEY_free
        - EVP_PKEY_new
        - EVP_PKEY_set1_DSA
        - EVP_PKEY_set1_EC_KEY
        - EVP_PKEY_set1_RSA
        - EVP_aes_128_cbc
        - PEM_write_bio_DSAPrivateKey
        - PEM_write_bio_ECPrivateKey
        - PEM_write_bio_PrivateKey
        - PEM_write_bio_RSAPrivateKey
        - sshbuf_free
        - sshbuf_new
        - sshbuf_put
        - sshbuf_putb
        - sshkey_is_shielded
        - sshkey_shield_private
        - sshkey_unshield_private
        - strlen
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:3206,23'
          Branch Sides:
            - BranchSide:      'sshkey.c:3206,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - BIO_s_mem
                - BIO_new
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - PEM_write_bio_DSAPrivateKey
                - EVP_PKEY_new
                - __sanitizer_cov_trace_const_cmp4
                - EVP_aes_128_cbc
            - BranchSide:      'sshkey.c:3206,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - BIO_s_mem
                - BIO_new
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - PEM_write_bio_DSAPrivateKey
                - EVP_PKEY_new
                - __sanitizer_cov_trace_const_cmp4
                - EVP_aes_128_cbc
        - Branch String:   'sshkey.c:3207,29'
          Branch Sides:
            - BranchSide:      'sshkey.c:3207,41'
              BranchSideFuncs:
                - EVP_aes_128_cbc
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - BIO_s_mem
                - BIO_new
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - PEM_write_bio_DSAPrivateKey
                - EVP_PKEY_new
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3207,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - BIO_s_mem
                - BIO_new
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - PEM_write_bio_DSAPrivateKey
                - EVP_PKEY_new
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3213,14'
          Branch Sides:
            - BranchSide:      'sshkey.c:3213,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - BIO_s_mem
                - BIO_new
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - PEM_write_bio_DSAPrivateKey
                - EVP_PKEY_new
            - BranchSide:      'sshkey.c:3215,14'
              BranchSideFuncs:
                - sshbuf_new
                - BIO_s_mem
                - BIO_new
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - PEM_write_bio_DSAPrivateKey
                - EVP_PKEY_new
        - Branch String:   'sshkey.c:3213,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3214,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3215,14'
              BranchSideFuncs:
                - sshbuf_new
                - BIO_s_mem
                - BIO_new
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - PEM_write_bio_DSAPrivateKey
                - EVP_PKEY_new
        - Branch String:   'sshkey.c:3215,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3216,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:3217,21'
              BranchSideFuncs:
                - BIO_s_mem
                - BIO_new
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - PEM_write_bio_DSAPrivateKey
                - EVP_PKEY_new
        - Branch String:   'sshkey.c:3217,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3218,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:3221,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - PEM_write_bio_DSAPrivateKey
                - EVP_PKEY_new
        - Branch String:   'sshkey.c:3221,37'
          Branch Sides:
            - BranchSide:      'sshkey.c:3221,48'
              BranchSideFuncs:
                - EVP_PKEY_new
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - PEM_write_bio_DSAPrivateKey
            - BranchSide:      'sshkey.c:3225,35'
              BranchSideFuncs:
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - PEM_write_bio_DSAPrivateKey
        - Branch String:   'sshkey.c:3221,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3222,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:3225,35'
              BranchSideFuncs:
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - PEM_write_bio_DSAPrivateKey
        - Branch String:   'sshkey.c:3225,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3226,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:3228,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - PEM_write_bio_DSAPrivateKey
        - Branch String:   'sshkey.c:3228,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:3230,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_DSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_DSAPrivateKey
            - BranchSide:      'sshkey.c:3239,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_EC_KEY
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_ECPrivateKey
            - BranchSide:      'sshkey.c:3248,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - PEM_write_bio_RSAPrivateKey
            - BranchSide:      'sshkey.c:3256,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3230,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3231,42'
              BranchSideFuncs:
                - PEM_write_bio_DSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3234,32'
              BranchSideFuncs:
                - EVP_PKEY_set1_DSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3239,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3240,41'
              BranchSideFuncs:
                - PEM_write_bio_ECPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3243,35'
              BranchSideFuncs:
                - EVP_PKEY_set1_EC_KEY
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3248,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3249,42'
              BranchSideFuncs:
                - PEM_write_bio_RSAPrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:3252,32'
              BranchSideFuncs:
                - EVP_PKEY_set1_RSA
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3259,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3260,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:3263,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:3263,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3264,43'
              BranchSideFuncs:
                - PEM_write_bio_PrivateKey
                - __sanitizer_cov_trace_const_cmp4
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:3270,14'
              BranchSideFuncs:
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
        - Branch String:   'sshkey.c:3264,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:3266,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:3269,2'
              BranchSideFuncs:
                - BIO_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
        - Branch String:   'sshkey.c:3270,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3271,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:3274,22'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
        - Branch String:   'sshkey.c:3274,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3275,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
            - BranchSide:      'sshkey.c:3276,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
                - sshkey_shield_private
        - Branch String:   'sshkey.c:3278,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3279,29'
              BranchSideFuncs:
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
            - BranchSide:      'sshkey.c:3280,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
                - sshbuf_putb
        - Branch String:   'sshkey.c:3280,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:3281,19'
              BranchSideFuncs:
                - sshbuf_putb
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
            - BranchSide:      'sshkey.c:3283,16'
              BranchSideFuncs:
                - EVP_PKEY_free
                - sshbuf_free
                - BIO_free
      Callsites:
        - Src:             'sshkey.c:3203,21'
          Dst:             sshkey_is_shielded
        - Src:             'sshkey.c:3205,18'
          Dst:             strlen
        - Src:             'sshkey.c:3207,41'
          Dst:             EVP_aes_128_cbc
        - Src:             'sshkey.c:3215,14'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:3217,21'
          Dst:             BIO_s_mem
        - Src:             'sshkey.c:3217,13'
          Dst:             BIO_new
        - Src:             'sshkey.c:3221,48'
          Dst:             EVP_PKEY_new
        - Src:             'sshkey.c:3225,11'
          Dst:             sshkey_unshield_private
        - Src:             'sshkey.c:3231,14'
          Dst:             PEM_write_bio_DSAPrivateKey
        - Src:             'sshkey.c:3234,14'
          Dst:             EVP_PKEY_set1_DSA
        - Src:             'sshkey.c:3240,14'
          Dst:             PEM_write_bio_ECPrivateKey
        - Src:             'sshkey.c:3243,14'
          Dst:             EVP_PKEY_set1_EC_KEY
        - Src:             'sshkey.c:3249,14'
          Dst:             PEM_write_bio_RSAPrivateKey
        - Src:             'sshkey.c:3252,14'
          Dst:             EVP_PKEY_set1_RSA
        - Src:             'sshkey.c:3264,18'
          Dst:             PEM_write_bio_PrivateKey
        - Src:             'sshkey.c:3270,14'
          Dst:             BIO_ctrl
        - Src:             'sshkey.c:3274,11'
          Dst:             sshbuf_put
        - Src:             'sshkey.c:3279,7'
          Dst:             sshkey_shield_private
        - Src:             'sshkey.c:3281,7'
          Dst:             sshbuf_putb
        - Src:             'sshkey.c:3283,2'
          Dst:             EVP_PKEY_free
        - Src:             'sshkey.c:3284,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:3285,2'
          Dst:             BIO_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_aes_128_cbc
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_cipher_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_PKEY_new
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_pkey_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    PEM_write_bio_DSAPrivateKey
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'struct.bio_st *'
        - 'struct.dsa_st *'
        - 'struct.evp_cipher_st *'
        - 'char *'
        - 'int '
        - 'func_type *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_PKEY_set1_DSA
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.evp_pkey_st *'
        - 'struct.dsa_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    PEM_write_bio_ECPrivateKey
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'struct.bio_st *'
        - 'struct.ec_key_st *'
        - 'struct.evp_cipher_st *'
        - 'char *'
        - 'int '
        - 'func_type *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_PKEY_set1_EC_KEY
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.evp_pkey_st *'
        - 'struct.ec_key_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    PEM_write_bio_RSAPrivateKey
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'struct.bio_st *'
        - 'struct.rsa_st *'
        - 'struct.evp_cipher_st *'
        - 'char *'
        - 'int '
        - 'func_type *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_PKEY_set1_RSA
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.evp_pkey_st *'
        - 'struct.rsa_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    PEM_write_bio_PrivateKey
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'struct.bio_st *'
        - 'struct.evp_pkey_st *'
        - 'struct.evp_cipher_st *'
        - 'char *'
        - 'int '
        - 'func_type *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BIO_ctrl
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        4
      argTypes:
        - 'struct.bio_st *'
        - 'int '
        - 'size_t '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_private_to_blob2
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2743
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         90
      ICount:          543
      EdgeCount:       126
      CyclomaticComplexity: 38
      functionsReached:
        - arc4random
        - arc4random_buf
        - bcrypt_pbkdf
        - calloc
        - cipher_authlen
        - cipher_blocksize
        - cipher_by_name
        - cipher_crypt
        - cipher_free
        - cipher_init
        - cipher_ivlen
        - cipher_keylen
        - explicit_bzero
        - freezero
        - sshbuf_dtob64
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put
        - sshbuf_put_cstring
        - sshbuf_put_string
        - sshbuf_put_stringb
        - sshbuf_put_u32
        - sshbuf_put_u8
        - sshbuf_reserve
        - sshbuf_reset
        - sshkey_private_serialize_opt
        - sshkey_to_blob
        - strcmp
        - strlen
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:2754,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2755,10'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_by_name
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
                - arc4random_buf
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2756,6'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - cipher_by_name
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
                - arc4random_buf
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2756,25'
          Branch Sides:
            - BranchSide:      'sshkey.c:2756,36'
              BranchSideFuncs:
                - cipher_by_name
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
                - arc4random_buf
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2757,14'
              BranchSideFuncs:
                - cipher_by_name
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
                - arc4random_buf
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2756,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2757,14'
              BranchSideFuncs:
                - cipher_by_name
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
                - arc4random_buf
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2759,13'
              BranchSideFuncs:
                - cipher_by_name
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
                - arc4random_buf
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2761,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2762,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2766,13'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
                - arc4random_buf
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2766,35'
          Branch Sides:
            - BranchSide:      'sshkey.c:2767,17'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2769,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2767,39'
          Branch Sides:
            - BranchSide:      'sshkey.c:2768,19'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2769,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2766,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2769,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2772,31'
              BranchSideFuncs:
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
                - arc4random_buf
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2776,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2777,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2780,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
                - arc4random_buf
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2780,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2781,18'
              BranchSideFuncs:
                - arc4random_buf
                - strlen
                - bcrypt_pbkdf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
            - BranchSide:      'sshkey.c:2790,20'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
        - Branch String:   'sshkey.c:2782,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2784,6'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2787,30'
              BranchSideFuncs:
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
        - Branch String:   'sshkey.c:2787,57'
          Branch Sides:
            - BranchSide:      'sshkey.c:2788,27'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2789,4'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2787,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2789,4'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2790,2'
              BranchSideFuncs:
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
        - Branch String:   'sshkey.c:2790,13'
          Branch Sides:
            - BranchSide:      'sshkey.c:0,0'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2792,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2795,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2797,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2799,22'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
        - Branch String:   'sshkey.c:2799,69'
          Branch Sides:
            - BranchSide:      'sshkey.c:2800,30'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2806,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2800,57'
          Branch Sides:
            - BranchSide:      'sshkey.c:2801,30'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2806,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2801,54'
          Branch Sides:
            - BranchSide:      'sshkey.c:2802,30'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2806,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2802,50'
          Branch Sides:
            - BranchSide:      'sshkey.c:2803,26'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2806,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2803,44'
          Branch Sides:
            - BranchSide:      'sshkey.c:2804,26'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2806,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2804,62'
          Branch Sides:
            - BranchSide:      'sshkey.c:2805,29'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2806,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2799,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2806,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2811,10'
              BranchSideFuncs:
                - arc4random
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
        - Branch String:   'sshkey.c:2812,50'
          Branch Sides:
            - BranchSide:      'sshkey.c:2813,26'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2814,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2812,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2814,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2817,40'
              BranchSideFuncs:
                - sshkey_private_serialize_opt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
        - Branch String:   'sshkey.c:2818,35'
          Branch Sides:
            - BranchSide:      'sshkey.c:2819,30'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2820,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2817,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2820,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2823,4'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
                - sshbuf_put_u8
        - Branch String:   'sshkey.c:2824,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:2825,26'
              BranchSideFuncs:
                - sshbuf_put_u8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2830,26'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2825,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2824,2'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2826,4'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2830,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2831,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2834,26'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2834,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2836,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2837,24'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2837,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2839,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2841,15'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2844,62'
          Branch Sides:
            - BranchSide:      'sshkey.c:2845,25'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2847,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2845,49'
          Branch Sides:
            - BranchSide:      'sshkey.c:2846,22'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2847,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2844,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2847,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2850,4'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - explicit_bzero
                - freezero
                - freezero
        - Branch String:   'sshkey.c:2858,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2859,12'
              BranchSideFuncs:
                - freezero
                - freezero
            - BranchSide:      'sshkey.c:2860,6'
              BranchSideFuncs:
                - freezero
        - Branch String:   'sshkey.c:2860,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2860,6'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'sshkey.c:2861,12'
              BranchSideFuncs:
                - freezero
      Callsites:
        - Src:             'sshkey.c:2756,29'
          Dst:             strlen
        - Src:             'sshkey.c:2761,16'
          Dst:             cipher_by_name
        - Src:             'sshkey.c:2766,13'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:2767,17'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:2768,19'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:2772,14'
          Dst:             cipher_blocksize
        - Src:             'sshkey.c:2773,11'
          Dst:             cipher_keylen
        - Src:             'sshkey.c:2774,10'
          Dst:             cipher_ivlen
        - Src:             'sshkey.c:2775,12'
          Dst:             cipher_authlen
        - Src:             'sshkey.c:2776,13'
          Dst:             calloc
        - Src:             'sshkey.c:2780,6'
          Dst:             strcmp
        - Src:             'sshkey.c:2781,3'
          Dst:             arc4random_buf
        - Src:             'sshkey.c:2782,32'
          Dst:             strlen
        - Src:             'sshkey.c:2782,7'
          Dst:             bcrypt_pbkdf
        - Src:             'sshkey.c:2787,12'
          Dst:             sshbuf_put_string
        - Src:             'sshkey.c:2788,12'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey.c:2790,13'
          Dst:             strcmp
        - Src:             'sshkey.c:2795,11'
          Dst:             cipher_init
        - Src:             'sshkey.c:2799,11'
          Dst:             sshbuf_put
        - Src:             'sshkey.c:2800,11'
          Dst:             sshbuf_put_cstring
        - Src:             'sshkey.c:2801,11'
          Dst:             sshbuf_put_cstring
        - Src:             'sshkey.c:2802,11'
          Dst:             sshbuf_put_stringb
        - Src:             'sshkey.c:2803,11'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey.c:2804,11'
          Dst:             sshkey_to_blob
        - Src:             'sshkey.c:2805,11'
          Dst:             sshbuf_put_string
        - Src:             'sshkey.c:2811,10'
          Dst:             arc4random
        - Src:             'sshkey.c:2812,11'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey.c:2813,11'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey.c:2817,11'
          Dst:             sshkey_private_serialize_opt
        - Src:             'sshkey.c:2819,11'
          Dst:             sshbuf_put_cstring
        - Src:             'sshkey.c:2824,9'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:2825,12'
          Dst:             sshbuf_put_u8
        - Src:             'sshkey.c:2830,35'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:2830,11'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey.c:2835,6'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:2834,11'
          Dst:             sshbuf_reserve
        - Src:             'sshkey.c:2838,6'
          Dst:             sshbuf_ptr
        - Src:             'sshkey.c:2838,29'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:2837,11'
          Dst:             cipher_crypt
        - Src:             'sshkey.c:2841,2'
          Dst:             sshbuf_reset
        - Src:             'sshkey.c:2844,11'
          Dst:             sshbuf_put
        - Src:             'sshkey.c:2845,11'
          Dst:             sshbuf_dtob64
        - Src:             'sshkey.c:2846,11'
          Dst:             sshbuf_put
        - Src:             'sshkey.c:2853,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:2854,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:2855,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:2856,2'
          Dst:             cipher_free
        - Src:             'sshkey.c:2857,2'
          Dst:             explicit_bzero
        - Src:             'sshkey.c:2859,3'
          Dst:             freezero
        - Src:             'sshkey.c:2861,3'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_to_blob
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 833
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - to_blob
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'sshkey.c:834,9'
          Dst:             to_blob
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    to_blob
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 802
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.sshkey *'
        - 'char **'
        - 'size_t *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         23
      ICount:          137
      EdgeCount:       30
      CyclomaticComplexity: 9
      functionsReached:
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - to_blob_buf
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshkey.c:807,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:808,4'
              BranchSideFuncs:
                - sshbuf_new
                - to_blob_buf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshkey.c:809,6'
              BranchSideFuncs:
                - sshbuf_new
                - to_blob_buf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshkey.c:809,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:810,4'
              BranchSideFuncs:
                - sshbuf_new
                - to_blob_buf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshkey.c:811,11'
              BranchSideFuncs:
                - sshbuf_new
                - to_blob_buf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshkey.c:811,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:812,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:813,25'
              BranchSideFuncs:
                - to_blob_buf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshkey.c:813,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:814,3'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshkey.c:815,19'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshkey.c:816,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:817,11'
              BranchSideFuncs:
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshkey.c:818,6'
              BranchSideFuncs:
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshkey.c:818,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:819,24'
              BranchSideFuncs:
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_free
            - BranchSide:      'sshkey.c:825,6'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'sshkey.c:819,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:820,8'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshkey.c:823,11'
              BranchSideFuncs:
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_free
      Callsites:
        - Src:             'sshkey.c:811,11'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:813,13'
          Dst:             to_blob_buf
        - Src:             'sshkey.c:815,8'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:823,18'
          Dst:             sshbuf_ptr
        - Src:             'sshkey.c:827,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    to_blob_buf
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 736
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         21
      ICount:          159
      EdgeCount:       29
      CyclomaticComplexity: 10
      functionsReached:
        - sshbuf_len
        - sshbuf_put_cstring
        - sshbuf_putb
        - sshkey_impl_from_type
        - sshkey_ssh_name_from_type_nid
        - sshkey_type_is_cert
        - sshkey_type_plain
      functionUses:    4
      BranchProfiles:
        - Branch String:   'sshkey.c:741,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:742,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:744,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_impl_from_type
                - sshkey_ssh_name_from_type_nid
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
        - Branch String:   'sshkey.c:744,9'
          Branch Sides:
            - BranchSide:      'sshkey.c:744,41'
              BranchSideFuncs:
                - sshkey_type_plain
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_impl_from_type
                - sshkey_ssh_name_from_type_nid
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:744,54'
              BranchSideFuncs:
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_impl_from_type
                - sshkey_ssh_name_from_type_nid
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:746,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:747,7'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:756,36'
              BranchSideFuncs:
                - sshkey_impl_from_type
                - sshkey_ssh_name_from_type_nid
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'sshkey.c:747,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:748,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:749,18'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:749,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:750,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:752,26'
              BranchSideFuncs:
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:752,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:753,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:754,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:756,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:757,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:759,43'
              BranchSideFuncs:
                - sshkey_ssh_name_from_type_nid
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'sshkey.c:760,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:761,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:762,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
      Callsites:
        - Src:             'sshkey.c:744,23'
          Dst:             sshkey_type_plain
        - Src:             'sshkey.c:746,6'
          Dst:             sshkey_type_is_cert
        - Src:             'sshkey.c:749,7'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:752,14'
          Dst:             sshbuf_putb
        - Src:             'sshkey.c:756,14'
          Dst:             sshkey_impl_from_type
        - Src:             'sshkey.c:759,13'
          Dst:             sshkey_ssh_name_from_type_nid
        - Src:             'sshkey.c:760,13'
          Dst:             sshbuf_put_cstring
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_private_to_fileblob
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 3295
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'char *'
        - 'char *'
        - 'int '
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         20
      ICount:          120
      EdgeCount:       38
      CyclomaticComplexity: 20
      functionsReached:
        - sshkey_private_to_blob2
        - sshkey_private_to_blob_pem_pkcs8
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:3296,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:3301,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - sshkey_private_to_blob_pem_pkcs8
                - sshkey_private_to_blob2
            - BranchSide:      'sshkey.c:3301,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - sshkey_private_to_blob_pem_pkcs8
                - sshkey_private_to_blob2
            - BranchSide:      'sshkey.c:3301,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - sshkey_private_to_blob_pem_pkcs8
                - sshkey_private_to_blob2
            - BranchSide:      'sshkey.c:3311,34'
              BranchSideFuncs:
                - sshkey_private_to_blob2
            - BranchSide:      'sshkey.c:3311,34'
              BranchSideFuncs:
                - sshkey_private_to_blob2
            - BranchSide:      'sshkey.c:3311,34'
              BranchSideFuncs:
                - sshkey_private_to_blob2
            - BranchSide:      'sshkey.c:3311,34'
              BranchSideFuncs:
                - sshkey_private_to_blob2
            - BranchSide:      'sshkey.c:3314,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:3318,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:3320,34'
              BranchSideFuncs:
                - sshkey_private_to_blob2
            - BranchSide:      'sshkey.c:3324,43'
              BranchSideFuncs:
                - sshkey_private_to_blob_pem_pkcs8
            - BranchSide:      'sshkey.c:3324,43'
              BranchSideFuncs:
                - sshkey_private_to_blob_pem_pkcs8
            - BranchSide:      'sshkey.c:3327,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:3311,10'
          Dst:             sshkey_private_to_blob2
        - Src:             'sshkey.c:3320,10'
          Dst:             sshkey_private_to_blob2
        - Src:             'sshkey.c:3324,10'
          Dst:             sshkey_private_to_blob_pem_pkcs8
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_dump_ec_key
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2725
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ec_key_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          44
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - EC_KEY_get0_group
        - EC_KEY_get0_private_key
        - EC_KEY_get0_public_key
        - fputs
        - sshkey_dump_ec_point
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:2731,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2732,19'
              BranchSideFuncs:
                - fputs
                - fputs
            - BranchSide:      'sshkey.c:2734,15'
              BranchSideFuncs:
                - EC_KEY_get0_private_key
                - BN_print_fp
                - fputs
      Callsites:
        - Src:             'sshkey.c:2728,23'
          Dst:             EC_KEY_get0_group
        - Src:             'sshkey.c:2729,6'
          Dst:             EC_KEY_get0_public_key
        - Src:             'sshkey.c:2728,2'
          Dst:             sshkey_dump_ec_point
        - Src:             'sshkey.c:2730,2'
          Dst:             fputs
        - Src:             'sshkey.c:2731,18'
          Dst:             EC_KEY_get0_private_key
        - Src:             'sshkey.c:2732,3'
          Dst:             fputs
        - Src:             'sshkey.c:2734,23'
          Dst:             EC_KEY_get0_private_key
        - Src:             'sshkey.c:2734,3'
          Dst:             BN_print_fp
        - Src:             'sshkey.c:2735,2'
          Dst:             fputs
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_dump_ec_point
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2691
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ec_group_st *'
        - 'struct.ec_point_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         16
      ICount:          99
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - BN_clear_free
        - BN_new
        - BN_print_fp
        - EC_GROUP_method_of
        - EC_POINT_get_affine_coordinates_GFp
        - fprintf
        - fputs
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:2694,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2695,27'
              BranchSideFuncs:
                - fputs
            - BranchSide:      'sshkey.c:2698,11'
              BranchSideFuncs:
                - BN_new
                - BN_new
                - EC_GROUP_method_of
                - EC_METHOD_get_field_type
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_get_affine_coordinates_GFp
                - __sanitizer_cov_trace_const_cmp4
                - fputs
                - BN_print_fp
                - fputs
                - BN_print_fp
                - fputs
                - BN_clear_free
                - BN_clear_free
                - fprintf
                - fprintf
                - fprintf
        - Branch String:   'sshkey.c:2698,29'
          Branch Sides:
            - BranchSide:      'sshkey.c:2698,37'
              BranchSideFuncs:
                - fprintf
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'sshkey.c:2699,11'
              BranchSideFuncs:
                - fprintf
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'sshkey.c:2698,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2699,11'
              BranchSideFuncs:
                - fprintf
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'sshkey.c:2702,50'
              BranchSideFuncs:
                - EC_GROUP_method_of
                - EC_METHOD_get_field_type
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_get_affine_coordinates_GFp
                - __sanitizer_cov_trace_const_cmp4
                - fputs
                - BN_print_fp
                - fputs
                - BN_print_fp
                - fputs
                - BN_clear_free
                - BN_clear_free
                - fprintf
                - fprintf
        - Branch String:   'sshkey.c:2702,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2704,11'
              BranchSideFuncs:
                - fprintf
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'sshkey.c:2707,42'
              BranchSideFuncs:
                - EC_POINT_get_affine_coordinates_GFp
                - __sanitizer_cov_trace_const_cmp4
                - fputs
                - BN_print_fp
                - fputs
                - BN_print_fp
                - fputs
                - BN_clear_free
                - BN_clear_free
                - fprintf
        - Branch String:   'sshkey.c:2707,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2709,11'
              BranchSideFuncs:
                - fprintf
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'sshkey.c:2713,14'
              BranchSideFuncs:
                - fputs
                - BN_print_fp
                - fputs
                - BN_print_fp
                - fputs
                - BN_clear_free
                - BN_clear_free
      Callsites:
        - Src:             'sshkey.c:2695,3'
          Dst:             fputs
        - Src:             'sshkey.c:2698,11'
          Dst:             BN_new
        - Src:             'sshkey.c:2698,37'
          Dst:             BN_new
        - Src:             'sshkey.c:2699,3'
          Dst:             fprintf
        - Src:             'sshkey.c:2702,31'
          Dst:             EC_GROUP_method_of
        - Src:             'sshkey.c:2702,6'
          Dst:             EC_METHOD_get_field_type
        - Src:             'sshkey.c:2704,3'
          Dst:             fprintf
        - Src:             'sshkey.c:2707,6'
          Dst:             EC_POINT_get_affine_coordinates_GFp
        - Src:             'sshkey.c:2709,3'
          Dst:             fprintf
        - Src:             'sshkey.c:2713,2'
          Dst:             fputs
        - Src:             'sshkey.c:2714,2'
          Dst:             BN_print_fp
        - Src:             'sshkey.c:2715,2'
          Dst:             fputs
        - Src:             'sshkey.c:2716,2'
          Dst:             BN_print_fp
        - Src:             'sshkey.c:2717,2'
          Dst:             fputs
        - Src:             'sshkey.c:2719,2'
          Dst:             BN_clear_free
        - Src:             'sshkey.c:2720,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fputs
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'struct._IO_FILE *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_print_fp
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct._IO_FILE *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fprintf
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct._IO_FILE *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    18
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_private_deserialize_sk
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2487
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         18
      ICount:          101
      EdgeCount:       24
      CyclomaticComplexity: 8
      functionsReached:
        - sshbuf_get_cstring
        - sshbuf_get_stringb
        - sshbuf_get_u8
        - sshbuf_new
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:2490,48'
          Branch Sides:
            - BranchSide:      'sshkey.c:2491,24'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2492,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2490,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2492,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2493,30'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_stringb
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2493,67'
          Branch Sides:
            - BranchSide:      'sshkey.c:2494,25'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2497,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2494,50'
          Branch Sides:
            - BranchSide:      'sshkey.c:2495,30'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2497,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2495,59'
          Branch Sides:
            - BranchSide:      'sshkey.c:2496,30'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2497,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2493,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2497,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2499,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:2490,26'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:2491,24'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:2493,11'
          Dst:             sshbuf_get_cstring
        - Src:             'sshkey.c:2494,11'
          Dst:             sshbuf_get_u8
        - Src:             'sshkey.c:2495,11'
          Dst:             sshbuf_get_stringb
        - Src:             'sshkey.c:2496,11'
          Dst:             sshbuf_get_stringb
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_private_serialize
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2479
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshkey_private_serialize_opt
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'sshkey.c:2480,9'
          Dst:             sshkey_private_serialize_opt
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_serialize_private_sk
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2421
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         13
      ICount:          81
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - sshbuf_put_cstring
        - sshbuf_put_stringb
        - sshbuf_put_u8
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:2424,60'
          Branch Sides:
            - BranchSide:      'sshkey.c:2425,25'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2428,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2425,49'
          Branch Sides:
            - BranchSide:      'sshkey.c:2426,30'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2428,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2426,59'
          Branch Sides:
            - BranchSide:      'sshkey.c:2427,30'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2428,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2424,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2428,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2430,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:2424,11'
          Dst:             sshbuf_put_cstring
        - Src:             'sshkey.c:2425,11'
          Dst:             sshbuf_put_u8
        - Src:             'sshkey.c:2426,11'
          Dst:             sshbuf_put_stringb
        - Src:             'sshkey.c:2427,11'
          Dst:             sshbuf_put_stringb
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_format_cert_validity
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2395
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'struct.sshkey_cert *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         21
      ICount:          139
      EdgeCount:       27
      CyclomaticComplexity: 8
      functionsReached:
        - format_absolute_time
        - snprintf
        - strlcpy
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:2399,29'
          Branch Sides:
            - BranchSide:      'sshkey.c:2400,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - strlcpy
                - snprintf
                - snprintf
                - format_absolute_time
                - format_absolute_time
                - strlcpy
            - BranchSide:      'sshkey.c:2403,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - strlcpy
                - snprintf
                - snprintf
                - format_absolute_time
                - format_absolute_time
        - Branch String:   'sshkey.c:2399,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2401,18'
              BranchSideFuncs:
                - strlcpy
            - BranchSide:      'sshkey.c:2403,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - strlcpy
                - snprintf
                - snprintf
                - format_absolute_time
                - format_absolute_time
        - Branch String:   'sshkey.c:2403,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2404,24'
              BranchSideFuncs:
                - format_absolute_time
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - strlcpy
                - snprintf
                - snprintf
                - format_absolute_time
            - BranchSide:      'sshkey.c:2405,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - strlcpy
                - snprintf
                - snprintf
                - format_absolute_time
        - Branch String:   'sshkey.c:2405,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2406,24'
              BranchSideFuncs:
                - format_absolute_time
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - strlcpy
                - snprintf
                - snprintf
            - BranchSide:      'sshkey.c:2408,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - strlcpy
                - snprintf
                - snprintf
        - Branch String:   'sshkey.c:2408,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2409,12'
              BranchSideFuncs:
                - snprintf
                - strlcpy
            - BranchSide:      'sshkey.c:2410,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - strlcpy
                - snprintf
        - Branch String:   'sshkey.c:2410,11'
          Branch Sides:
            - BranchSide:      'sshkey.c:2411,12'
              BranchSideFuncs:
                - snprintf
                - strlcpy
            - BranchSide:      'sshkey.c:2413,12'
              BranchSideFuncs:
                - snprintf
                - strlcpy
      Callsites:
        - Src:             'sshkey.c:2401,10'
          Dst:             strlcpy
        - Src:             'sshkey.c:2404,3'
          Dst:             format_absolute_time
        - Src:             'sshkey.c:2406,3'
          Dst:             format_absolute_time
        - Src:             'sshkey.c:2409,3'
          Dst:             snprintf
        - Src:             'sshkey.c:2411,3'
          Dst:             snprintf
        - Src:             'sshkey.c:2413,3'
          Dst:             snprintf
        - Src:             'sshkey.c:2415,9'
          Dst:             strlcpy
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    snprintf
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'size_t '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    36
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_cert_check_host
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2375
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
        - 'int '
        - 'char *'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         13
      ICount:          88
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - sshbuf_len
        - sshkey_cert_check_authority_now
        - sshkey_check_cert_sigtype
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:2378,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2380,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2381,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_check_cert_sigtype
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2381,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2382,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2385,6'
              BranchSideFuncs:
                - sshkey_check_cert_sigtype
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2385,33'
          Branch Sides:
            - BranchSide:      'sshkey.c:2386,37'
              BranchSideFuncs:
                - sshkey_check_cert_sigtype
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2390,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2385,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2387,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2390,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:2378,11'
          Dst:             sshkey_cert_check_authority_now
        - Src:             'sshkey.c:2381,6'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:2386,11'
          Dst:             sshkey_check_cert_sigtype
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_cert_check_authority_now
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2359
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'struct.sshkey *'
        - 'int '
        - 'int '
        - 'int '
        - 'char *'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          58
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshkey_cert_check_authority
        - time
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:2362,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2364,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2367,37'
              BranchSideFuncs:
                - sshkey_cert_check_authority
      Callsites:
        - Src:             'sshkey.c:2362,13'
          Dst:             time
        - Src:             'sshkey.c:2367,9'
          Dst:             sshkey_cert_check_authority
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_check_cert_sigtype
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2021
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         18
      ICount:          89
      EdgeCount:       24
      CyclomaticComplexity: 8
      functionsReached:
        - match_pattern_list
        - sshkey_type_is_cert
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:2022,18'
          Branch Sides:
            - BranchSide:      'sshkey.c:2022,21'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2023,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2022,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2023,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2024,27'
              BranchSideFuncs:
                - sshkey_type_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2024,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2025,3'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2026,6'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2026,24'
          Branch Sides:
            - BranchSide:      'sshkey.c:2026,27'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2027,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2026,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2027,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2028,25'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2028,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2029,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2030,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:2024,7'
          Dst:             sshkey_type_is_cert
        - Src:             'sshkey.c:2028,6'
          Dst:             match_pattern_list
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    time
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_cert_check_authority
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2299
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'struct.sshkey *'
        - 'int '
        - 'int '
        - 'int '
        - 'size_t '
        - 'char *'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         41
      ICount:          254
      EdgeCount:       56
      CyclomaticComplexity: 17
      functionsReached:
        - match_pattern
        - sshkey_is_cert
        - strcmp
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:2302,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2303,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2304,22'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2304,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2305,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2308,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2308,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2309,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2314,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2309,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2310,5'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2313,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2314,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:0,0'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2315,5'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2319,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2320,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2323,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2323,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2324,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2327,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2327,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2328,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2332,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2328,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2329,5'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2332,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2334,3'
          Branch Sides:
            - BranchSide:      'sshkey.c:2335,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2346,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2335,8'
          Branch Sides:
            - BranchSide:      'sshkey.c:2336,23'
              BranchSideFuncs:
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2341,22'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2336,9'
          Branch Sides:
            - BranchSide:      'sshkey.c:2338,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2341,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2341,15'
          Branch Sides:
            - BranchSide:      'sshkey.c:0,0'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2342,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2346,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2347,5'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2351,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:2304,7'
          Dst:             sshkey_is_cert
        - Src:             'sshkey.c:2336,9'
          Dst:             match_pattern
        - Src:             'sshkey.c:2341,15'
          Dst:             strcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    default_key_sign
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2280
      functionDepth:   0
      returnType:      'int '
      argCount:        10
      argTypes:
        - 'struct.sshkey *'
        - 'char **'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          66
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshkey_sign
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:2281,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2282,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2283,21'
              BranchSideFuncs:
                - sshkey_sign
      Callsites:
        - Src:             'sshkey.c:2283,9'
          Dst:             sshkey_sign
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_sign
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2084
      functionDepth:   0
      returnType:      'int '
      argCount:        9
      argTypes:
        - 'struct.sshkey *'
        - 'char **'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         27
      ICount:          190
      EdgeCount:       36
      CyclomaticComplexity: 11
      functionsReached:
        - sshkey_impl_from_key
        - sshkey_is_shielded
        - sshkey_is_sk
        - sshkey_shield_private
        - sshkey_unshield_private
        - sshsk_sign
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:2089,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2090,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_impl_from_key
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_sk
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshsk_sign
            - BranchSide:      'sshkey.c:2091,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_impl_from_key
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_sk
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshsk_sign
        - Branch String:   'sshkey.c:2091,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2092,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_impl_from_key
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_sk
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshsk_sign
            - BranchSide:      'sshkey.c:2093,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_impl_from_key
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_sk
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshsk_sign
        - Branch String:   'sshkey.c:2093,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2094,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2095,35'
              BranchSideFuncs:
                - sshkey_impl_from_key
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_sk
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshsk_sign
        - Branch String:   'sshkey.c:2095,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2096,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2097,35'
              BranchSideFuncs:
                - sshkey_unshield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_is_sk
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshsk_sign
        - Branch String:   'sshkey.c:2097,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2098,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2099,19'
              BranchSideFuncs:
                - sshkey_is_sk
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
                - sshsk_sign
        - Branch String:   'sshkey.c:2099,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2100,18'
              BranchSideFuncs:
                - sshsk_sign
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2103,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2103,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2104,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2106,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2110,19'
          Branch Sides:
            - BranchSide:      'sshkey.c:2110,50'
              BranchSideFuncs:
                - sshkey_shield_private
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2112,9'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2110,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2111,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2112,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:2085,21'
          Dst:             sshkey_is_shielded
        - Src:             'sshkey.c:2095,14'
          Dst:             sshkey_impl_from_key
        - Src:             'sshkey.c:2097,11'
          Dst:             sshkey_unshield_private
        - Src:             'sshkey.c:2099,6'
          Dst:             sshkey_is_sk
        - Src:             'sshkey.c:2100,7'
          Dst:             sshsk_sign
        - Src:             'sshkey.c:2110,28'
          Dst:             sshkey_shield_private
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_is_sk
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 415
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          46
      EdgeCount:       10
      CyclomaticComplexity: 2
      functionsReached:
        - sshkey_type_plain
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:416,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:417,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:418,28'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_switch
        - Branch String:   'sshkey.c:418,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:421,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:421,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:423,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:418,10'
          Dst:             sshkey_type_plain
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_certify
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2290
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          32
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshkey_certify_custom
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'sshkey.c:2291,9'
          Dst:             sshkey_certify_custom
        - Src:             'sshkey.c:2291,9'
          Dst:             default_key_sign
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_certify_custom
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2168
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
        - 'char *'
        - 'char *'
        - 'char *'
        - 'func_type *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         88
      ICount:          564
      EdgeCount:       124
      CyclomaticComplexity: 38
      functionsReached:
        - arc4random_buf
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put_cstring
        - sshbuf_put_string
        - sshbuf_put_stringb
        - sshbuf_put_u32
        - sshbuf_put_u64
        - sshbuf_reset
        - sshkey_get_sigtype
        - sshkey_impl_from_key
        - sshkey_is_cert
        - sshkey_ssh_name
        - sshkey_to_blob
        - sshkey_type_is_valid_ca
        - strcmp
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:2177,16'
          Branch Sides:
            - BranchSide:      'sshkey.c:2177,19'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2179,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2177,35'
          Branch Sides:
            - BranchSide:      'sshkey.c:2178,6'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2179,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2178,32'
          Branch Sides:
            - BranchSide:      'sshkey.c:2178,35'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2179,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2177,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2179,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2180,22'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_impl_from_key
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2180,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2181,3'
              BranchSideFuncs:
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_impl_from_key
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2182,31'
              BranchSideFuncs:
                - sshkey_type_is_valid_ca
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_impl_from_key
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2182,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2183,3'
              BranchSideFuncs:
                - sshkey_impl_from_key
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2184,35'
              BranchSideFuncs:
                - sshkey_impl_from_key
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2184,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2185,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2191,6'
              BranchSideFuncs:
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2191,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2192,9'
              BranchSideFuncs:
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2193,11'
              BranchSideFuncs:
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2201,18'
          Branch Sides:
            - BranchSide:      'sshkey.c:2201,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2204,28'
              BranchSideFuncs:
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2201,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2202,7'
              BranchSideFuncs:
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2204,28'
              BranchSideFuncs:
                - sshkey_to_blob
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2204,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2205,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2207,9'
              BranchSideFuncs:
                - sshbuf_reset
                - sshkey_ssh_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2209,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2210,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2213,17'
              BranchSideFuncs:
                - arc4random_buf
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2214,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2215,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2218,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2218,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2220,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2223,28'
              BranchSideFuncs:
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2223,57'
          Branch Sides:
            - BranchSide:      'sshkey.c:2224,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2226,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
        - Branch String:   'sshkey.c:2224,55'
          Branch Sides:
            - BranchSide:      'sshkey.c:2225,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2226,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
        - Branch String:   'sshkey.c:2223,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2226,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2228,20'
              BranchSideFuncs:
                - sshbuf_new
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2228,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2229,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2232,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2232,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:2233,33'
              BranchSideFuncs:
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:2237,32'
              BranchSideFuncs:
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2233,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2235,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2236,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2237,56'
          Branch Sides:
            - BranchSide:      'sshkey.c:2238,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2244,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
        - Branch String:   'sshkey.c:2238,62'
          Branch Sides:
            - BranchSide:      'sshkey.c:2239,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2244,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
        - Branch String:   'sshkey.c:2239,63'
          Branch Sides:
            - BranchSide:      'sshkey.c:2240,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2244,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
        - Branch String:   'sshkey.c:2240,63'
          Branch Sides:
            - BranchSide:      'sshkey.c:2241,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2244,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
        - Branch String:   'sshkey.c:2241,65'
          Branch Sides:
            - BranchSide:      'sshkey.c:2242,31'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2244,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
        - Branch String:   'sshkey.c:2242,52'
          Branch Sides:
            - BranchSide:      'sshkey.c:2243,31'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2244,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
        - Branch String:   'sshkey.c:2237,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2244,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2247,13'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2247,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2249,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2251,32'
              BranchSideFuncs:
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2251,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2252,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2253,6'
              BranchSideFuncs:
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2253,18'
          Branch Sides:
            - BranchSide:      'sshkey.c:2253,28'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2257,6'
              BranchSideFuncs:
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
        - Branch String:   'sshkey.c:2253,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2254,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2257,6'
              BranchSideFuncs:
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
        - Branch String:   'sshkey.c:2257,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2258,29'
              BranchSideFuncs:
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2262,31'
              BranchSideFuncs:
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
        - Branch String:   'sshkey.c:2262,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2263,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
            - BranchSide:      'sshkey.c:2264,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_reset
        - Branch String:   'sshkey.c:2266,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2267,16'
              BranchSideFuncs:
                - sshbuf_reset
                - free
                - free
                - free
                - sshbuf_free
            - BranchSide:      'sshkey.c:2268,7'
              BranchSideFuncs:
                - free
                - free
                - free
                - sshbuf_free
      Callsites:
        - Src:             'sshkey.c:2180,7'
          Dst:             sshkey_is_cert
        - Src:             'sshkey.c:2182,7'
          Dst:             sshkey_type_is_valid_ca
        - Src:             'sshkey.c:2184,14'
          Dst:             sshkey_impl_from_key
        - Src:             'sshkey.c:2194,6'
          Dst:             strcmp
        - Src:             'sshkey.c:2204,13'
          Dst:             sshkey_to_blob
        - Src:             'sshkey.c:2208,2'
          Dst:             sshbuf_reset
        - Src:             'sshkey.c:2209,38'
          Dst:             sshkey_ssh_name
        - Src:             'sshkey.c:2209,13'
          Dst:             sshbuf_put_cstring
        - Src:             'sshkey.c:2213,2'
          Dst:             arc4random_buf
        - Src:             'sshkey.c:2214,13'
          Dst:             sshbuf_put_string
        - Src:             'sshkey.c:2223,13'
          Dst:             sshbuf_put_u64
        - Src:             'sshkey.c:2224,13'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey.c:2225,13'
          Dst:             sshbuf_put_cstring
        - Src:             'sshkey.c:2228,20'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:2233,14'
          Dst:             sshbuf_put_cstring
        - Src:             'sshkey.c:2237,13'
          Dst:             sshbuf_put_stringb
        - Src:             'sshkey.c:2238,13'
          Dst:             sshbuf_put_u64
        - Src:             'sshkey.c:2239,13'
          Dst:             sshbuf_put_u64
        - Src:             'sshkey.c:2240,13'
          Dst:             sshbuf_put_stringb
        - Src:             'sshkey.c:2241,13'
          Dst:             sshbuf_put_stringb
        - Src:             'sshkey.c:2242,13'
          Dst:             sshbuf_put_string
        - Src:             'sshkey.c:2243,13'
          Dst:             sshbuf_put_string
        - Src:             'sshkey.c:2247,45'
          Dst:             sshbuf_ptr
        - Src:             'sshkey.c:2248,6'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:2251,13'
          Dst:             sshkey_get_sigtype
        - Src:             'sshkey.c:2253,21'
          Dst:             strcmp
        - Src:             'sshkey.c:2262,13'
          Dst:             sshbuf_put_string
        - Src:             'sshkey.c:2267,3'
          Dst:             sshbuf_reset
        - Src:             'sshkey.c:2271,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_drop_cert
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2154
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          47
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - cert_free
        - sshkey_type_is_cert
        - sshkey_type_plain
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:2155,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2156,3'
              BranchSideFuncs:
                - cert_free
                - sshkey_type_plain
            - BranchSide:      'sshkey.c:2157,12'
              BranchSideFuncs:
                - cert_free
                - sshkey_type_plain
      Callsites:
        - Src:             'sshkey.c:2155,7'
          Dst:             sshkey_type_is_cert
        - Src:             'sshkey.c:2157,2'
          Dst:             cert_free
        - Src:             'sshkey.c:2159,12'
          Dst:             sshkey_type_plain
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_type_certified
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 454
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          53
      EdgeCount:       18
      CyclomaticComplexity: 10
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:455,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:457,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:459,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:461,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:463,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:465,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:467,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:469,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:471,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_to_certified
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2140
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         8
      ICount:          51
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - cert_new
        - sshkey_type_certified
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:2143,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2144,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2145,17'
              BranchSideFuncs:
                - cert_new
        - Branch String:   'sshkey.c:2145,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2146,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2147,12'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:2143,17'
          Dst:             sshkey_type_certified
        - Src:             'sshkey.c:2145,17'
          Dst:             cert_new
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_check_sigtype
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2063
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'size_t '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         10
      ICount:          79
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - sshkey_get_sigtype
        - sshkey_sigalg_by_name
        - strcmp
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:2068,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2069,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2070,44'
              BranchSideFuncs:
                - sshkey_sigalg_by_name
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2070,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2071,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2072,30'
              BranchSideFuncs:
                - sshkey_get_sigtype
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:2072,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:2073,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2074,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'sshkey.c:2070,22'
          Dst:             sshkey_sigalg_by_name
        - Src:             'sshkey.c:2072,11'
          Dst:             sshkey_get_sigtype
        - Src:             'sshkey.c:2074,6'
          Dst:             strcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_sigalg_by_name
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2038
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         14
      ICount:          94
      EdgeCount:       18
      CyclomaticComplexity: 6
      functionsReached:
        - sshkey_ssh_name_from_type_nid
        - sshkey_type_plain
        - strcmp
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:2042,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:2043,19'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - sshkey_ssh_name_from_type_nid
            - BranchSide:      'sshkey.c:2053,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:2044,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2045,4'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - sshkey_ssh_name_from_type_nid
            - BranchSide:      'sshkey.c:2046,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - sshkey_ssh_name_from_type_nid
        - Branch String:   'sshkey.c:2046,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2047,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:2048,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - sshkey_ssh_name_from_type_nid
        - Branch String:   'sshkey.c:2048,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:2049,11'
              BranchSideFuncs:
                - sshkey_type_plain
                - sshkey_ssh_name_from_type_nid
            - BranchSide:      'sshkey.c:2051,25'
              BranchSideFuncs:
                - sshkey_type_plain
                - sshkey_ssh_name_from_type_nid
      Callsites:
        - Src:             'sshkey.c:2044,7'
          Dst:             strcmp
        - Src:             'sshkey.c:2051,7'
          Dst:             sshkey_type_plain
        - Src:             'sshkey.c:2050,10'
          Dst:             sshkey_ssh_name_from_type_nid
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_from_blob
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1957
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'size_t '
        - 'struct.sshkey **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          49
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_free
        - sshbuf_from
        - sshkey_from_blob_internal
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:1961,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1962,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1963,32'
              BranchSideFuncs:
                - sshkey_from_blob_internal
                - sshbuf_free
      Callsites:
        - Src:             'sshkey.c:1961,11'
          Dst:             sshbuf_from
        - Src:             'sshkey.c:1963,6'
          Dst:             sshkey_from_blob_internal
        - Src:             'sshkey.c:1964,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_deserialize_sk
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1881
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          36
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_get_cstring
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:1883,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1884,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1885,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:1883,6'
          Dst:             sshbuf_get_cstring
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_copy_public_sk
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1487
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          38
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - strdup
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:1489,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1490,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1491,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:1489,28'
          Dst:             strdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_generate
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1391
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.sshkey **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         17
      ICount:          114
      EdgeCount:       23
      CyclomaticComplexity: 8
      functionsReached:
        - sshkey_free
        - sshkey_impl_from_type
        - sshkey_new
        - sshkey_type_is_cert
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:1396,19'
          Branch Sides:
            - BranchSide:      'sshkey.c:1396,42'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1397,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:1396,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1397,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1398,3'
              BranchSideFuncs:
                - sshkey_impl_from_type
                - sshkey_new
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
        - Branch String:   'sshkey.c:1399,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1400,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1401,6'
              BranchSideFuncs:
                - sshkey_new
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
        - Branch String:   'sshkey.c:1401,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1402,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1403,11'
              BranchSideFuncs:
                - sshkey_new
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
        - Branch String:   'sshkey.c:1403,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1404,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1405,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free
        - Branch String:   'sshkey.c:1406,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1407,15'
              BranchSideFuncs:
                - sshkey_free
            - BranchSide:      'sshkey.c:1411,10'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:1396,22'
          Dst:             sshkey_type_is_cert
        - Src:             'sshkey.c:1399,14'
          Dst:             sshkey_impl_from_type
        - Src:             'sshkey.c:1403,11'
          Dst:             sshkey_new
        - Src:             'sshkey.c:1407,3'
          Dst:             sshkey_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_cert_type
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1311
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         5
      ICount:          32
      EdgeCount:       8
      CyclomaticComplexity: 5
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:1312,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1314,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1316,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1318,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_write
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1288
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct._IO_FILE *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         14
      ICount:          82
      EdgeCount:       18
      CyclomaticComplexity: 6
      functionsReached:
        - __errno_location
        - feof
        - fwrite
        - sshbuf_free
        - sshbuf_new
        - sshbuf_ptr
        - sshkey_format_text
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:1292,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1293,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1294,30'
              BranchSideFuncs:
                - sshkey_format_text
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - fwrite
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_free
                - feof
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'sshkey.c:1294,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1295,3'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshkey.c:1296,24'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - fwrite
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_free
                - feof
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'sshkey.c:1296,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1297,12'
              BranchSideFuncs:
                - feof
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __errno_location
            - BranchSide:      'sshkey.c:1303,4'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'sshkey.c:1297,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1298,4'
              BranchSideFuncs:
                - __errno_location
                - sshbuf_free
            - BranchSide:      'sshkey.c:1299,5'
              BranchSideFuncs:
                - sshbuf_free
      Callsites:
        - Src:             'sshkey.c:1292,11'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:1294,11'
          Dst:             sshkey_format_text
        - Src:             'sshkey.c:1296,13'
          Dst:             sshbuf_ptr
        - Src:             'sshkey.c:1296,28'
          Dst:             sshbuf_len
        - Src:             'sshkey.c:1296,6'
          Dst:             fwrite
        - Src:             'sshkey.c:1297,7'
          Dst:             feof
        - Src:             'sshkey.c:1298,4'
          Dst:             __errno_location
        - Src:             'sshkey.c:1305,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_format_text
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1271
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          55
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshbuf_putf
        - sshkey_ssh_name
        - sshkey_to_base64
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:1275,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1276,3'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey.c:1277,23'
              BranchSideFuncs:
                - sshkey_ssh_name
                - sshbuf_putf
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'sshkey.c:1277,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1279,3'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey.c:1280,4'
              BranchSideFuncs:
                - free
      Callsites:
        - Src:             'sshkey.c:1275,11'
          Dst:             sshkey_to_base64
        - Src:             'sshkey.c:1278,6'
          Dst:             sshkey_ssh_name
        - Src:             'sshkey.c:1277,11'
          Dst:             sshbuf_putf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fwrite
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        4
      argTypes:
        - 'char *'
        - 'size_t '
        - 'size_t '
        - 'struct._IO_FILE *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    feof
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct._IO_FILE *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_to_base64
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1242
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         17
      ICount:          96
      EdgeCount:       22
      CyclomaticComplexity: 7
      functionsReached:
        - sshbuf_dtob64_string
        - sshbuf_free
        - sshbuf_new
        - sshkey_putb
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:1247,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1248,4'
              BranchSideFuncs:
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64_string
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1249,11'
              BranchSideFuncs:
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64_string
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1249,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1250,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1251,23'
              BranchSideFuncs:
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtob64_string
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1251,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1252,3'
              BranchSideFuncs:
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1253,33'
              BranchSideFuncs:
                - sshbuf_dtob64_string
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1253,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1254,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1258,6'
              BranchSideFuncs:
                - sshbuf_free
                - free
        - Branch String:   'sshkey.c:1258,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1259,11'
              BranchSideFuncs:
                - sshbuf_free
                - free
            - BranchSide:      'sshkey.c:1262,4'
              BranchSideFuncs:
                - sshbuf_free
                - free
      Callsites:
        - Src:             'sshkey.c:1249,11'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:1251,11'
          Dst:             sshkey_putb
        - Src:             'sshkey.c:1253,12'
          Dst:             sshbuf_dtob64_string
        - Src:             'sshkey.c:1264,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_putb
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 767
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - to_blob_buf
      functionUses:    3
      BranchProfiles:  []
      Callsites:
        - Src:             'sshkey.c:768,9'
          Dst:             to_blob_buf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_fromb
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1970
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshkey **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshkey_from_blob_internal
      functionUses:    3
      BranchProfiles:  []
      Callsites:
        - Src:             'sshkey.c:1971,9'
          Dst:             sshkey_from_blob_internal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    peek_type_nid
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1147
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'size_t '
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         18
      ICount:          110
      EdgeCount:       23
      CyclomaticComplexity: 7
      functionsReached:
        - key_type_is_ecdsa_variant
        - memcmp
        - strlen
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:1151,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1152,19'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:1162,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:1153,26'
          Branch Sides:
            - BranchSide:      'sshkey.c:1153,36'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:1154,4'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1153,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1154,4'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:1155,14'
              BranchSideFuncs:
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1155,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1156,5'
              BranchSideFuncs:
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:1161,2'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1157,8'
          Branch Sides:
            - BranchSide:      'sshkey.c:1158,12'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1159,11'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:1153,29'
          Dst:             strlen
        - Src:             'sshkey.c:1155,7'
          Dst:             memcmp
        - Src:             'sshkey.c:1157,8'
          Dst:             key_type_is_ecdsa_variant
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_read
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1168
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         51
      ICount:          319
      EdgeCount:       70
      CyclomaticComplexity: 21
      functionsReached:
        - freezero
        - key_type_is_ecdsa_variant
        - peek_type_nid
        - sshbuf_b64tod
        - sshbuf_free
        - sshbuf_new
        - sshkey_free
        - sshkey_free_contents
        - sshkey_fromb
        - sshkey_impl_from_type
        - strcspn
        - strlen
        - strndup
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:1175,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1176,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1177,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strcspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - peek_type_nid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_cmp4
                - sshkey_impl_from_type
        - Branch String:   'sshkey.c:1177,30'
          Branch Sides:
            - BranchSide:      'sshkey.c:1177,55'
              BranchSideFuncs:
                - sshkey_impl_from_type
                - strcspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - peek_type_nid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:1181,8'
              BranchSideFuncs:
                - strcspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - peek_type_nid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:1177,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1178,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1181,8'
              BranchSideFuncs:
                - strcspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - peek_type_nid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:1183,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1184,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1185,28'
              BranchSideFuncs:
                - peek_type_nid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:1185,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1186,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1189,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:1189,31'
          Branch Sides:
            - BranchSide:      'sshkey.c:1189,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:1189,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1189,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1189,49'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:1191,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:1191,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1192,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1193,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:1193,30'
          Branch Sides:
            - BranchSide:      'sshkey.c:1193,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1195,14'
              BranchSideFuncs:
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1193,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1194,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1195,14'
              BranchSideFuncs:
                - sshbuf_new
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1195,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1196,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1199,18'
              BranchSideFuncs:
                - strcspn
                - strndup
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1200,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1201,15'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshkey.c:1204,25'
              BranchSideFuncs:
                - sshbuf_b64tod
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
                - free
                - sshbuf_free
        - Branch String:   'sshkey.c:1204,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1205,8'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'sshkey.c:1209,7'
              BranchSideFuncs:
                - free
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - sshbuf_free
        - Branch String:   'sshkey.c:1210,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1211,15'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshkey.c:1214,14'
              BranchSideFuncs:
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
        - Branch String:   'sshkey.c:1217,31'
          Branch Sides:
            - BranchSide:      'sshkey.c:1217,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:1217,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1217,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1217,49'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
            - BranchSide:      'sshkey.c:1221,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
                - sshkey_free
        - Branch String:   'sshkey.c:1221,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1222,15'
              BranchSideFuncs:
                - sshkey_free
            - BranchSide:      'sshkey.c:1225,32'
              BranchSideFuncs:
                - key_type_is_ecdsa_variant
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - __sanitizer_cov_trace_cmp4
                - sshkey_free
        - Branch String:   'sshkey.c:1225,38'
          Branch Sides:
            - BranchSide:      'sshkey.c:1225,41'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
                - sshkey_free
            - BranchSide:      'sshkey.c:1231,23'
              BranchSideFuncs:
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
        - Branch String:   'sshkey.c:1225,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1226,15'
              BranchSideFuncs:
                - sshkey_free
            - BranchSide:      'sshkey.c:1231,23'
              BranchSideFuncs:
                - sshkey_free_contents
                - llvm.memcpy.p0i8.p0i8.i64
                - freezero
      Callsites:
        - Src:             'sshkey.c:1177,33'
          Dst:             sshkey_impl_from_type
        - Src:             'sshkey.c:1182,10'
          Dst:             strcspn
        - Src:             'sshkey.c:1183,15'
          Dst:             strlen
        - Src:             'sshkey.c:1185,14'
          Dst:             peek_type_nid
        - Src:             'sshkey.c:1195,14'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:1199,10'
          Dst:             strcspn
        - Src:             'sshkey.c:1200,18'
          Dst:             strndup
        - Src:             'sshkey.c:1201,3'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:1204,11'
          Dst:             sshbuf_b64tod
        - Src:             'sshkey.c:1206,3'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:1210,11'
          Dst:             sshkey_fromb
        - Src:             'sshkey.c:1211,3'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:1214,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:1222,3'
          Dst:             sshkey_free
        - Src:             'sshkey.c:1225,6'
          Dst:             key_type_is_ecdsa_variant
        - Src:             'sshkey.c:1226,3'
          Dst:             sshkey_free
        - Src:             'sshkey.c:1231,2'
          Dst:             sshkey_free_contents
        - Src:             'sshkey.c:1233,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strcspn
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strndup
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fingerprint_randomart
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1008
      functionDepth:   0
      returnType:      'char *'
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         68
      ICount:          509
      EdgeCount:       87
      CyclomaticComplexity: 21
      functionsReached:
        - calloc
        - memset
        - snprintf
        - sshkey_type
        - strlen
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:1021,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1022,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1025,9'
              BranchSideFuncs:
                - memset
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshkey.c:1030,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1033,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshkey.c:1053,40'
              BranchSideFuncs:
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
        - Branch String:   'sshkey.c:1034,3'
          Branch Sides:
            - BranchSide:      'sshkey.c:1036,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
            - BranchSide:      'sshkey.c:1050,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshkey.c:1040,8'
          Branch Sides:
            - BranchSide:      'sshkey.c:1040,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:1040,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1041,8'
          Branch Sides:
            - BranchSide:      'sshkey.c:1041,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:1041,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1042,8'
          Branch Sides:
            - BranchSide:      'sshkey.c:1042,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:1042,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1043,8'
          Branch Sides:
            - BranchSide:      'sshkey.c:1043,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:1043,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:1046,8'
          Branch Sides:
            - BranchSide:      'sshkey.c:1047,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshkey.c:1048,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - sshkey_size
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshkey.c:1060,12'
          Branch Sides:
            - BranchSide:      'sshkey.c:1060,15'
              BranchSideFuncs:
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshkey.c:1061,16'
              BranchSideFuncs:
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshkey.c:1060,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1061,16'
              BranchSideFuncs:
                - sshkey_type
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshkey.c:1062,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshkey.c:1062,9'
          Branch Sides:
            - BranchSide:      'sshkey.c:1062,7'
              BranchSideFuncs:
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshkey.c:1062,31'
              BranchSideFuncs:
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshkey.c:1066,9'
          Branch Sides:
            - BranchSide:      'sshkey.c:1066,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshkey.c:1066,31'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshkey.c:1071,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1072,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshkey.c:1073,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshkey.c:1075,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1076,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshkey.c:1077,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshkey.c:1081,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1082,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshkey.c:1090,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'sshkey.c:1083,3'
          Branch Sides:
            - BranchSide:      'sshkey.c:1084,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'sshkey.c:1085,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshkey.c:1084,31'
          Branch Sides:
            - BranchSide:      'sshkey.c:1084,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshkey.c:1084,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshkey.c:1091,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1092,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'sshkey.c:1093,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'sshkey.c:1095,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1096,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'sshkey.c:1097,4'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:1019,16'
          Dst:             strlen
        - Src:             'sshkey.c:1021,16'
          Dst:             calloc
        - Src:             'sshkey.c:1025,2'
          Dst:             memset
        - Src:             'sshkey.c:1058,3'
          Dst:             sshkey_type
        - Src:             'sshkey.c:1058,19'
          Dst:             sshkey_size
        - Src:             'sshkey.c:1057,6'
          Dst:             snprintf
        - Src:             'sshkey.c:1061,46'
          Dst:             sshkey_type
        - Src:             'sshkey.c:1061,7'
          Dst:             snprintf
        - Src:             'sshkey.c:1062,24'
          Dst:             strlen
        - Src:             'sshkey.c:1065,6'
          Dst:             snprintf
        - Src:             'sshkey.c:1066,24'
          Dst:             strlen
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    memset
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'int '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    36
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_type
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 205
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          36
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshkey_impl_from_key
      functionUses:    6
      BranchProfiles:
        - Branch String:   'sshkey.c:208,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:209,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:210,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:208,14'
          Dst:             sshkey_impl_from_key
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_size
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 384
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         8
      ICount:          57
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_impl_from_key
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:387,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:388,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:389,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'sshkey.c:389,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:390,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
            - BranchSide:      'sshkey.c:391,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:387,14'
          Dst:             sshkey_impl_from_key
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fingerprint_bubblebabble
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 926
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         19
      ICount:          326
      EdgeCount:       24
      CyclomaticComplexity: 7
      functionsReached:
        - calloc
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:934,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:935,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:936,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:937,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:939,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:967,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:939,24'
          Branch Sides:
            - BranchSide:      'sshkey.c:939,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'sshkey.c:940,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'sshkey.c:939,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:940,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'sshkey.c:959,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey.c:948,8'
          Branch Sides:
            - BranchSide:      'sshkey.c:949,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey.c:958,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
      Callsites:
        - Src:             'sshkey.c:934,16'
          Dst:             calloc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fingerprint_b64
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 886
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         13
      ICount:          107
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - __b64_ntop
        - calloc
        - freezero
        - strcspn
        - strlcat
        - strlcpy
        - strlen
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:891,27'
          Branch Sides:
            - BranchSide:      'sshkey.c:891,47'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:892,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:891,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:892,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:893,10'
              BranchSideFuncs:
                - strlcpy
                - strlcat
                - __sanitizer_cov_trace_const_cmp8
                - __b64_ntop
                - __sanitizer_cov_trace_const_cmp4
                - strcspn
                - freezero
        - Branch String:   'sshkey.c:895,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:896,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:897,6'
              BranchSideFuncs:
                - __b64_ntop
                - __sanitizer_cov_trace_const_cmp4
                - strcspn
                - freezero
        - Branch String:   'sshkey.c:897,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:898,12'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'sshkey.c:902,2'
              BranchSideFuncs:
                - strcspn
      Callsites:
        - Src:             'sshkey.c:888,16'
          Dst:             strlen
        - Src:             'sshkey.c:891,37'
          Dst:             calloc
        - Src:             'sshkey.c:893,2'
          Dst:             strlcpy
        - Src:             'sshkey.c:894,2'
          Dst:             strlcat
        - Src:             'sshkey.c:897,6'
          Dst:             __b64_ntop
        - Src:             'sshkey.c:898,3'
          Dst:             freezero
        - Src:             'sshkey.c:902,6'
          Dst:             strcspn
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fingerprint_hex
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 908
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         13
      ICount:          100
      EdgeCount:       16
      CyclomaticComplexity: 5
      functionsReached:
        - calloc
        - snprintf
        - strlcat
        - strlcpy
        - strlen
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:912,27'
          Branch Sides:
            - BranchSide:      'sshkey.c:912,50'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:913,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:912,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:913,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:914,10'
              BranchSideFuncs:
                - strlcpy
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - strlcat
        - Branch String:   'sshkey.c:916,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:917,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - strlcat
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshkey.c:921,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:910,38'
          Dst:             strlen
        - Src:             'sshkey.c:912,40'
          Dst:             calloc
        - Src:             'sshkey.c:914,2'
          Dst:             strlcpy
        - Src:             'sshkey.c:915,2'
          Dst:             strlcat
        - Src:             'sshkey.c:917,3'
          Dst:             snprintf
        - Src:             'sshkey.c:919,3'
          Dst:             strlcat
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_fingerprint
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1105
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         16
      ICount:          122
      EdgeCount:       17
      CyclomaticComplexity: 3
      functionsReached:
        - fingerprint_b64
        - fingerprint_bubblebabble
        - fingerprint_hex
        - fingerprint_randomart
        - freezero
        - ssh_digest_alg_name
        - sshkey_fingerprint_raw
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:1110,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:1111,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:1112,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - ssh_digest_alg_name
                - fingerprint_randomart
                - freezero
                - fingerprint_bubblebabble
                - ssh_digest_alg_name
                - fingerprint_b64
                - ssh_digest_alg_name
                - fingerprint_hex
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_alg_name
                - fingerprint_b64
                - ssh_digest_alg_name
                - fingerprint_hex
                - freezero
        - Branch String:   'sshkey.c:1112,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:1114,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_alg_name
                - fingerprint_b64
                - freezero
                - ssh_digest_alg_name
                - fingerprint_hex
            - BranchSide:      'sshkey.c:1123,48'
              BranchSideFuncs:
                - ssh_digest_alg_name
                - fingerprint_hex
                - freezero
            - BranchSide:      'sshkey.c:1127,48'
              BranchSideFuncs:
                - ssh_digest_alg_name
                - fingerprint_b64
                - freezero
            - BranchSide:      'sshkey.c:1131,37'
              BranchSideFuncs:
                - fingerprint_bubblebabble
                - freezero
            - BranchSide:      'sshkey.c:1134,54'
              BranchSideFuncs:
                - ssh_digest_alg_name
                - fingerprint_randomart
                - freezero
            - BranchSide:      'sshkey.c:1138,12'
              BranchSideFuncs:
                - freezero
        - Branch String:   'sshkey.c:1114,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:1115,49'
              BranchSideFuncs:
                - ssh_digest_alg_name
                - fingerprint_hex
                - freezero
            - BranchSide:      'sshkey.c:1118,49'
              BranchSideFuncs:
                - ssh_digest_alg_name
                - fingerprint_b64
                - freezero
      Callsites:
        - Src:             'sshkey.c:1110,6'
          Dst:             sshkey_fingerprint_raw
        - Src:             'sshkey.c:1115,29'
          Dst:             ssh_digest_alg_name
        - Src:             'sshkey.c:1115,13'
          Dst:             fingerprint_hex
        - Src:             'sshkey.c:1118,29'
          Dst:             ssh_digest_alg_name
        - Src:             'sshkey.c:1118,13'
          Dst:             fingerprint_b64
        - Src:             'sshkey.c:1123,28'
          Dst:             ssh_digest_alg_name
        - Src:             'sshkey.c:1123,12'
          Dst:             fingerprint_hex
        - Src:             'sshkey.c:1127,28'
          Dst:             ssh_digest_alg_name
        - Src:             'sshkey.c:1127,12'
          Dst:             fingerprint_b64
        - Src:             'sshkey.c:1131,12'
          Dst:             fingerprint_bubblebabble
        - Src:             'sshkey.c:1134,34'
          Dst:             ssh_digest_alg_name
        - Src:             'sshkey.c:1134,12'
          Dst:             fingerprint_randomart
        - Src:             'sshkey.c:1138,3'
          Dst:             freezero
        - Src:             'sshkey.c:1141,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_fingerprint_raw
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 846
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.sshkey *'
        - 'int '
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         27
      ICount:          153
      EdgeCount:       36
      CyclomaticComplexity: 11
      functionsReached:
        - calloc
        - freezero
        - ssh_digest_bytes
        - ssh_digest_memory
        - to_blob
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:851,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:852,4'
              BranchSideFuncs:
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - to_blob
                - __sanitizer_cov_trace_const_cmp4
                - calloc
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
                - ssh_digest_bytes
            - BranchSide:      'sshkey.c:853,6'
              BranchSideFuncs:
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - to_blob
                - __sanitizer_cov_trace_const_cmp4
                - calloc
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
                - ssh_digest_bytes
        - Branch String:   'sshkey.c:853,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:854,4'
              BranchSideFuncs:
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - to_blob
                - __sanitizer_cov_trace_const_cmp4
                - calloc
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
                - ssh_digest_bytes
            - BranchSide:      'sshkey.c:855,23'
              BranchSideFuncs:
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - to_blob
                - __sanitizer_cov_trace_const_cmp4
                - calloc
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
                - ssh_digest_bytes
        - Branch String:   'sshkey.c:855,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:856,5'
              BranchSideFuncs:
                - free
                - freezero
            - BranchSide:      'sshkey.c:859,19'
              BranchSideFuncs:
                - to_blob
                - __sanitizer_cov_trace_const_cmp4
                - calloc
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
                - ssh_digest_bytes
        - Branch String:   'sshkey.c:859,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:861,3'
              BranchSideFuncs:
                - free
                - freezero
            - BranchSide:      'sshkey.c:862,13'
              BranchSideFuncs:
                - calloc
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
                - ssh_digest_bytes
        - Branch String:   'sshkey.c:862,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:863,5'
              BranchSideFuncs:
                - free
                - freezero
            - BranchSide:      'sshkey.c:866,29'
              BranchSideFuncs:
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
                - ssh_digest_bytes
        - Branch String:   'sshkey.c:866,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:868,3'
              BranchSideFuncs:
                - free
                - freezero
            - BranchSide:      'sshkey.c:870,6'
              BranchSideFuncs:
                - free
                - freezero
                - ssh_digest_bytes
        - Branch String:   'sshkey.c:870,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:871,11'
              BranchSideFuncs:
                - free
                - freezero
                - ssh_digest_bytes
            - BranchSide:      'sshkey.c:874,6'
              BranchSideFuncs:
                - free
                - freezero
                - ssh_digest_bytes
        - Branch String:   'sshkey.c:874,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:875,28'
              BranchSideFuncs:
                - ssh_digest_bytes
                - free
                - freezero
            - BranchSide:      'sshkey.c:876,4'
              BranchSideFuncs:
                - free
                - freezero
        - Branch String:   'sshkey.c:879,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:879,6'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'sshkey.c:880,12'
              BranchSideFuncs:
                - freezero
      Callsites:
        - Src:             'sshkey.c:855,6'
          Dst:             ssh_digest_bytes
        - Src:             'sshkey.c:859,11'
          Dst:             to_blob
        - Src:             'sshkey.c:862,13'
          Dst:             calloc
        - Src:             'sshkey.c:866,11'
          Dst:             ssh_digest_memory
        - Src:             'sshkey.c:875,11'
          Dst:             ssh_digest_bytes
        - Src:             'sshkey.c:880,3'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_plain_to_blob
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 839
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - to_blob
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'sshkey.c:840,9'
          Dst:             to_blob
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_putb_plain
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 795
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - to_blob_buf
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'sshkey.c:796,9'
          Dst:             to_blob_buf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_puts
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 789
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshkey_puts_opts
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'sshkey.c:790,9'
          Dst:             sshkey_puts_opts
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_puts_opts
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 774
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         9
      ICount:          61
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - sshbuf_free
        - sshbuf_new
        - sshbuf_put_stringb
        - to_blob_buf
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:778,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:779,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:780,18'
              BranchSideFuncs:
                - to_blob_buf
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_put_stringb
        - Branch String:   'sshkey.c:781,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:782,26'
              BranchSideFuncs:
                - sshbuf_put_stringb
                - sshbuf_free
            - BranchSide:      'sshkey.c:783,14'
              BranchSideFuncs:
                - sshbuf_free
      Callsites:
        - Src:             'sshkey.c:778,13'
          Dst:             sshbuf_new
        - Src:             'sshkey.c:780,6'
          Dst:             to_blob_buf
        - Src:             'sshkey.c:782,7'
          Dst:             sshbuf_put_stringb
        - Src:             'sshkey.c:783,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_serialize_sk
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 724
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          41
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_put_cstring
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:727,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:728,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:730,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:727,11'
          Dst:             sshbuf_put_cstring
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_sk_fields_equal
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 683
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          59
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - strcmp
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:684,32'
          Branch Sides:
            - BranchSide:      'sshkey.c:684,35'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:685,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:684,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:685,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:686,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:686,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:687,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:688,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:686,6'
          Dst:             strcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_sk_cleanup
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 634
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          35
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_free
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'sshkey.c:636,2'
          Dst:             sshbuf_free
        - Src:             'sshkey.c:637,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_ec_nid_to_hash_alg
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 545
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          53
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - sshkey_curve_nid_to_bits
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey.c:548,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:549,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:552,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:552,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:553,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:554,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:554,11'
          Branch Sides:
            - BranchSide:      'sshkey.c:555,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:557,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:546,14'
          Dst:             sshkey_curve_nid_to_bits
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_curve_nid_to_bits
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 494
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          33
      EdgeCount:       10
      CyclomaticComplexity: 6
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:495,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:497,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:499,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:502,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:505,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_ecdsa_bits_to_nid
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 511
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          33
      EdgeCount:       10
      CyclomaticComplexity: 6
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:512,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:514,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:516,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:519,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:522,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_curve_name_to_nid
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 479
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          51
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - strcmp
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:480,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:481,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:482,18'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:482,11'
          Branch Sides:
            - BranchSide:      'sshkey.c:483,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:485,18'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:485,11'
          Branch Sides:
            - BranchSide:      'sshkey.c:486,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:489,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey.c:480,6'
          Dst:             strcmp
        - Src:             'sshkey.c:482,11'
          Dst:             strcmp
        - Src:             'sshkey.c:485,11'
          Dst:             strcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_names_valid2
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 344
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         32
      ICount:          166
      EdgeCount:       42
      CyclomaticComplexity: 12
      functionsReached:
        - match_pattern_list
        - sshkey_type_from_name
        - strcmp
        - strdup
        - strsep
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:349,20'
          Branch Sides:
            - BranchSide:      'sshkey.c:349,30'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:350,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:349,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:350,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:351,23'
              BranchSideFuncs:
                - strdup
                - strsep
                - free
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:351,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:352,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:353,12'
              BranchSideFuncs:
                - strsep
                - free
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:353,33'
          Branch Sides:
            - BranchSide:      'sshkey.c:353,37'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:353,2'
              BranchSideFuncs:
                - free
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:353,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:355,32'
              BranchSideFuncs:
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:378,7'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey.c:356,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:357,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - strsep
                - free
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:377,2'
              BranchSideFuncs:
                - strsep
                - free
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:357,8'
          Branch Sides:
            - BranchSide:      'sshkey.c:363,10'
              BranchSideFuncs:
                - free
                - strsep
                - free
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:374,9'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey.c:364,5'
          Branch Sides:
            - BranchSide:      'sshkey.c:366,19'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - free
                - strsep
                - free
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:371,9'
              BranchSideFuncs:
                - free
                - strsep
                - free
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:365,10'
          Branch Sides:
            - BranchSide:      'sshkey.c:367,23'
              BranchSideFuncs:
                - free
                - strsep
                - free
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:370,5'
              BranchSideFuncs:
                - free
                - strsep
                - free
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:371,9'
          Branch Sides:
            - BranchSide:      'sshkey.c:372,6'
              BranchSideFuncs:
                - strsep
                - free
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:373,4'
              BranchSideFuncs:
                - free
      Callsites:
        - Src:             'sshkey.c:349,23'
          Dst:             strcmp
        - Src:             'sshkey.c:351,16'
          Dst:             strdup
        - Src:             'sshkey.c:353,12'
          Dst:             strsep
        - Src:             'sshkey.c:355,10'
          Dst:             sshkey_type_from_name
        - Src:             'sshkey.c:365,10'
          Dst:             match_pattern_list
        - Src:             'sshkey.c:354,11'
          Dst:             strsep
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_alg_list
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 315
      functionDepth:   0
      returnType:      'char *'
      argCount:        4
      argTypes:
        - 'int '
        - 'int '
        - 'int '
        - 'char '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         31
      ICount:          194
      EdgeCount:       41
      CyclomaticComplexity: 12
      functionsReached:
        - realloc
        - strlen
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey.c:320,2'
          Branch Sides:
            - BranchSide:      'sshkey.c:321,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:339,9'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:322,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:323,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:324,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:324,24'
          Branch Sides:
            - BranchSide:      'sshkey.c:324,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:326,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:324,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:325,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:326,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:326,19'
          Branch Sides:
            - BranchSide:      'sshkey.c:326,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:326,39'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:326,35'
          Branch Sides:
            - BranchSide:      'sshkey.c:326,39'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:327,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:326,50'
          Branch Sides:
            - BranchSide:      'sshkey.c:326,53'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
            - BranchSide:      'sshkey.c:328,7'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'sshkey.c:326,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:327,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:328,7'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'sshkey.c:328,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:329,18'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
            - BranchSide:      'sshkey.c:330,17'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'sshkey.c:331,7'
          Branch Sides:
            - BranchSide:      'sshkey.c:332,9'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey.c:335,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'sshkey.c:330,10'
          Dst:             strlen
        - Src:             'sshkey.c:331,14'
          Dst:             realloc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    realloc
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    6
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_match_keyname_to_sigalgs
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 292
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         25
      ICount:          129
      EdgeCount:       34
      CyclomaticComplexity: 11
      functionsReached:
        - match_pattern_list
        - sshkey_type_from_name
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey.c:295,22'
          Branch Sides:
            - BranchSide:      'sshkey.c:295,26'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:297,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:295,42'
          Branch Sides:
            - BranchSide:      'sshkey.c:296,37'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:297,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey.c:295,6'
          Branch Sides:
            - BranchSide:      'sshkey.c:297,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:298,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:298,11'
          Branch Sides:
            - BranchSide:      'sshkey.c:299,40'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:302,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:299,57'
          Branch Sides:
            - BranchSide:      'sshkey.c:300,59'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:300,42'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:300,59'
          Branch Sides:
            - BranchSide:      'sshkey.c:300,59'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:301,42'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:302,13'
          Branch Sides:
            - BranchSide:      'sshkey.c:304,7'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey.c:310,29'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:304,24'
          Branch Sides:
            - BranchSide:      'sshkey.c:306,24'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:306,7'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey.c:306,24'
          Branch Sides:
            - BranchSide:      'sshkey.c:306,24'
              BranchSideFuncs: []
            - BranchSide:      'sshkey.c:308,7'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'sshkey.c:296,15'
          Dst:             sshkey_type_from_name
        - Src:             'sshkey.c:299,10'
          Dst:             match_pattern_list
        - Src:             'sshkey.c:300,7'
          Dst:             match_pattern_list
        - Src:             'sshkey.c:301,7'
          Dst:             match_pattern_list
        - Src:             'sshkey.c:303,10'
          Dst:             match_pattern_list
        - Src:             'sshkey.c:305,7'
          Dst:             match_pattern_list
        - Src:             'sshkey.c:307,7'
          Dst:             match_pattern_list
        - Src:             'sshkey.c:310,10'
          Dst:             match_pattern_list
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_ssh_name_plain
      functionSourceFile: '/src/openssh/sshkey.c'
      linkageType:     InternalLinkage
      functionLinenumber: 241
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          22
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshkey_type_plain
      functionUses:    3
      BranchProfiles:  []
      Callsites:
        - Src:             'sshkey.c:242,39'
          Dst:             sshkey_type_plain
        - Src:             'sshkey.c:242,9'
          Dst:             sshkey_ssh_name_from_type_nid
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    check_offset
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 101
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.sshbuf *'
        - 'int '
        - 'size_t '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         10
      ICount:          68
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - sshbuf_len
        - sshbuf_ptr
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:102,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:103,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:104,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:104,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:105,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:106,6'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:106,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:107,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:110,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:102,6'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-getput-basic.c:106,21'
          Dst:             sshbuf_len
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_get_bignum2_bytes_direct
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 602
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         33
      ICount:          175
      EdgeCount:       44
      CyclomaticComplexity: 13
      functionsReached:
        - sshbuf_consume
        - sshbuf_peek_string_direct
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:607,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:608,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:609,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:611,16'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:611,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:614,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:611,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:612,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:614,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:614,34'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:615,7'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:616,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:615,36'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:615,40'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:618,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:614,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:616,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:618,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:618,17'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:618,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'sshbuf-getput-basic.c:618,2'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:618,2'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:619,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:622,6'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:622,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:623,11'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:624,6'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:624,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:625,11'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:626,21'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:626,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:630,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:632,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:607,11'
          Dst:             sshbuf_peek_string_direct
        - Src:             'sshbuf-getput-basic.c:626,6'
          Dst:             sshbuf_consume
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_peek_string_direct
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 242
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         22
      ICount:          142
      EdgeCount:       29
      CyclomaticComplexity: 9
      functionsReached:
        - sshbuf_len
        - sshbuf_ptr
      functionUses:    8
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:246,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:247,4'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshbuf-getput-basic.c:248,6'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf-getput-basic.c:248,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:249,4'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshbuf-getput-basic.c:250,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf-getput-basic.c:250,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:252,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:254,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf-getput-basic.c:255,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:257,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:259,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf-getput-basic.c:259,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:261,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:263,6'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:263,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:264,11'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:265,6'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:265,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:266,11'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:267,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:244,20'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-getput-basic.c:250,6'
          Dst:             sshbuf_len
        - Src:             'sshbuf-getput-basic.c:259,6'
          Dst:             sshbuf_len
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_put_bignum2_bytes
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 572
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         26
      ICount:          185
      EdgeCount:       33
      CyclomaticComplexity: 9
      functionsReached:
        - sshbuf_reserve
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:577,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:579,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:582,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:582,17'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:582,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'sshbuf-getput-basic.c:582,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:582,2'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:582,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:588,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:588,20'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:588,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:588,20'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:589,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:590,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:591,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:592,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:593,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:594,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:594,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:595,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:596,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:589,11'
          Dst:             sshbuf_reserve
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_froms
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 548
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         18
      ICount:          104
      EdgeCount:       24
      CyclomaticComplexity: 8
      functionsReached:
        - sshbuf_consume
        - sshbuf_free
        - sshbuf_from
        - sshbuf_peek_string_direct
        - sshbuf_set_parent
      functionUses:    12
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:554,18'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:554,21'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:555,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:554,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:555,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:556,3'
              BranchSideFuncs:
                - sshbuf_peek_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_from
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_set_parent
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
        - Branch String:   'sshbuf-getput-basic.c:557,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:558,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:559,25'
              BranchSideFuncs:
                - sshbuf_from
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_set_parent
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
        - Branch String:   'sshbuf-getput-basic.c:559,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:560,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:561,26'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_set_parent
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
        - Branch String:   'sshbuf-getput-basic.c:561,46'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:562,29'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshbuf-getput-basic.c:563,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'sshbuf-getput-basic.c:561,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:563,15'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshbuf-getput-basic.c:566,10'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:557,11'
          Dst:             sshbuf_peek_string_direct
        - Src:             'sshbuf-getput-basic.c:559,13'
          Dst:             sshbuf_from
        - Src:             'sshbuf-getput-basic.c:561,11'
          Dst:             sshbuf_consume
        - Src:             'sshbuf-getput-basic.c:562,11'
          Dst:             sshbuf_set_parent
        - Src:             'sshbuf-getput-basic.c:563,3'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_put_stringb
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 539
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          40
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_ptr
        - sshbuf_put_string
      functionUses:    28
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:540,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:541,28'
              BranchSideFuncs:
                - sshbuf_put_string
            - BranchSide:      'sshbuf-getput-basic.c:543,27'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_put_string
      Callsites:
        - Src:             'sshbuf-getput-basic.c:541,10'
          Dst:             sshbuf_put_string
        - Src:             'sshbuf-getput-basic.c:543,32'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-getput-basic.c:543,47'
          Dst:             sshbuf_len
        - Src:             'sshbuf-getput-basic.c:543,9'
          Dst:             sshbuf_put_string
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_put_string
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 515
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         13
      ICount:          102
      EdgeCount:       16
      CyclomaticComplexity: 5
      functionsReached:
        - sshbuf_reserve
      functionUses:    35
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:519,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:521,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:523,26'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:523,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:524,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:525,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:526,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:527,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:528,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:523,11'
          Dst:             sshbuf_reserve
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_put_cstring
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 533
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          34
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_put_string
        - strlen
      functionUses:    27
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:534,35'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:534,35'
              BranchSideFuncs:
                - sshbuf_put_string
            - BranchSide:      'sshbuf-getput-basic.c:534,58'
              BranchSideFuncs:
                - strlen
                - sshbuf_put_string
      Callsites:
        - Src:             'sshbuf-getput-basic.c:534,51'
          Dst:             strlen
        - Src:             'sshbuf-getput-basic.c:534,9'
          Dst:             sshbuf_put_string
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_poke
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 503
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          53
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - check_woffset
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:507,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:508,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:509,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:
        - Src:             'sshbuf-getput-basic.c:507,11'
          Dst:             check_woffset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    check_woffset
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 441
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'size_t '
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          63
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - check_offset
        - sshbuf_mutable_ptr
      functionUses:    5
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:445,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:446,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:447,25'
              BranchSideFuncs:
                - sshbuf_mutable_ptr
                - sshbuf_mutable_ptr
        - Branch String:   'sshbuf-getput-basic.c:447,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:448,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:449,26'
              BranchSideFuncs:
                - sshbuf_mutable_ptr
      Callsites:
        - Src:             'sshbuf-getput-basic.c:445,11'
          Dst:             check_offset
        - Src:             'sshbuf-getput-basic.c:447,6'
          Dst:             sshbuf_mutable_ptr
        - Src:             'sshbuf-getput-basic.c:449,7'
          Dst:             sshbuf_mutable_ptr
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_poke_u8
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 491
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'char '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          48
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - check_woffset
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:495,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:496,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:497,7'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:495,11'
          Dst:             check_woffset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_poke_u16
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 479
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          66
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached:
        - check_woffset
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:483,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:484,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:485,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:483,11'
          Dst:             check_woffset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_poke_u32
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 467
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          78
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached:
        - check_woffset
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:471,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:472,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:473,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:471,11'
          Dst:             check_woffset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_poke_u64
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 455
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          106
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached:
        - check_woffset
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:459,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:460,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:461,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:459,11'
          Dst:             check_woffset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_put_u8
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 429
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'char '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          44
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_reserve
      functionUses:    34
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:433,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:434,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:435,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:433,11'
          Dst:             sshbuf_reserve
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_put_u16
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 417
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          61
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_reserve
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:421,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:422,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:423,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:421,11'
          Dst:             sshbuf_reserve
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_put_u32
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 405
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          73
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_reserve
      functionUses:    43
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:409,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:410,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:411,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:409,11'
          Dst:             sshbuf_reserve
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_put_u64
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 393
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          101
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_reserve
      functionUses:    9
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:397,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:398,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:399,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:397,11'
          Dst:             sshbuf_reserve
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_putfv
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 360
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'char *'
        - 'struct.__va_list_tag *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         14
      ICount:          112
      EdgeCount:       19
      CyclomaticComplexity: 7
      functionsReached:
        - sshbuf_consume_end
        - sshbuf_reserve
        - vsnprintf
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:366,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:367,5'
              BranchSideFuncs:
                - llvm.va_end
            - BranchSide:      'sshbuf-getput-basic.c:370,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - llvm.va_end
                - llvm.va_copy
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - vsnprintf
                - __sanitizer_cov_trace_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - llvm.va_end
        - Branch String:   'sshbuf-getput-basic.c:370,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:371,5'
              BranchSideFuncs:
                - llvm.va_end
            - BranchSide:      'sshbuf-getput-basic.c:374,2'
              BranchSideFuncs:
                - llvm.va_end
                - llvm.va_copy
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - vsnprintf
                - __sanitizer_cov_trace_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - llvm.va_end
        - Branch String:   'sshbuf-getput-basic.c:376,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:377,3'
              BranchSideFuncs:
                - llvm.va_end
            - BranchSide:      'sshbuf-getput-basic.c:378,29'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - llvm.va_end
        - Branch String:   'sshbuf-getput-basic.c:378,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:379,5'
              BranchSideFuncs:
                - llvm.va_end
            - BranchSide:      'sshbuf-getput-basic.c:383,30'
              BranchSideFuncs:
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - llvm.va_end
        - Branch String:   'sshbuf-getput-basic.c:383,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:384,3'
              BranchSideFuncs:
                - llvm.va_end
            - BranchSide:      'sshbuf-getput-basic.c:385,4'
              BranchSideFuncs:
                - llvm.va_end
      Callsites:
        - Src:             'sshbuf-getput-basic.c:366,13'
          Dst:             vsnprintf
        - Src:             'sshbuf-getput-basic.c:376,11'
          Dst:             sshbuf_reserve
        - Src:             'sshbuf-getput-basic.c:378,11'
          Dst:             vsnprintf
        - Src:             'sshbuf-getput-basic.c:383,11'
          Dst:             sshbuf_consume_end
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    vsnprintf
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'struct.__va_list_tag *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_putf
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 348
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          33
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_putfv
      functionUses:    3
      BranchProfiles:  []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:353,6'
          Dst:             sshbuf_putfv
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_putb
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 340
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          38
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_ptr
        - sshbuf_put
      functionUses:    24
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:341,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:342,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:343,20'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_put
      Callsites:
        - Src:             'sshbuf-getput-basic.c:343,25'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-getput-basic.c:343,40'
          Dst:             sshbuf_len
        - Src:             'sshbuf-getput-basic.c:343,9'
          Dst:             sshbuf_put
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_put
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 327
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         9
      ICount:          57
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - sshbuf_reserve
      functionUses:    45
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:331,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:332,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:333,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:333,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:334,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:335,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:331,11'
          Dst:             sshbuf_reserve
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_get_stringb
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 307
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         13
      ICount:          78
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - sshbuf_get
        - sshbuf_get_u32
        - sshbuf_peek_string_direct
        - sshbuf_reserve
      functionUses:    7
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:317,60'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:318,26'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:321,10'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:318,43'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:319,26'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:321,10'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:319,44'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:320,22'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:321,10'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:317,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:321,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:322,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:317,11'
          Dst:             sshbuf_peek_string_direct
        - Src:             'sshbuf-getput-basic.c:318,11'
          Dst:             sshbuf_get_u32
        - Src:             'sshbuf-getput-basic.c:319,11'
          Dst:             sshbuf_reserve
        - Src:             'sshbuf-getput-basic.c:320,11'
          Dst:             sshbuf_get
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_get_u32
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 62
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          75
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - sshbuf_consume
        - sshbuf_ptr
      functionUses:    42
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:66,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:67,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:68,6'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:68,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:69,11'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:70,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:63,20'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-getput-basic.c:66,11'
          Dst:             sshbuf_consume
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_get
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 36
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          67
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - sshbuf_consume
        - sshbuf_ptr
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:40,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:41,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:42,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:42,16'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:42,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:44,2'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:42,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:43,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:44,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:37,20'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-getput-basic.c:40,11'
          Dst:             sshbuf_consume
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_get_cstring
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 272
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         32
      ICount:          171
      EdgeCount:       43
      CyclomaticComplexity: 13
      functionsReached:
        - memchr
        - sshbuf_get_string_direct
        - sshbuf_peek_string_direct
      functionUses:    30
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:277,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:278,4'
              BranchSideFuncs:
                - sshbuf_peek_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - memchr
            - BranchSide:      'sshbuf-getput-basic.c:279,6'
              BranchSideFuncs:
                - sshbuf_peek_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - memchr
        - Branch String:   'sshbuf-getput-basic.c:279,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:280,4'
              BranchSideFuncs:
                - sshbuf_peek_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - memchr
            - BranchSide:      'sshbuf-getput-basic.c:281,37'
              BranchSideFuncs:
                - sshbuf_peek_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - memchr
        - Branch String:   'sshbuf-getput-basic.c:281,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:282,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:284,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - memchr
        - Branch String:   'sshbuf-getput-basic.c:284,14'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:285,18'
              BranchSideFuncs:
                - memchr
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:289,11'
              BranchSideFuncs:
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:285,42'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:285,45'
              BranchSideFuncs:
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:289,11'
              BranchSideFuncs:
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:284,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:287,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:289,11'
              BranchSideFuncs:
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:289,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:290,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:291,6'
              BranchSideFuncs:
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:291,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:292,23'
              BranchSideFuncs:
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:300,6'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:292,7'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:294,4'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:296,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:296,7'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:297,12'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:298,5'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:300,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:301,19'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:302,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:281,11'
          Dst:             sshbuf_peek_string_direct
        - Src:             'sshbuf-getput-basic.c:285,11'
          Dst:             memchr
        - Src:             'sshbuf-getput-basic.c:289,11'
          Dst:             sshbuf_get_string_direct
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    memchr
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'int '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_get_string_direct
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 215
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         20
      ICount:          111
      EdgeCount:       26
      CyclomaticComplexity: 8
      functionsReached:
        - sshbuf_consume
        - sshbuf_peek_string_direct
      functionUses:    19
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:220,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:221,4'
              BranchSideFuncs:
                - sshbuf_peek_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:222,6'
              BranchSideFuncs:
                - sshbuf_peek_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:222,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:223,4'
              BranchSideFuncs:
                - sshbuf_peek_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:224,37'
              BranchSideFuncs:
                - sshbuf_peek_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:224,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:225,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:226,6'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:226,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:227,11'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:228,6'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:228,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:229,11'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:230,21'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:230,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:234,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:236,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:224,11'
          Dst:             sshbuf_peek_string_direct
        - Src:             'sshbuf-getput-basic.c:230,6'
          Dst:             sshbuf_consume
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_get_string
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 188
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         23
      ICount:          124
      EdgeCount:       30
      CyclomaticComplexity: 9
      functionsReached:
        - sshbuf_get_string_direct
      functionUses:    21
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:193,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:194,4'
              BranchSideFuncs:
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:195,6'
              BranchSideFuncs:
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:195,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:196,4'
              BranchSideFuncs:
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:197,36'
              BranchSideFuncs:
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:197,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:198,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:199,6'
              BranchSideFuncs:
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:199,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:200,23'
              BranchSideFuncs:
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:208,6'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:200,7'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:202,4'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:204,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-getput-basic.c:204,7'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:205,12'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-getput-basic.c:206,5'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:208,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:209,11'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:210,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:197,11'
          Dst:             sshbuf_get_string_direct
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_peek_u8
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 173
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          70
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - check_roffset
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:177,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:178,4'
              BranchSideFuncs:
                - check_roffset
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:179,25'
              BranchSideFuncs:
                - check_roffset
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:179,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:180,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:181,6'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:181,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:182,12'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:183,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:179,11'
          Dst:             check_roffset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    check_roffset
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 116
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'size_t '
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          54
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - check_offset
        - sshbuf_ptr
      functionUses:    4
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:120,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:121,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:122,18'
              BranchSideFuncs:
                - sshbuf_ptr
      Callsites:
        - Src:             'sshbuf-getput-basic.c:120,11'
          Dst:             check_offset
        - Src:             'sshbuf-getput-basic.c:122,7'
          Dst:             sshbuf_ptr
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_peek_u16
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 158
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          81
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - check_roffset
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:162,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:163,4'
              BranchSideFuncs:
                - check_roffset
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:164,25'
              BranchSideFuncs:
                - check_roffset
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:164,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:165,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:166,6'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:166,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:167,11'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:168,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:164,11'
          Dst:             check_roffset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_peek_u32
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 143
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          90
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - check_roffset
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:147,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:148,4'
              BranchSideFuncs:
                - check_roffset
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:149,25'
              BranchSideFuncs:
                - check_roffset
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:149,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:150,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:151,6'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:151,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:152,11'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:153,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:149,11'
          Dst:             check_roffset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_peek_u64
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 128
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          114
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - check_roffset
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:132,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:133,4'
              BranchSideFuncs:
                - check_roffset
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-basic.c:134,25'
              BranchSideFuncs:
                - check_roffset
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-basic.c:134,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:135,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:136,6'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:136,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:137,11'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:138,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:134,11'
          Dst:             check_roffset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_get_u8
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 88
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          55
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - sshbuf_consume
        - sshbuf_ptr
      functionUses:    16
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:92,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:93,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:94,6'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:94,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:95,22'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:96,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:89,20'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-getput-basic.c:92,11'
          Dst:             sshbuf_consume
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_get_u16
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 75
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          66
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - sshbuf_consume
        - sshbuf_ptr
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:79,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:80,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:81,6'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:81,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:82,11'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:83,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:76,20'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-getput-basic.c:79,11'
          Dst:             sshbuf_consume
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_get_u64
      functionSourceFile: '/src/openssh/sshbuf-getput-basic.c'
      linkageType:     InternalLinkage
      functionLinenumber: 49
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          99
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - sshbuf_consume
        - sshbuf_ptr
      functionUses:    9
      BranchProfiles:
        - Branch String:   'sshbuf-getput-basic.c:53,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:54,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:55,6'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-basic.c:55,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-basic.c:56,11'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-basic.c:57,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-basic.c:50,20'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-getput-basic.c:53,11'
          Dst:             sshbuf_consume
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_read
      functionSourceFile: '/src/openssh/sshbuf-misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 276
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'int '
        - 'struct.sshbuf *'
        - 'size_t '
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         25
      ICount:          154
      EdgeCount:       33
      CyclomaticComplexity: 10
      functionsReached:
        - __errno_location
        - memset
        - read
        - sshbuf_consume_end
        - sshbuf_reserve
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshbuf-misc.c:282,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:283,4'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __errno_location
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - memset
            - BranchSide:      'sshbuf-misc.c:284,26'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __errno_location
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - memset
        - Branch String:   'sshbuf-misc.c:284,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:285,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:286,12'
              BranchSideFuncs:
                - read
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __errno_location
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - memset
        - Branch String:   'sshbuf-misc.c:290,26'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:290,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __errno_location
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - memset
            - BranchSide:      'sshbuf-misc.c:290,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __errno_location
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - memset
        - Branch String:   'sshbuf-misc.c:290,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:291,31'
              BranchSideFuncs:
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __errno_location
                - memset
            - BranchSide:      'sshbuf-misc.c:297,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __errno_location
        - Branch String:   'sshbuf-misc.c:291,7'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:293,11'
              BranchSideFuncs:
                - memset
            - BranchSide:      'sshbuf-misc.c:296,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __errno_location
        - Branch String:   'sshbuf-misc.c:297,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:298,11'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'sshbuf-misc.c:300,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
        - Branch String:   'sshbuf-misc.c:305,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:306,19'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:307,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-misc.c:284,11'
          Dst:             sshbuf_reserve
        - Src:             'sshbuf-misc.c:286,7'
          Dst:             read
        - Src:             'sshbuf-misc.c:287,11'
          Dst:             __errno_location
        - Src:             'sshbuf-misc.c:291,12'
          Dst:             sshbuf_consume_end
        - Src:             'sshbuf-misc.c:293,4'
          Dst:             memset
        - Src:             'sshbuf-misc.c:298,3'
          Dst:             __errno_location
        - Src:             'sshbuf-misc.c:301,3'
          Dst:             __errno_location
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    read
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'int '
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    6
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_find
      functionSourceFile: '/src/openssh/sshbuf-misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 255
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'char *'
        - 'size_t '
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         26
      ICount:          142
      EdgeCount:       35
      CyclomaticComplexity: 11
      functionsReached:
        - memmem
        - sshbuf_len
        - sshbuf_ptr
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf-misc.c:258,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:259,4'
              BranchSideFuncs:
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - sshbuf_len
                - memmem
                - sshbuf_ptr
            - BranchSide:      'sshbuf-misc.c:260,17'
              BranchSideFuncs:
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - sshbuf_len
                - memmem
                - sshbuf_ptr
        - Branch String:   'sshbuf-misc.c:260,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:261,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:262,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - sshbuf_len
                - memmem
                - sshbuf_ptr
        - Branch String:   'sshbuf-misc.c:262,37'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:262,40'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:263,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-misc.c:262,62'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:262,65'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:263,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-misc.c:262,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:263,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:264,6'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - sshbuf_len
                - memmem
                - sshbuf_ptr
        - Branch String:   'sshbuf-misc.c:264,35'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:264,38'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:265,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-misc.c:264,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:265,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:266,29'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - memmem
                - sshbuf_ptr
        - Branch String:   'sshbuf-misc.c:266,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:268,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:269,6'
              BranchSideFuncs:
                - sshbuf_ptr
        - Branch String:   'sshbuf-misc.c:269,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:270,30'
              BranchSideFuncs:
                - sshbuf_ptr
            - BranchSide:      'sshbuf-misc.c:271,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-misc.c:260,6'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-misc.c:264,21'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:264,59'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:266,18'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-misc.c:267,6'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:266,11'
          Dst:             memmem
        - Src:             'sshbuf-misc.c:270,34'
          Dst:             sshbuf_ptr
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    memmem
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        4
      argTypes:
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_cmp
      functionSourceFile: '/src/openssh/sshbuf-misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 240
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.sshbuf *'
        - 'size_t '
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         17
      ICount:          93
      EdgeCount:       23
      CyclomaticComplexity: 8
      functionsReached:
        - sshbuf_len
        - sshbuf_ptr
        - timingsafe_bcmp
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshbuf-misc.c:241,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:242,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:243,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:243,31'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:243,34'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:244,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-misc.c:243,56'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:243,59'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:244,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-misc.c:243,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:244,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:245,6'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:245,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:246,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:247,33'
              BranchSideFuncs:
                - sshbuf_ptr
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:247,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:248,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:249,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-misc.c:241,6'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-misc.c:245,21'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:247,22'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-misc.c:247,6'
          Dst:             timingsafe_bcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_dtourlb64
      functionSourceFile: '/src/openssh/sshbuf-misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 173
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         32
      ICount:          180
      EdgeCount:       42
      CyclomaticComplexity: 12
      functionsReached:
        - sshbuf_consume_end
        - sshbuf_dtob64
        - sshbuf_free
        - sshbuf_len
        - sshbuf_mutable_ptr
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_putb
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshbuf-misc.c:179,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:180,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:182,25'
              BranchSideFuncs:
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - sshbuf_free
                - sshbuf_len
                - sshbuf_mutable_ptr
                - __sanitizer_cov_trace_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:182,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:183,3'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshbuf-misc.c:185,2'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - sshbuf_free
                - sshbuf_len
                - sshbuf_mutable_ptr
                - __sanitizer_cov_trace_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:187,14'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:187,28'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshbuf-misc.c:188,6'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'sshbuf-misc.c:187,7'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:188,6'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshbuf-misc.c:191,18'
              BranchSideFuncs:
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_free
                - sshbuf_len
                - sshbuf_mutable_ptr
                - __sanitizer_cov_trace_cmp8
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:191,7'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:192,4'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_mutable_ptr
                - __sanitizer_cov_trace_cmp8
                - sshbuf_putb
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-misc.c:193,31'
              BranchSideFuncs:
                - sshbuf_consume_end
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_mutable_ptr
                - __sanitizer_cov_trace_cmp8
                - sshbuf_putb
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:193,7'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:185,2'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshbuf-misc.c:194,4'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'sshbuf-misc.c:198,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:199,5'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshbuf-misc.c:202,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshbuf_putb
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:202,2'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:203,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_putb
                - sshbuf_free
            - BranchSide:      'sshbuf-misc.c:208,18'
              BranchSideFuncs:
                - sshbuf_putb
                - sshbuf_free
        - Branch String:   'sshbuf-misc.c:203,7'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:204,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshbuf_putb
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-misc.c:205,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_putb
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'sshbuf-misc.c:179,11'
          Dst:             sshbuf_new
        - Src:             'sshbuf-misc.c:182,11'
          Dst:             sshbuf_dtob64
        - Src:             'sshbuf-misc.c:186,7'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:187,17'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-misc.c:191,7'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-misc.c:193,12'
          Dst:             sshbuf_consume_end
        - Src:             'sshbuf-misc.c:197,6'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:198,11'
          Dst:             sshbuf_mutable_ptr
        - Src:             'sshbuf-misc.c:208,6'
          Dst:             sshbuf_putb
        - Src:             'sshbuf-misc.c:210,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_dtob64
      functionSourceFile: '/src/openssh/sshbuf-misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 95
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         39
      ICount:          209
      EdgeCount:       53
      CyclomaticComplexity: 16
      functionsReached:
        - __b64_ntop
        - freezero
        - sshbuf_len
        - sshbuf_ptr
        - sshbuf_put
        - sshbuf_put_u8
        - strlen
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshbuf-misc.c:100,16'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:100,19'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:101,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-misc.c:100,31'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:100,45'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:101,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-misc.c:100,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:101,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:102,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - __b64_ntop
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:102,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:103,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:104,22'
              BranchSideFuncs:
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - __b64_ntop
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:105,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:106,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:107,6'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - __b64_ntop
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:107,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:108,5'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'sshbuf-misc.c:111,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:111,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:112,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-misc.c:121,23'
              BranchSideFuncs:
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - freezero
        - Branch String:   'sshbuf-misc.c:112,3'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:113,27'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-misc.c:118,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:113,8'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:114,5'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'sshbuf-misc.c:115,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:115,21'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:115,43'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'sshbuf-misc.c:117,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:115,8'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:116,5'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'sshbuf-misc.c:117,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-misc.c:118,26'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:118,48'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - freezero
            - BranchSide:      'sshbuf-misc.c:120,2'
              BranchSideFuncs:
                - freezero
        - Branch String:   'sshbuf-misc.c:118,7'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:119,4'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'sshbuf-misc.c:120,2'
              BranchSideFuncs:
                - freezero
        - Branch String:   'sshbuf-misc.c:121,7'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:0,0'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'sshbuf-misc.c:122,4'
              BranchSideFuncs:
                - freezero
      Callsites:
        - Src:             'sshbuf-misc.c:100,34'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:102,6'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:104,11'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:107,6'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-misc.c:107,6'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:107,6'
          Dst:             __b64_ntop
        - Src:             'sshbuf-misc.c:113,13'
          Dst:             sshbuf_put_u8
        - Src:             'sshbuf-misc.c:115,29'
          Dst:             sshbuf_put_u8
        - Src:             'sshbuf-misc.c:118,34'
          Dst:             sshbuf_put_u8
        - Src:             'sshbuf-misc.c:121,31'
          Dst:             strlen
        - Src:             'sshbuf-misc.c:121,12'
          Dst:             sshbuf_put
        - Src:             'sshbuf-misc.c:127,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_b64tod
      functionSourceFile: '/src/openssh/sshbuf-misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 150
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         12
      ICount:          91
      EdgeCount:       16
      CyclomaticComplexity: 6
      functionsReached:
        - __b64_pton
        - freezero
        - sshbuf_put
        - strlen
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshbuf-misc.c:155,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:156,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:157,18'
              BranchSideFuncs:
                - malloc
                - __b64_pton
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - freezero
                - freezero
        - Branch String:   'sshbuf-misc.c:157,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:158,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:159,14'
              BranchSideFuncs:
                - __b64_pton
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - freezero
                - freezero
        - Branch String:   'sshbuf-misc.c:159,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:160,12'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'sshbuf-misc.c:163,22'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - freezero
        - Branch String:   'sshbuf-misc.c:163,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:164,12'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'sshbuf-misc.c:167,11'
              BranchSideFuncs:
                - freezero
      Callsites:
        - Src:             'sshbuf-misc.c:151,16'
          Dst:             strlen
        - Src:             'sshbuf-misc.c:159,14'
          Dst:             __b64_pton
        - Src:             'sshbuf-misc.c:160,3'
          Dst:             freezero
        - Src:             'sshbuf-misc.c:163,11'
          Dst:             sshbuf_put
        - Src:             'sshbuf-misc.c:164,3'
          Dst:             freezero
        - Src:             'sshbuf-misc.c:167,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_dup_string
      functionSourceFile: '/src/openssh/sshbuf-misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 216
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         21
      ICount:          119
      EdgeCount:       28
      CyclomaticComplexity: 9
      functionsReached:
        - memchr
        - sshbuf_len
        - sshbuf_ptr
      functionUses:    7
      BranchProfiles:
        - Branch String:   'sshbuf-misc.c:221,16'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:221,19'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:222,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-misc.c:221,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:222,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:224,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - memchr
        - Branch String:   'sshbuf-misc.c:224,12'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:224,27'
              BranchSideFuncs:
                - memchr
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-misc.c:229,18'
              BranchSideFuncs:
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-misc.c:224,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:225,7'
              BranchSideFuncs:
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-misc.c:229,18'
              BranchSideFuncs:
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-misc.c:225,7'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:226,4'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:227,4'
              BranchSideFuncs:
                - malloc
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-misc.c:229,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:230,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:231,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'sshbuf-misc.c:231,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:232,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'sshbuf-misc.c:233,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-misc.c:217,31'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-misc.c:218,13'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:224,20'
          Dst:             memchr
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_dtob64_string
      functionSourceFile: '/src/openssh/sshbuf-misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 133
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          57
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshbuf_dtob64
        - sshbuf_dup_string
        - sshbuf_free
        - sshbuf_new
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshbuf-misc.c:137,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:138,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:139,20'
              BranchSideFuncs:
                - sshbuf_dtob64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'sshbuf-misc.c:139,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:140,15'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'sshbuf-misc.c:143,26'
              BranchSideFuncs:
                - sshbuf_dup_string
                - sshbuf_free
      Callsites:
        - Src:             'sshbuf-misc.c:137,13'
          Dst:             sshbuf_new
        - Src:             'sshbuf-misc.c:139,6'
          Dst:             sshbuf_dtob64
        - Src:             'sshbuf-misc.c:140,3'
          Dst:             sshbuf_free
        - Src:             'sshbuf-misc.c:143,8'
          Dst:             sshbuf_dup_string
        - Src:             'sshbuf-misc.c:144,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_dtob16
      functionSourceFile: '/src/openssh/sshbuf-misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 75
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         15
      ICount:          124
      EdgeCount:       19
      CyclomaticComplexity: 6
      functionsReached:
        - sshbuf_len
        - sshbuf_ptr
        - strdup
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshbuf-misc.c:81,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:82,10'
              BranchSideFuncs:
                - strdup
            - BranchSide:      'sshbuf-misc.c:83,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf-misc.c:83,26'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:83,43'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:84,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-misc.c:83,6'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:84,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-misc.c:85,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sshbuf-misc.c:85,2'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:86,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sshbuf-misc.c:89,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-misc.c:76,21'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:77,20'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-misc.c:82,10'
          Dst:             strdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_dump
      functionSourceFile: '/src/openssh/sshbuf-misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 68
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct._IO_FILE *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          27
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - fprintf
        - sshbuf_dump_data
        - sshbuf_len
        - sshbuf_ptr
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'sshbuf-misc.c:69,35'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:69,2'
          Dst:             fprintf
        - Src:             'sshbuf-misc.c:70,19'
          Dst:             sshbuf_ptr
        - Src:             'sshbuf-misc.c:70,36'
          Dst:             sshbuf_len
        - Src:             'sshbuf-misc.c:70,2'
          Dst:             sshbuf_dump_data
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_dump_data
      functionSourceFile: '/src/openssh/sshbuf-misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 41
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'size_t '
        - 'struct._IO_FILE *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         27
      ICount:          165
      EdgeCount:       34
      CyclomaticComplexity: 9
      functionsReached:
        - __ctype_b_loc
        - fprintf
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshbuf-misc.c:45,2'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:46,11'
              BranchSideFuncs:
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - fprintf
            - BranchSide:      'sshbuf-misc.c:64,1'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-misc.c:47,3'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:48,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - fprintf
            - BranchSide:      'sshbuf-misc.c:53,11'
              BranchSideFuncs:
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
        - Branch String:   'sshbuf-misc.c:48,8'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:49,13'
              BranchSideFuncs:
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
            - BranchSide:      'sshbuf-misc.c:51,13'
              BranchSideFuncs:
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
        - Branch String:   'sshbuf-misc.c:54,3'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:55,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - fprintf
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
            - BranchSide:      'sshbuf-misc.c:62,11'
              BranchSideFuncs:
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - fprintf
        - Branch String:   'sshbuf-misc.c:55,8'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:56,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
            - BranchSide:      'sshbuf-misc.c:61,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
        - Branch String:   'sshbuf-misc.c:56,24'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:56,27'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
            - BranchSide:      'sshbuf-misc.c:59,14'
              BranchSideFuncs:
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
        - Branch String:   'sshbuf-misc.c:56,10'
          Branch Sides:
            - BranchSide:      'sshbuf-misc.c:57,14'
              BranchSideFuncs:
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-misc.c:59,14'
              BranchSideFuncs:
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - fprintf
                - fprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - fprintf
      Callsites:
        - Src:             'sshbuf-misc.c:46,3'
          Dst:             fprintf
        - Src:             'sshbuf-misc.c:49,5'
          Dst:             fprintf
        - Src:             'sshbuf-misc.c:51,5'
          Dst:             fprintf
        - Src:             'sshbuf-misc.c:53,3'
          Dst:             fprintf
        - Src:             'sshbuf-misc.c:56,27'
          Dst:             __ctype_b_loc
        - Src:             'sshbuf-misc.c:57,6'
          Dst:             fprintf
        - Src:             'sshbuf-misc.c:59,6'
          Dst:             fprintf
        - Src:             'sshbuf-misc.c:62,3'
          Dst:             fprintf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    __ctype_b_loc
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    17
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_xmss_verify
      functionSourceFile: '/src/openssh/ssh-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 279
      functionDepth:   0
      returnType:      'int '
      argCount:        8
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'int '
        - 'struct.sshkey_sig_details **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         56
      ICount:          333
      EdgeCount:       78
      CyclomaticComplexity: 24
      functionsReached:
        - freezero
        - sshbuf_free
        - sshbuf_from
        - sshbuf_get_cstring
        - sshbuf_get_string_direct
        - sshbuf_len
        - sshkey_type_plain
        - sshkey_xmss_params
        - sshkey_xmss_siglen
        - sshlog
        - strcmp
        - xmss_sign_open
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-xmss.c:288,18'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:289,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:293,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:289,47'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:290,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:293,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:290,27'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:291,25'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:293,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:291,38'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:292,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:293,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:292,18'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:292,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:293,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:288,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:293,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:294,30'
              BranchSideFuncs:
                - sshkey_xmss_siglen
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_params
                - xmss_sign_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-xmss.c:294,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:295,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:296,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_params
                - xmss_sign_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-xmss.c:296,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:297,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:299,23'
              BranchSideFuncs:
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_params
                - xmss_sign_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-xmss.c:299,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:300,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:301,30'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_params
                - xmss_sign_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-xmss.c:301,53'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:302,36'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:303,3'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-xmss.c:301,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:303,3'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:304,37'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_params
                - xmss_sign_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-xmss.c:304,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:305,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:308,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_params
                - xmss_sign_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-xmss.c:308,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:309,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:312,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_params
                - xmss_sign_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-xmss.c:312,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:313,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:316,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_params
                - xmss_sign_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-xmss.c:316,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:317,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:320,10'
              BranchSideFuncs:
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_params
                - xmss_sign_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-xmss.c:322,35'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:322,50'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:323,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-xmss.c:322,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:323,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:326,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_params
                - xmss_sign_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-xmss.c:328,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:330,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:332,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-xmss.c:332,15'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:332,18'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:333,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-xmss.c:332,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:333,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:338,4'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-xmss.c:340,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:341,12'
              BranchSideFuncs:
                - freezero
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-xmss.c:342,6'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-xmss.c:342,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:343,12'
              BranchSideFuncs:
                - freezero
                - sshbuf_free
                - free
            - BranchSide:      'ssh-xmss.c:344,14'
              BranchSideFuncs:
                - sshbuf_free
                - free
      Callsites:
        - Src:             'ssh-xmss.c:289,6'
          Dst:             sshkey_type_plain
        - Src:             'ssh-xmss.c:291,6'
          Dst:             sshkey_xmss_params
        - Src:             'ssh-xmss.c:294,11'
          Dst:             sshkey_xmss_siglen
        - Src:             'ssh-xmss.c:299,11'
          Dst:             sshbuf_from
        - Src:             'ssh-xmss.c:301,11'
          Dst:             sshbuf_get_cstring
        - Src:             'ssh-xmss.c:302,11'
          Dst:             sshbuf_get_string_direct
        - Src:             'ssh-xmss.c:304,6'
          Dst:             strcmp
        - Src:             'ssh-xmss.c:308,6'
          Dst:             sshbuf_len
        - Src:             'ssh-xmss.c:329,20'
          Dst:             sshkey_xmss_params
        - Src:             'ssh-xmss.c:328,13'
          Dst:             xmss_sign_open
        - Src:             'ssh-xmss.c:330,3'
          Dst:             sshlog
        - Src:             'ssh-xmss.c:341,3'
          Dst:             freezero
        - Src:             'ssh-xmss.c:343,3'
          Dst:             freezero
        - Src:             'ssh-xmss.c:344,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_xmss_sign
      functionSourceFile: '/src/openssh/ssh-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 203
      functionDepth:   0
      returnType:      'int '
      argCount:        9
      argTypes:
        - 'struct.sshkey *'
        - 'char **'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         67
      ICount:          377
      EdgeCount:       92
      CyclomaticComplexity: 27
      functionsReached:
        - explicit_bzero
        - freezero
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put_cstring
        - sshbuf_put_string
        - sshkey_type_plain
        - sshkey_xmss_bds_state
        - sshkey_xmss_get_state
        - sshkey_xmss_params
        - sshkey_xmss_siglen
        - sshkey_xmss_update_state
        - xmss_sign
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-xmss.c:210,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:211,4'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_params
                - sshkey_xmss_siglen
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - malloc
                - sshkey_xmss_get_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'ssh-xmss.c:212,6'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_params
                - sshkey_xmss_siglen
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - malloc
                - sshkey_xmss_get_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-xmss.c:212,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:213,4'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_params
                - sshkey_xmss_siglen
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - malloc
                - sshkey_xmss_get_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'ssh-xmss.c:215,6'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_params
                - sshkey_xmss_siglen
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - malloc
                - sshkey_xmss_get_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-xmss.c:215,18'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:216,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:219,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:216,47'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:217,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:219,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:217,27'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:218,25'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:219,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:215,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:219,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:220,30'
              BranchSideFuncs:
                - sshkey_xmss_siglen
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - malloc
                - sshkey_xmss_get_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-xmss.c:220,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:221,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:222,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - malloc
                - sshkey_xmss_get_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-xmss.c:222,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:223,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:224,17'
              BranchSideFuncs:
                - malloc
                - sshkey_xmss_get_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-xmss.c:225,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:226,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:227,33'
              BranchSideFuncs:
                - sshkey_xmss_get_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-xmss.c:227,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:228,3'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
            - BranchSide:      'ssh-xmss.c:229,23'
              BranchSideFuncs:
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-xmss.c:230,52'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:230,55'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
            - BranchSide:      'ssh-xmss.c:231,5'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
        - Branch String:   'ssh-xmss.c:229,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:231,5'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
            - BranchSide:      'ssh-xmss.c:235,11'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-xmss.c:235,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:236,5'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
            - BranchSide:      'ssh-xmss.c:239,30'
              BranchSideFuncs:
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-xmss.c:239,63'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:240,29'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
            - BranchSide:      'ssh-xmss.c:241,3'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
        - Branch String:   'ssh-xmss.c:239,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:241,3'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
            - BranchSide:      'ssh-xmss.c:242,19'
              BranchSideFuncs:
                - sshbuf_len
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-xmss.c:243,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:244,23'
              BranchSideFuncs:
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
            - BranchSide:      'ssh-xmss.c:250,6'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
        - Branch String:   'ssh-xmss.c:244,7'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:245,6'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
            - BranchSide:      'ssh-xmss.c:248,11'
              BranchSideFuncs:
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
        - Branch String:   'ssh-xmss.c:250,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:251,11'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
            - BranchSide:      'ssh-xmss.c:253,4'
              BranchSideFuncs:
                - sshkey_xmss_update_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - free
        - Branch String:   'ssh-xmss.c:255,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:257,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - freezero
                - explicit_bzero
                - free
            - BranchSide:      'ssh-xmss.c:267,14'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
        - Branch String:   'ssh-xmss.c:257,14'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:257,17'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
                - explicit_bzero
                - free
            - BranchSide:      'ssh-xmss.c:261,7'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
        - Branch String:   'ssh-xmss.c:257,30'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:257,34'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
                - explicit_bzero
                - free
            - BranchSide:      'ssh-xmss.c:261,7'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
        - Branch String:   'ssh-xmss.c:257,7'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:258,20'
              BranchSideFuncs:
                - explicit_bzero
                - free
                - sshbuf_free
                - freezero
            - BranchSide:      'ssh-xmss.c:261,7'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
        - Branch String:   'ssh-xmss.c:261,7'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:262,5'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
            - BranchSide:      'ssh-xmss.c:263,7'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
        - Branch String:   'ssh-xmss.c:263,7'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:264,5'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
            - BranchSide:      'ssh-xmss.c:265,7'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
        - Branch String:   'ssh-xmss.c:268,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:269,12'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-xmss.c:271,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-xmss.c:216,6'
          Dst:             sshkey_type_plain
        - Src:             'ssh-xmss.c:218,6'
          Dst:             sshkey_xmss_params
        - Src:             'ssh-xmss.c:220,11'
          Dst:             sshkey_xmss_siglen
        - Src:             'ssh-xmss.c:227,11'
          Dst:             sshkey_xmss_get_state
        - Src:             'ssh-xmss.c:229,37'
          Dst:             sshkey_xmss_bds_state
        - Src:             'ssh-xmss.c:230,21'
          Dst:             sshkey_xmss_params
        - Src:             'ssh-xmss.c:229,13'
          Dst:             xmss_sign
        - Src:             'ssh-xmss.c:235,11'
          Dst:             sshbuf_new
        - Src:             'ssh-xmss.c:239,11'
          Dst:             sshbuf_put_cstring
        - Src:             'ssh-xmss.c:240,11'
          Dst:             sshbuf_put_string
        - Src:             'ssh-xmss.c:242,8'
          Dst:             sshbuf_len
        - Src:             'ssh-xmss.c:248,17'
          Dst:             sshbuf_ptr
        - Src:             'ssh-xmss.c:255,13'
          Dst:             sshkey_xmss_update_state
        - Src:             'ssh-xmss.c:258,4'
          Dst:             explicit_bzero
        - Src:             'ssh-xmss.c:267,2'
          Dst:             sshbuf_free
        - Src:             'ssh-xmss.c:269,3'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_xmss_copy_public
      functionSourceFile: '/src/openssh/ssh-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 106
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         18
      ICount:          113
      EdgeCount:       24
      CyclomaticComplexity: 8
      functionsReached:
        - sshkey_xmss_enable_maxsign
        - sshkey_xmss_init
        - sshkey_xmss_pklen
        - sshkey_xmss_signatures_left
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-xmss.c:111,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:112,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:113,6'
              BranchSideFuncs:
                - sshkey_xmss_pklen
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_xmss_pklen
                - __sanitizer_cov_trace_cmp8
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_signatures_left
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_enable_maxsign
        - Branch String:   'ssh-xmss.c:113,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:114,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:116,33'
              BranchSideFuncs:
                - sshkey_xmss_pklen
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_xmss_pklen
                - __sanitizer_cov_trace_cmp8
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_signatures_left
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_enable_maxsign
        - Branch String:   'ssh-xmss.c:116,45'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:117,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:118,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:116,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:118,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:119,28'
              BranchSideFuncs:
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_signatures_left
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_enable_maxsign
        - Branch String:   'ssh-xmss.c:119,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:120,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:121,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - sshkey_xmss_signatures_left
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_enable_maxsign
        - Branch String:   'ssh-xmss.c:124,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:125,30'
              BranchSideFuncs:
                - sshkey_xmss_enable_maxsign
            - BranchSide:      'ssh-xmss.c:126,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-xmss.c:111,11'
          Dst:             sshkey_xmss_init
        - Src:             'ssh-xmss.c:116,15'
          Dst:             sshkey_xmss_pklen
        - Src:             'ssh-xmss.c:117,6'
          Dst:             sshkey_xmss_pklen
        - Src:             'ssh-xmss.c:123,9'
          Dst:             sshkey_xmss_signatures_left
        - Src:             'ssh-xmss.c:125,3'
          Dst:             sshkey_xmss_enable_maxsign
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_xmss_deserialize_private
      functionSourceFile: '/src/openssh/ssh-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 164
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         23
      ICount:          150
      EdgeCount:       31
      CyclomaticComplexity: 10
      functionsReached:
        - freezero
        - sshbuf_get_cstring
        - sshbuf_get_string
        - sshkey_is_cert
        - sshkey_xmss_deserialize_state_opt
        - sshkey_xmss_init
        - sshkey_xmss_pklen
        - sshkey_xmss_sklen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-xmss.c:171,57'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:172,29'
              BranchSideFuncs:
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:174,3'
              BranchSideFuncs:
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-xmss.c:172,56'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:173,29'
              BranchSideFuncs:
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:174,3'
              BranchSideFuncs:
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-xmss.c:171,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:174,3'
              BranchSideFuncs:
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:175,22'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_pklen
                - __sanitizer_cov_trace_cmp8
                - sshkey_xmss_sklen
                - __sanitizer_cov_trace_cmp8
                - sshkey_xmss_deserialize_state_opt
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-xmss.c:175,27'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:176,28'
              BranchSideFuncs:
                - sshkey_xmss_pklen
                - __sanitizer_cov_trace_cmp8
                - sshkey_xmss_sklen
                - __sanitizer_cov_trace_cmp8
                - sshkey_xmss_deserialize_state_opt
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:178,6'
              BranchSideFuncs:
                - sshkey_xmss_pklen
                - __sanitizer_cov_trace_cmp8
                - sshkey_xmss_sklen
                - __sanitizer_cov_trace_cmp8
                - sshkey_xmss_deserialize_state_opt
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-xmss.c:175,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:177,3'
              BranchSideFuncs:
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:178,6'
              BranchSideFuncs:
                - sshkey_xmss_pklen
                - __sanitizer_cov_trace_cmp8
                - sshkey_xmss_sklen
                - __sanitizer_cov_trace_cmp8
                - sshkey_xmss_deserialize_state_opt
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-xmss.c:178,38'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:179,6'
              BranchSideFuncs:
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:180,5'
              BranchSideFuncs:
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-xmss.c:178,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:180,5'
              BranchSideFuncs:
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:183,17'
              BranchSideFuncs:
                - sshkey_xmss_deserialize_state_opt
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-xmss.c:187,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:188,3'
              BranchSideFuncs:
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-xmss.c:190,4'
              BranchSideFuncs:
                - free
                - freezero
                - freezero
      Callsites:
        - Src:             'ssh-xmss.c:171,11'
          Dst:             sshbuf_get_cstring
        - Src:             'ssh-xmss.c:172,11'
          Dst:             sshbuf_get_string
        - Src:             'ssh-xmss.c:173,11'
          Dst:             sshbuf_get_string
        - Src:             'ssh-xmss.c:175,7'
          Dst:             sshkey_is_cert
        - Src:             'ssh-xmss.c:176,11'
          Dst:             sshkey_xmss_init
        - Src:             'ssh-xmss.c:178,15'
          Dst:             sshkey_xmss_pklen
        - Src:             'ssh-xmss.c:179,15'
          Dst:             sshkey_xmss_sklen
        - Src:             'ssh-xmss.c:187,11'
          Dst:             sshkey_xmss_deserialize_state_opt
        - Src:             'ssh-xmss.c:193,2'
          Dst:             freezero
        - Src:             'ssh-xmss.c:194,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_xmss_serialize_private
      functionSourceFile: '/src/openssh/ssh-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 87
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         15
      ICount:          97
      EdgeCount:       20
      CyclomaticComplexity: 7
      functionsReached:
        - sshbuf_put_cstring
        - sshbuf_put_string
        - sshkey_xmss_pklen
        - sshkey_xmss_serialize_state_opt
        - sshkey_xmss_sklen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-xmss.c:90,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:91,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:93,30'
              BranchSideFuncs:
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_pklen
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_sklen
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_state_opt
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-xmss.c:93,55'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:94,29'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:99,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:95,36'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:96,29'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:99,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:97,36'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:98,43'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:99,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:93,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:99,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:101,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-xmss.c:93,11'
          Dst:             sshbuf_put_cstring
        - Src:             'ssh-xmss.c:95,6'
          Dst:             sshkey_xmss_pklen
        - Src:             'ssh-xmss.c:94,11'
          Dst:             sshbuf_put_string
        - Src:             'ssh-xmss.c:97,6'
          Dst:             sshkey_xmss_sklen
        - Src:             'ssh-xmss.c:96,11'
          Dst:             sshbuf_put_string
        - Src:             'ssh-xmss.c:98,11'
          Dst:             sshkey_xmss_serialize_state_opt
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_xmss_deserialize_public
      functionSourceFile: '/src/openssh/ssh-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 132
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         20
      ICount:          121
      EdgeCount:       27
      CyclomaticComplexity: 9
      functionsReached:
        - freezero
        - sshbuf_get_cstring
        - sshbuf_get_string
        - sshkey_is_cert
        - sshkey_xmss_deserialize_pk_info
        - sshkey_xmss_init
        - sshkey_xmss_pklen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-xmss.c:138,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:139,3'
              BranchSideFuncs:
                - free
                - freezero
            - BranchSide:      'ssh-xmss.c:140,30'
              BranchSideFuncs:
                - sshkey_xmss_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_xmss_pklen
                - __sanitizer_cov_trace_cmp8
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_pk_info
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
        - Branch String:   'ssh-xmss.c:140,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:141,3'
              BranchSideFuncs:
                - free
                - freezero
            - BranchSide:      'ssh-xmss.c:142,31'
              BranchSideFuncs:
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_xmss_pklen
                - __sanitizer_cov_trace_cmp8
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_pk_info
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
        - Branch String:   'ssh-xmss.c:142,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:143,3'
              BranchSideFuncs:
                - free
                - freezero
            - BranchSide:      'ssh-xmss.c:144,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshkey_xmss_pklen
                - __sanitizer_cov_trace_cmp8
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_pk_info
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
        - Branch String:   'ssh-xmss.c:144,15'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:144,18'
              BranchSideFuncs:
                - free
                - freezero
            - BranchSide:      'ssh-xmss.c:145,7'
              BranchSideFuncs:
                - free
                - freezero
        - Branch String:   'ssh-xmss.c:144,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:145,7'
              BranchSideFuncs:
                - free
                - freezero
            - BranchSide:      'ssh-xmss.c:148,17'
              BranchSideFuncs:
                - sshkey_is_cert
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_pk_info
                - __sanitizer_cov_trace_const_cmp4
                - free
                - freezero
        - Branch String:   'ssh-xmss.c:150,27'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:151,45'
              BranchSideFuncs:
                - free
                - freezero
            - BranchSide:      'ssh-xmss.c:154,6'
              BranchSideFuncs:
                - free
                - freezero
        - Branch String:   'ssh-xmss.c:150,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:152,3'
              BranchSideFuncs:
                - free
                - freezero
            - BranchSide:      'ssh-xmss.c:154,6'
              BranchSideFuncs:
                - free
                - freezero
      Callsites:
        - Src:             'ssh-xmss.c:138,13'
          Dst:             sshbuf_get_cstring
        - Src:             'ssh-xmss.c:140,13'
          Dst:             sshkey_xmss_init
        - Src:             'ssh-xmss.c:142,13'
          Dst:             sshbuf_get_string
        - Src:             'ssh-xmss.c:144,25'
          Dst:             sshkey_xmss_pklen
        - Src:             'ssh-xmss.c:150,7'
          Dst:             sshkey_is_cert
        - Src:             'ssh-xmss.c:151,13'
          Dst:             sshkey_xmss_deserialize_pk_info
        - Src:             'ssh-xmss.c:157,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_xmss_serialize_public
      functionSourceFile: '/src/openssh/ssh-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 69
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         18
      ICount:          101
      EdgeCount:       24
      CyclomaticComplexity: 8
      functionsReached:
        - sshbuf_put_cstring
        - sshbuf_put_string
        - sshkey_xmss_pklen
        - sshkey_xmss_serialize_pk_info
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-xmss.c:72,29'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:72,32'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:74,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:72,53'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:73,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:74,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:72,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:74,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:75,30'
              BranchSideFuncs:
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_pklen
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_pk_info
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-xmss.c:75,55'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:76,29'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:79,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:77,36'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:78,41'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:79,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:75,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:79,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:81,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-xmss.c:73,6'
          Dst:             sshkey_xmss_pklen
        - Src:             'ssh-xmss.c:75,11'
          Dst:             sshbuf_put_cstring
        - Src:             'ssh-xmss.c:77,6'
          Dst:             sshkey_xmss_pklen
        - Src:             'ssh-xmss.c:76,11'
          Dst:             sshbuf_put_string
        - Src:             'ssh-xmss.c:78,11'
          Dst:             sshkey_xmss_serialize_pk_info
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_xmss_equal
      functionSourceFile: '/src/openssh/ssh-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 56
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         13
      ICount:          73
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - memcmp
        - sshkey_xmss_pklen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-xmss.c:57,25'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:57,28'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:58,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-xmss.c:57,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:58,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:59,24'
              BranchSideFuncs:
                - sshkey_xmss_pklen
                - sshkey_xmss_pklen
                - __sanitizer_cov_trace_cmp8
                - sshkey_xmss_pklen
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-xmss.c:59,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:60,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:61,13'
              BranchSideFuncs:
                - sshkey_xmss_pklen
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-xmss.c:61,6'
          Branch Sides:
            - BranchSide:      'ssh-xmss.c:62,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-xmss.c:63,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-xmss.c:59,6'
          Dst:             sshkey_xmss_pklen
        - Src:             'ssh-xmss.c:59,30'
          Dst:             sshkey_xmss_pklen
        - Src:             'ssh-xmss.c:61,37'
          Dst:             sshkey_xmss_pklen
        - Src:             'ssh-xmss.c:61,6'
          Dst:             memcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_xmss_cleanup
      functionSourceFile: '/src/openssh/ssh-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 42
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          48
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - freezero
        - sshkey_xmss_free_state
        - sshkey_xmss_pklen
        - sshkey_xmss_sklen
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh-xmss.c:43,23'
          Dst:             sshkey_xmss_pklen
        - Src:             'ssh-xmss.c:43,2'
          Dst:             freezero
        - Src:             'ssh-xmss.c:44,23'
          Dst:             sshkey_xmss_sklen
        - Src:             'ssh-xmss.c:44,2'
          Dst:             freezero
        - Src:             'ssh-xmss.c:45,2'
          Dst:             sshkey_xmss_free_state
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_enable_maxsign
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1101
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         10
      ICount:          76
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - sshkey_type_plain
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:1104,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1105,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:1106,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey-xmss.c:1106,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1107,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:1108,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey-xmss.c:1108,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1109,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:1110,18'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey-xmss.c:1104,6'
          Dst:             sshkey_type_plain
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_signatures_left
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1086
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         16
      ICount:          124
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - sshkey_type_plain
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:1090,45'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1090,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey-xmss.c:1096,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:1090,54'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1091,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey-xmss.c:1096,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:1090,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1092,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey-xmss.c:1096,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:1092,9'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1092,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey-xmss.c:1092,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey-xmss.c:1093,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1094,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:1095,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey-xmss.c:1090,6'
          Dst:             sshkey_type_plain
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_deserialize_state_opt
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 838
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         45
      ICount:          262
      EdgeCount:       59
      CyclomaticComplexity: 16
      functionsReached:
        - sshbuf_get_cstring
        - sshbuf_get_u32
        - sshbuf_get_u8
        - sshkey_xmss_deserialize_enc_key
        - sshkey_xmss_deserialize_state
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:844,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:845,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:847,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:848,2'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:850,5'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:853,26'
              BranchSideFuncs:
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey-xmss.c:873,42'
              BranchSideFuncs:
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey-xmss.c:877,44'
              BranchSideFuncs:
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey-xmss.c:882,5'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:853,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:854,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:855,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:855,18'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:856,42'
              BranchSideFuncs:
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey-xmss.c:858,26'
              BranchSideFuncs:
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:855,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:857,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:858,26'
              BranchSideFuncs:
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:858,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:859,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:860,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:860,21'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:861,31'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey-xmss.c:863,26'
              BranchSideFuncs:
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:860,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:862,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:863,26'
              BranchSideFuncs:
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:863,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:864,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:865,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:865,16'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:866,44'
              BranchSideFuncs:
                - sshkey_xmss_deserialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey-xmss.c:868,27'
              BranchSideFuncs:
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:865,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:867,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:868,27'
              BranchSideFuncs:
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:868,52'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:869,26'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:870,11'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:868,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:870,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:871,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:873,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:874,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:875,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:877,56'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:878,42'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:879,11'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:877,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:879,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:880,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey-xmss.c:844,11'
          Dst:             sshbuf_get_u8
        - Src:             'sshkey-xmss.c:853,12'
          Dst:             sshbuf_get_u8
        - Src:             'sshkey-xmss.c:856,12'
          Dst:             sshkey_xmss_deserialize_state
        - Src:             'sshkey-xmss.c:858,12'
          Dst:             sshbuf_get_u8
        - Src:             'sshkey-xmss.c:861,12'
          Dst:             sshbuf_get_cstring
        - Src:             'sshkey-xmss.c:863,12'
          Dst:             sshbuf_get_u8
        - Src:             'sshkey-xmss.c:866,12'
          Dst:             sshkey_xmss_deserialize_enc_key
        - Src:             'sshkey-xmss.c:868,12'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey-xmss.c:869,12'
          Dst:             sshbuf_get_u8
        - Src:             'sshkey-xmss.c:873,12'
          Dst:             sshkey_xmss_deserialize_state
        - Src:             'sshkey-xmss.c:877,12'
          Dst:             sshkey_xmss_deserialize_enc_key
        - Src:             'sshkey-xmss.c:878,12'
          Dst:             sshkey_xmss_deserialize_state
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_deserialize_state
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 773
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         69
      ICount:          537
      EdgeCount:       97
      CyclomaticComplexity: 30
      functionsReached:
        - calloc
        - sshbuf_get_cstring
        - sshbuf_get_string
        - sshbuf_get_u32
        - sshbuf_get_u8
        - strcmp
        - xmss_set_bds_state
      functionUses:    4
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:781,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:782,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:783,6'
              BranchSideFuncs:
                - calloc
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - xmss_set_bds_state
                - free
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey-xmss.c:783,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:784,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:785,32'
              BranchSideFuncs:
                - calloc
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - xmss_set_bds_state
                - free
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey-xmss.c:785,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:787,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:788,30'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - xmss_set_bds_state
                - free
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey-xmss.c:788,53'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:789,26'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:798,3'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:789,48'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:790,29'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:798,3'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:790,58'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:791,26'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:798,3'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:791,56'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:792,29'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:798,3'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:792,65'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:793,29'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:798,3'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:793,57'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:794,29'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:798,3'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:794,57'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:795,29'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:798,3'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:795,61'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:796,29'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:798,3'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:796,59'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:797,26'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:798,3'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:788,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:798,3'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:799,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - xmss_set_bds_state
                - free
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey-xmss.c:799,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:800,5'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:804,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - xmss_set_bds_state
                - free
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey-xmss.c:804,29'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:805,6'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:811,5'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:805,36'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:806,6'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:811,5'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:806,28'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:807,6'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:811,5'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:807,28'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:808,6'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:811,5'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:808,32'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:809,6'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:811,5'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:809,30'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:810,6'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:811,5'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:804,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:811,5'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:814,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - xmss_set_bds_state
                - free
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey-xmss.c:814,2'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:815,9'
              BranchSideFuncs:
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - xmss_set_bds_state
                - free
            - BranchSide:      'sshkey-xmss.c:825,2'
              BranchSideFuncs:
                - xmss_set_bds_state
                - free
        - Branch String:   'sshkey-xmss.c:816,44'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:817,27'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:821,4'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:817,51'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:818,27'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:821,4'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:818,53'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:819,26'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:821,4'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:819,51'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:820,27'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:821,4'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:816,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:821,4'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:822,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - xmss_set_bds_state
                - free
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:822,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:823,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - xmss_set_bds_state
                - free
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey-xmss.c:824,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - xmss_set_bds_state
                - free
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
      Callsites:
        - Src:             'sshkey-xmss.c:785,25'
          Dst:             calloc
        - Src:             'sshkey-xmss.c:788,11'
          Dst:             sshbuf_get_cstring
        - Src:             'sshkey-xmss.c:789,11'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey-xmss.c:790,11'
          Dst:             sshbuf_get_string
        - Src:             'sshkey-xmss.c:791,11'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey-xmss.c:792,11'
          Dst:             sshbuf_get_string
        - Src:             'sshkey-xmss.c:793,11'
          Dst:             sshbuf_get_string
        - Src:             'sshkey-xmss.c:794,11'
          Dst:             sshbuf_get_string
        - Src:             'sshkey-xmss.c:795,11'
          Dst:             sshbuf_get_string
        - Src:             'sshkey-xmss.c:796,11'
          Dst:             sshbuf_get_string
        - Src:             'sshkey-xmss.c:797,11'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey-xmss.c:799,6'
          Dst:             strcmp
        - Src:             'sshkey-xmss.c:816,12'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey-xmss.c:817,12'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey-xmss.c:818,12'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey-xmss.c:819,12'
          Dst:             sshbuf_get_u8
        - Src:             'sshkey-xmss.c:820,12'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey-xmss.c:826,2'
          Dst:             xmss_set_bds_state
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_deserialize_enc_key
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 310
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          75
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - sshbuf_get_cstring
        - sshbuf_get_string
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:315,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:316,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:317,30'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:317,69'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:318,29'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:319,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:317,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:319,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:320,25'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey-xmss.c:317,11'
          Dst:             sshbuf_get_cstring
        - Src:             'sshkey-xmss.c:318,11'
          Dst:             sshbuf_get_string
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_serialize_state_opt
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 717
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         42
      ICount:          311
      EdgeCount:       55
      CyclomaticComplexity: 15
      functionsReached:
        - sshbuf_put_cstring
        - sshbuf_put_u32
        - sshbuf_put_u8
        - sshkey_xmss_serialize_enc_key
        - sshkey_xmss_serialize_state
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:722,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:723,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:724,25'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_state
                - sshkey_xmss_serialize_state
        - Branch String:   'sshkey-xmss.c:724,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:725,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:726,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_state
                - sshkey_xmss_serialize_state
        - Branch String:   'sshkey-xmss.c:726,2'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:728,35'
              BranchSideFuncs:
                - sshkey_xmss_serialize_state
            - BranchSide:      'sshkey-xmss.c:731,42'
              BranchSideFuncs:
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_state
            - BranchSide:      'sshkey-xmss.c:737,16'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_state
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey-xmss.c:762,5'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:765,5'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:731,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:732,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:733,35'
              BranchSideFuncs:
                - sshkey_xmss_serialize_state
        - Branch String:   'sshkey-xmss.c:738,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:739,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:740,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_state
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:740,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:741,17'
              BranchSideFuncs:
                - sshkey_xmss_serialize_state
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey-xmss.c:745,19'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:742,8'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:743,12'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:744,3'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:746,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:747,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:748,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:748,21'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:749,31'
              BranchSideFuncs:
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey-xmss.c:751,14'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:748,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:750,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:751,14'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:752,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:753,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:754,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:754,16'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:755,42'
              BranchSideFuncs:
                - sshkey_xmss_serialize_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey-xmss.c:757,27'
              BranchSideFuncs:
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:754,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:756,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:757,27'
              BranchSideFuncs:
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:757,51'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:758,26'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:759,11'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:757,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:759,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:760,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey-xmss.c:724,11'
          Dst:             sshbuf_put_u8
        - Src:             'sshkey-xmss.c:728,7'
          Dst:             sshkey_xmss_serialize_state
        - Src:             'sshkey-xmss.c:731,12'
          Dst:             sshkey_xmss_serialize_enc_key
        - Src:             'sshkey-xmss.c:733,7'
          Dst:             sshkey_xmss_serialize_state
        - Src:             'sshkey-xmss.c:738,12'
          Dst:             sshbuf_put_u8
        - Src:             'sshkey-xmss.c:742,13'
          Dst:             sshkey_xmss_serialize_state
        - Src:             'sshkey-xmss.c:746,12'
          Dst:             sshbuf_put_u8
        - Src:             'sshkey-xmss.c:749,12'
          Dst:             sshbuf_put_cstring
        - Src:             'sshkey-xmss.c:752,12'
          Dst:             sshbuf_put_u8
        - Src:             'sshkey-xmss.c:755,12'
          Dst:             sshkey_xmss_serialize_enc_key
        - Src:             'sshkey-xmss.c:757,12'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey-xmss.c:758,12'
          Dst:             sshbuf_put_u8
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_serialize_state
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 679
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         44
      ICount:          362
      EdgeCount:       62
      CyclomaticComplexity: 20
      functionsReached:
        - sshbuf_put_cstring
        - sshbuf_put_string
        - sshbuf_put_u32
        - sshbuf_put_u8
      functionUses:    4
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:685,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:686,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:687,6'
              BranchSideFuncs:
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:687,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:688,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:689,23'
              BranchSideFuncs:
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:690,58'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:691,26'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:700,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:691,47'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:692,29'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:700,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:692,70'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:693,26'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:700,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:693,55'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:694,29'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:700,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:694,82'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:695,29'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:700,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:695,68'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:696,29'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:700,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:696,68'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:697,29'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:700,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:697,76'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:698,29'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:700,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:698,72'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:699,26'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:700,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:690,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:700,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:701,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:701,2'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:702,9'
              BranchSideFuncs:
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey-xmss.c:711,2'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:704,43'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:705,27'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:709,11'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:705,50'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:706,27'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:709,11'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:706,52'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:707,26'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:709,11'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:707,50'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:708,27'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:709,11'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:704,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:709,11'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:710,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'sshkey-xmss.c:690,11'
          Dst:             sshbuf_put_cstring
        - Src:             'sshkey-xmss.c:691,11'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey-xmss.c:692,11'
          Dst:             sshbuf_put_string
        - Src:             'sshkey-xmss.c:693,11'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey-xmss.c:694,11'
          Dst:             sshbuf_put_string
        - Src:             'sshkey-xmss.c:695,11'
          Dst:             sshbuf_put_string
        - Src:             'sshkey-xmss.c:696,11'
          Dst:             sshbuf_put_string
        - Src:             'sshkey-xmss.c:697,11'
          Dst:             sshbuf_put_string
        - Src:             'sshkey-xmss.c:698,11'
          Dst:             sshbuf_put_string
        - Src:             'sshkey-xmss.c:699,11'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey-xmss.c:704,12'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey-xmss.c:705,12'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey-xmss.c:706,12'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey-xmss.c:707,12'
          Dst:             sshbuf_put_u8
        - Src:             'sshkey-xmss.c:708,12'
          Dst:             sshbuf_put_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_serialize_enc_key
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 294
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         16
      ICount:          93
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - sshbuf_put_cstring
        - sshbuf_put_string
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:298,20'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:298,23'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:300,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:298,48'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:299,6'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:300,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:298,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:300,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:301,30'
              BranchSideFuncs:
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:301,62'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:302,29'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:304,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:301,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:304,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:305,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey-xmss.c:301,11'
          Dst:             sshbuf_put_cstring
        - Src:             'sshkey-xmss.c:302,11'
          Dst:             sshbuf_put_string
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_encrypt_state
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 891
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         56
      ICount:          406
      EdgeCount:       77
      CyclomaticComplexity: 23
      functionsReached:
        - cipher_authlen
        - cipher_blocksize
        - cipher_by_name
        - cipher_crypt
        - cipher_free
        - cipher_init
        - cipher_ivlen
        - cipher_keylen
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put
        - sshbuf_put_u32
        - sshbuf_put_u8
        - sshbuf_putb
        - sshbuf_reserve
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:900,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:901,4'
              BranchSideFuncs:
                - cipher_by_name
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
                - sshbuf_put_u8
            - BranchSide:      'sshkey-xmss.c:902,6'
              BranchSideFuncs:
                - cipher_by_name
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
                - sshbuf_put_u8
        - Branch String:   'sshkey-xmss.c:902,20'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:903,6'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:905,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:903,31'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:904,6'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:905,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:902,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:905,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:906,31'
              BranchSideFuncs:
                - cipher_by_name
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
                - sshbuf_put_u8
        - Branch String:   'sshkey-xmss.c:906,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:907,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:910,31'
              BranchSideFuncs:
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
                - sshbuf_put_u8
        - Branch String:   'sshkey-xmss.c:914,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:915,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:918,8'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
                - sshbuf_put_u8
        - Branch String:   'sshkey-xmss.c:919,41'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:920,17'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:923,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
        - Branch String:   'sshkey-xmss.c:920,39'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:921,16'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:923,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
        - Branch String:   'sshkey-xmss.c:921,38'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:922,19'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:923,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
        - Branch String:   'sshkey-xmss.c:919,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:923,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:928,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
                - sshbuf_put_u8
        - Branch String:   'sshkey-xmss.c:931,69'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:932,26'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:933,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
        - Branch String:   'sshkey-xmss.c:931,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:933,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:936,23'
              BranchSideFuncs:
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
                - sshbuf_put_u8
        - Branch String:   'sshkey-xmss.c:936,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:937,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:938,4'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
                - sshbuf_put_u8
        - Branch String:   'sshkey-xmss.c:939,2'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:940,26'
              BranchSideFuncs:
                - sshbuf_put_u8
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:943,29'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
        - Branch String:   'sshkey-xmss.c:940,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:939,2'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:941,4'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
        - Branch String:   'sshkey-xmss.c:946,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:947,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:948,22'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
        - Branch String:   'sshkey-xmss.c:951,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:952,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:956,26'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
        - Branch String:   'sshkey-xmss.c:957,51'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:958,39'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:962,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
        - Branch String:   'sshkey-xmss.c:959,26'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:960,24'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:962,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
        - Branch String:   'sshkey-xmss.c:956,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:962,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:965,4'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
        - Branch String:   'sshkey-xmss.c:967,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:968,11'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
            - BranchSide:      'sshkey-xmss.c:971,14'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - cipher_free
                - free
      Callsites:
        - Src:             'sshkey-xmss.c:906,16'
          Dst:             cipher_by_name
        - Src:             'sshkey-xmss.c:910,14'
          Dst:             cipher_blocksize
        - Src:             'sshkey-xmss.c:911,11'
          Dst:             cipher_keylen
        - Src:             'sshkey-xmss.c:912,10'
          Dst:             cipher_ivlen
        - Src:             'sshkey-xmss.c:913,12'
          Dst:             cipher_authlen
        - Src:             'sshkey-xmss.c:919,19'
          Dst:             sshbuf_new
        - Src:             'sshkey-xmss.c:920,17'
          Dst:             sshbuf_new
        - Src:             'sshkey-xmss.c:921,16'
          Dst:             sshbuf_new
        - Src:             'sshkey-xmss.c:931,11'
          Dst:             sshbuf_put
        - Src:             'sshkey-xmss.c:932,11'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey-xmss.c:936,11'
          Dst:             sshbuf_putb
        - Src:             'sshkey-xmss.c:939,9'
          Dst:             sshbuf_len
        - Src:             'sshkey-xmss.c:940,12'
          Dst:             sshbuf_put_u8
        - Src:             'sshkey-xmss.c:943,18'
          Dst:             sshbuf_len
        - Src:             'sshkey-xmss.c:946,11'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey-xmss.c:948,11'
          Dst:             sshbuf_len
        - Src:             'sshkey-xmss.c:951,11'
          Dst:             sshbuf_putb
        - Src:             'sshkey-xmss.c:956,11'
          Dst:             sshbuf_reserve
        - Src:             'sshkey-xmss.c:958,11'
          Dst:             cipher_init
        - Src:             'sshkey-xmss.c:960,46'
          Dst:             sshbuf_ptr
        - Src:             'sshkey-xmss.c:960,11'
          Dst:             cipher_crypt
        - Src:             'sshkey-xmss.c:971,2'
          Dst:             sshbuf_free
        - Src:             'sshkey-xmss.c:972,2'
          Dst:             sshbuf_free
        - Src:             'sshkey-xmss.c:973,2'
          Dst:             sshbuf_free
        - Src:             'sshkey-xmss.c:974,2'
          Dst:             cipher_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_update_state
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 569
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         107
      ICount:          573
      EdgeCount:       139
      CyclomaticComplexity: 34
      functionsReached:
        - asprintf
        - atomicio
        - close
        - fsync
        - link
        - open
        - rename
        - sshbuf_free
        - sshbuf_len
        - sshbuf_mutable_ptr
        - sshbuf_new
        - sshkey_xmss_encrypt_state
        - sshkey_xmss_serialize_state
        - sshlog
        - unlink
        - write
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:579,20'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:579,24'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:580,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:579,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:580,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - unlink
                - sshbuf_new
                - sshkey_xmss_serialize_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_encrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - fsync
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'sshkey-xmss.c:581,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - unlink
                - sshbuf_new
                - sshkey_xmss_serialize_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_encrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - fsync
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:581,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:583,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:586,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - unlink
                - sshbuf_new
                - sshkey_xmss_serialize_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_encrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - fsync
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:587,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:589,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:591,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - unlink
                - sshbuf_new
                - sshkey_xmss_serialize_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_encrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - fsync
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:592,3'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:592,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:594,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
        - Branch String:   'sshkey-xmss.c:597,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:598,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:599,39'
              BranchSideFuncs:
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - unlink
                - sshbuf_new
                - sshkey_xmss_serialize_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_encrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - fsync
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:599,55'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:600,41'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:602,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
        - Branch String:   'sshkey-xmss.c:600,57'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:601,41'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:602,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
        - Branch String:   'sshkey-xmss.c:599,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:602,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:605,9'
              BranchSideFuncs:
                - unlink
                - sshbuf_new
                - sshkey_xmss_serialize_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_encrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - fsync
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:606,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:607,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:610,41'
              BranchSideFuncs:
                - sshkey_xmss_serialize_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_encrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - fsync
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:610,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:611,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:614,39'
              BranchSideFuncs:
                - sshkey_xmss_encrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - fsync
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:611,3'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:611,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:612,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
        - Branch String:   'sshkey-xmss.c:614,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:615,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:618,17'
              BranchSideFuncs:
                - open
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - fsync
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:615,3'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:615,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:616,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
        - Branch String:   'sshkey-xmss.c:618,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:619,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:623,2'
              BranchSideFuncs:
                - sshbuf_len
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - fsync
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
        - Branch String:   'sshkey-xmss.c:620,3'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:620,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:621,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
        - Branch String:   'sshkey-xmss.c:624,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:625,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:630,23'
              BranchSideFuncs:
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - fsync
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
        - Branch String:   'sshkey-xmss.c:626,3'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:626,3'
              BranchSideFuncs:
                - sshlog
                - close
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:627,9'
              BranchSideFuncs:
                - close
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
        - Branch String:   'sshkey-xmss.c:630,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:632,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:637,12'
              BranchSideFuncs:
                - fsync
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
                - sshlog
        - Branch String:   'sshkey-xmss.c:633,3'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:633,3'
              BranchSideFuncs:
                - sshlog
                - close
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:634,9'
              BranchSideFuncs:
                - close
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
        - Branch String:   'sshkey-xmss.c:637,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:638,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:643,12'
              BranchSideFuncs:
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:639,3'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:639,3'
              BranchSideFuncs:
                - sshlog
                - close
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:640,9'
              BranchSideFuncs:
                - close
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
        - Branch String:   'sshkey-xmss.c:643,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:644,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:648,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:645,3'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:645,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:646,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
        - Branch String:   'sshkey-xmss.c:648,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:649,10'
              BranchSideFuncs:
                - unlink
                - link
                - __sanitizer_cov_trace_const_cmp4
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'sshkey-xmss.c:656,13'
              BranchSideFuncs:
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:650,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:651,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:655,2'
              BranchSideFuncs:
                - rename
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:652,4'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:652,4'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:653,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
        - Branch String:   'sshkey-xmss.c:656,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:657,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:661,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
        - Branch String:   'sshkey-xmss.c:658,3'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:658,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
            - BranchSide:      'sshkey-xmss.c:659,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
                - close
        - Branch String:   'sshkey-xmss.c:663,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:664,9'
              BranchSideFuncs:
                - close
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
            - BranchSide:      'sshkey-xmss.c:667,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
                - unlink
        - Branch String:   'sshkey-xmss.c:667,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:668,10'
              BranchSideFuncs:
                - unlink
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey-xmss.c:669,7'
              BranchSideFuncs:
                - free
                - free
                - free
                - sshbuf_free
                - sshbuf_free
      Callsites:
        - Src:             'sshkey-xmss.c:592,3'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:599,6'
          Dst:             asprintf
        - Src:             'sshkey-xmss.c:600,6'
          Dst:             asprintf
        - Src:             'sshkey-xmss.c:601,6'
          Dst:             asprintf
        - Src:             'sshkey-xmss.c:605,2'
          Dst:             unlink
        - Src:             'sshkey-xmss.c:606,11'
          Dst:             sshbuf_new
        - Src:             'sshkey-xmss.c:610,13'
          Dst:             sshkey_xmss_serialize_state
        - Src:             'sshkey-xmss.c:611,3'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:614,13'
          Dst:             sshkey_xmss_encrypt_state
        - Src:             'sshkey-xmss.c:615,3'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:618,12'
          Dst:             open
        - Src:             'sshkey-xmss.c:620,3'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:623,2'
          Dst:             sshbuf_len
        - Src:             'sshkey-xmss.c:624,6'
          Dst:             atomicio
        - Src:             'sshkey-xmss.c:624,6'
          Dst:             write
        - Src:             'sshkey-xmss.c:626,3'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:627,3'
          Dst:             close
        - Src:             'sshkey-xmss.c:630,27'
          Dst:             sshbuf_mutable_ptr
        - Src:             'sshkey-xmss.c:630,52'
          Dst:             sshbuf_len
        - Src:             'sshkey-xmss.c:630,6'
          Dst:             atomicio
        - Src:             'sshkey-xmss.c:630,6'
          Dst:             write
        - Src:             'sshkey-xmss.c:631,6'
          Dst:             sshbuf_len
        - Src:             'sshkey-xmss.c:633,3'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:634,3'
          Dst:             close
        - Src:             'sshkey-xmss.c:637,6'
          Dst:             fsync
        - Src:             'sshkey-xmss.c:639,3'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:640,3'
          Dst:             close
        - Src:             'sshkey-xmss.c:643,6'
          Dst:             close
        - Src:             'sshkey-xmss.c:645,3'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:649,3'
          Dst:             unlink
        - Src:             'sshkey-xmss.c:650,7'
          Dst:             link
        - Src:             'sshkey-xmss.c:652,4'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:656,6'
          Dst:             rename
        - Src:             'sshkey-xmss.c:658,3'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:664,3'
          Dst:             close
        - Src:             'sshkey-xmss.c:668,3'
          Dst:             unlink
        - Src:             'sshkey-xmss.c:672,2'
          Dst:             sshbuf_free
        - Src:             'sshkey-xmss.c:673,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    asprintf
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char **'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    unlink
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    open
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    9
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    write
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'int '
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    close
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    26
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fsync
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    link
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    rename
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_forward_state
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 536
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         23
      ICount:          179
      EdgeCount:       31
      CyclomaticComplexity: 10
      functionsReached:
        - sshkey_xmss_bds_state
        - sshkey_xmss_params
        - sshkey_xmss_siglen
        - xmss_sign
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:544,20'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:544,24'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:545,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:544,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:545,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshkey_xmss_siglen
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
            - BranchSide:      'sshkey-xmss.c:546,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshkey_xmss_siglen
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
        - Branch String:   'sshkey-xmss.c:546,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:547,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:548,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshkey_xmss_siglen
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
        - Branch String:   'sshkey-xmss.c:548,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:549,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:550,30'
              BranchSideFuncs:
                - sshkey_xmss_siglen
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
        - Branch String:   'sshkey-xmss.c:550,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:551,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:552,20'
              BranchSideFuncs:
                - malloc
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
        - Branch String:   'sshkey-xmss.c:552,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:553,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:554,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
        - Branch String:   'sshkey-xmss.c:554,2'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:555,16'
              BranchSideFuncs:
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_sign
                - __sanitizer_cov_trace_const_cmp4
                - free
            - BranchSide:      'sshkey-xmss.c:563,7'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:557,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:554,2'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:559,6'
              BranchSideFuncs:
                - free
      Callsites:
        - Src:             'sshkey-xmss.c:550,11'
          Dst:             sshkey_xmss_siglen
        - Src:             'sshkey-xmss.c:557,36'
          Dst:             sshkey_xmss_bds_state
        - Src:             'sshkey-xmss.c:558,30'
          Dst:             sshkey_xmss_params
        - Src:             'sshkey-xmss.c:557,14'
          Dst:             xmss_sign
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_siglen
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 234
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          61
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:237,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:238,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:239,6'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:239,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:240,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:241,14'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_bds_state
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 224
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         4
      ICount:          32
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:227,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:228,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:229,10'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_params
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 214
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         4
      ICount:          32
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    6
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:217,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:218,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:219,10'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_get_state
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 446
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         75
      ICount:          458
      EdgeCount:       99
      CyclomaticComplexity: 26
      functionsReached:
        - __errno_location
        - asprintf
        - close
        - flock
        - open
        - sshkey_xmss_forward_state
        - sshkey_xmss_get_state_from_file
        - sshlog
        - usleep
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:454,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:455,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
            - BranchSide:      'sshkey-xmss.c:461,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - flock
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_forward_state
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - usleep
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'sshkey-xmss.c:461,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:463,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'sshkey-xmss.c:470,18'
              BranchSideFuncs:
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - flock
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_forward_state
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - usleep
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:464,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:465,4'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:468,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:470,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:471,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
            - BranchSide:      'sshkey-xmss.c:472,37'
              BranchSideFuncs:
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - flock
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_forward_state
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - usleep
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:472,53'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:473,39'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
            - BranchSide:      'sshkey-xmss.c:475,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
        - Branch String:   'sshkey-xmss.c:473,55'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:474,41'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
            - BranchSide:      'sshkey-xmss.c:475,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
        - Branch String:   'sshkey-xmss.c:472,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:475,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
            - BranchSide:      'sshkey-xmss.c:478,21'
              BranchSideFuncs:
                - open
                - __sanitizer_cov_trace_const_cmp4
                - flock
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_forward_state
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - usleep
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:478,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:479,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:483,2'
              BranchSideFuncs:
                - flock
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_forward_state
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - usleep
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:480,3'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:480,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
            - BranchSide:      'sshkey-xmss.c:481,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
        - Branch String:   'sshkey-xmss.c:483,2'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:484,7'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - usleep
                - flock
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_forward_state
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'sshkey-xmss.c:497,60'
              BranchSideFuncs:
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_forward_state
        - Branch String:   'sshkey-xmss.c:484,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:485,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:489,7'
              BranchSideFuncs:
                - usleep
                - flock
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_forward_state
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:486,4'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:486,4'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
            - BranchSide:      'sshkey-xmss.c:487,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
        - Branch String:   'sshkey-xmss.c:489,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:490,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:494,19'
              BranchSideFuncs:
                - usleep
                - flock
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_forward_state
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:491,4'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:491,4'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
            - BranchSide:      'sshkey-xmss.c:492,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
        - Branch String:   'sshkey-xmss.c:497,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:499,61'
              BranchSideFuncs:
                - sshkey_xmss_get_state_from_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_forward_state
            - BranchSide:      'sshkey-xmss.c:507,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:499,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:501,4'
              BranchSideFuncs:
                - sshkey_xmss_forward_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey-xmss.c:506,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:507,18'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:507,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'sshkey-xmss.c:512,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:507,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:509,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'sshkey-xmss.c:512,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:509,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:510,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
            - BranchSide:      'sshkey-xmss.c:511,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
        - Branch String:   'sshkey-xmss.c:511,3'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:511,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'sshkey-xmss.c:512,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:512,13'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:0,0'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
            - BranchSide:      'sshkey-xmss.c:513,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
        - Branch String:   'sshkey-xmss.c:516,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:517,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:520,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
        - Branch String:   'sshkey-xmss.c:517,3'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:517,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
            - BranchSide:      'sshkey-xmss.c:518,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - close
        - Branch String:   'sshkey-xmss.c:526,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:527,9'
              BranchSideFuncs:
                - close
                - free
                - free
                - free
            - BranchSide:      'sshkey-xmss.c:528,7'
              BranchSideFuncs:
                - free
                - free
                - free
      Callsites:
        - Src:             'sshkey-xmss.c:472,6'
          Dst:             asprintf
        - Src:             'sshkey-xmss.c:473,6'
          Dst:             asprintf
        - Src:             'sshkey-xmss.c:474,6'
          Dst:             asprintf
        - Src:             'sshkey-xmss.c:478,16'
          Dst:             open
        - Src:             'sshkey-xmss.c:480,3'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:483,9'
          Dst:             flock
        - Src:             'sshkey-xmss.c:484,7'
          Dst:             __errno_location
        - Src:             'sshkey-xmss.c:486,4'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:491,4'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:494,3'
          Dst:             usleep
        - Src:             'sshkey-xmss.c:497,11'
          Dst:             sshkey_xmss_get_state_from_file
        - Src:             'sshkey-xmss.c:499,12'
          Dst:             sshkey_xmss_get_state_from_file
        - Src:             'sshkey-xmss.c:502,8'
          Dst:             sshkey_xmss_forward_state
        - Src:             'sshkey-xmss.c:511,3'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:517,3'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:527,3'
          Dst:             close
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    flock
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    usleep
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_get_state_from_file
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 398
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         32
      ICount:          216
      EdgeCount:       42
      CyclomaticComplexity: 12
      functionsReached:
        - atomicio
        - calloc
        - close
        - open
        - read
        - sshbuf_free
        - sshbuf_from
        - sshkey_xmss_decrypt_state
        - sshkey_xmss_deserialize_state
        - sshkey_xmss_free_bds
        - sshlog
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:405,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:405,41'
              BranchSideFuncs:
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - calloc
                - atomicio
                - __sanitizer_cov_trace_cmp8
                - sshbuf_from
                - sshkey_xmss_free_bds
                - sshkey_xmss_decrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'sshkey-xmss.c:406,4'
              BranchSideFuncs:
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - calloc
                - atomicio
                - __sanitizer_cov_trace_cmp8
                - sshbuf_from
                - sshkey_xmss_free_bds
                - sshkey_xmss_decrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:407,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:408,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:411,9'
              BranchSideFuncs:
                - calloc
                - atomicio
                - __sanitizer_cov_trace_cmp8
                - sshbuf_from
                - sshkey_xmss_free_bds
                - sshkey_xmss_decrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:408,4'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:408,4'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
            - BranchSide:      'sshkey-xmss.c:409,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
        - Branch String:   'sshkey-xmss.c:412,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:413,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
            - BranchSide:      'sshkey-xmss.c:416,22'
              BranchSideFuncs:
                - atomicio
                - __sanitizer_cov_trace_cmp8
                - sshbuf_from
                - sshkey_xmss_free_bds
                - sshkey_xmss_decrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'sshkey-xmss.c:416,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:417,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
                - sshlog
            - BranchSide:      'sshkey-xmss.c:420,26'
              BranchSideFuncs:
                - sshbuf_from
                - sshkey_xmss_free_bds
                - sshkey_xmss_decrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
        - Branch String:   'sshkey-xmss.c:417,4'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:417,4'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
            - BranchSide:      'sshkey-xmss.c:418,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
        - Branch String:   'sshkey-xmss.c:420,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:421,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
            - BranchSide:      'sshkey-xmss.c:424,24'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
                - sshkey_xmss_decrypt_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
        - Branch String:   'sshkey-xmss.c:425,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:426,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
            - BranchSide:      'sshkey-xmss.c:429,42'
              BranchSideFuncs:
                - sshkey_xmss_deserialize_state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
        - Branch String:   'sshkey-xmss.c:429,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:430,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
            - BranchSide:      'sshkey-xmss.c:433,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshbuf_free
                - sshbuf_free
                - close
        - Branch String:   'sshkey-xmss.c:436,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:436,6'
              BranchSideFuncs:
                - close
                - free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'sshkey-xmss.c:437,9'
              BranchSideFuncs:
                - close
                - free
                - sshbuf_free
                - sshbuf_free
      Callsites:
        - Src:             'sshkey-xmss.c:405,12'
          Dst:             open
        - Src:             'sshkey-xmss.c:407,7'
          Dst:             atomicio
        - Src:             'sshkey-xmss.c:407,7'
          Dst:             read
        - Src:             'sshkey-xmss.c:408,4'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:412,15'
          Dst:             calloc
        - Src:             'sshkey-xmss.c:416,7'
          Dst:             atomicio
        - Src:             'sshkey-xmss.c:416,7'
          Dst:             read
        - Src:             'sshkey-xmss.c:417,4'
          Dst:             sshlog
        - Src:             'sshkey-xmss.c:420,14'
          Dst:             sshbuf_from
        - Src:             'sshkey-xmss.c:424,3'
          Dst:             sshkey_xmss_free_bds
        - Src:             'sshkey-xmss.c:425,12'
          Dst:             sshkey_xmss_decrypt_state
        - Src:             'sshkey-xmss.c:429,12'
          Dst:             sshkey_xmss_deserialize_state
        - Src:             'sshkey-xmss.c:437,3'
          Dst:             close
        - Src:             'sshkey-xmss.c:439,2'
          Dst:             sshbuf_free
        - Src:             'sshkey-xmss.c:440,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_free_bds
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 191
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          82
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:194,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:195,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:196,7'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
                - free
                - free
                - free
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_decrypt_state
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 982
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         66
      ICount:          435
      EdgeCount:       91
      CyclomaticComplexity: 27
      functionsReached:
        - cipher_authlen
        - cipher_blocksize
        - cipher_by_name
        - cipher_crypt
        - cipher_free
        - cipher_init
        - cipher_ivlen
        - cipher_keylen
        - memcmp
        - sshbuf_consume
        - sshbuf_free
        - sshbuf_fromb
        - sshbuf_get_u32
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_reserve
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:992,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:993,4'
              BranchSideFuncs:
                - cipher_by_name
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - __sanitizer_cov_trace_cmp8
                - sshbuf_fromb
                - sshbuf_new
                - malloc
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:994,6'
              BranchSideFuncs:
                - cipher_by_name
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - __sanitizer_cov_trace_cmp8
                - sshbuf_fromb
                - sshbuf_new
                - malloc
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:994,20'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:995,6'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:997,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:995,31'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:996,6'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:997,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:994,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:997,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:998,31'
              BranchSideFuncs:
                - cipher_by_name
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - __sanitizer_cov_trace_cmp8
                - sshbuf_fromb
                - sshbuf_new
                - malloc
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:998,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:999,5'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1002,31'
              BranchSideFuncs:
                - cipher_blocksize
                - cipher_keylen
                - cipher_ivlen
                - cipher_authlen
                - __sanitizer_cov_trace_cmp8
                - sshbuf_fromb
                - sshbuf_new
                - malloc
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1006,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1007,5'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1010,8'
              BranchSideFuncs:
                - sshbuf_fromb
                - sshbuf_new
                - malloc
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1012,45'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1013,19'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1015,5'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1013,41'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1014,19'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1015,5'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1012,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1015,5'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1020,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1020,47'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1021,24'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1022,5'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1020,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1022,5'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1026,26'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1026,61'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1027,26'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1029,3'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1027,49'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1028,26'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1029,3'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1026,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1029,3'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1032,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1032,32'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1032,36'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1033,5'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1032,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1033,5'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1037,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1037,36'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1038,17'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1039,5'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1037,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1039,5'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1043,22'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1050,72'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1051,39'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1055,3'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1052,26'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1053,24'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1055,3'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1050,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1055,3'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1058,26'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1058,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1059,3'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1060,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1060,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1061,5'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1066,26'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1066,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1067,3'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1071,4'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'sshkey-xmss.c:1072,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:1072,14'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'sshkey-xmss.c:1073,11'
              BranchSideFuncs:
                - cipher_free
                - sshbuf_free
                - sshbuf_free
                - free
      Callsites:
        - Src:             'sshkey-xmss.c:998,16'
          Dst:             cipher_by_name
        - Src:             'sshkey-xmss.c:1002,14'
          Dst:             cipher_blocksize
        - Src:             'sshkey-xmss.c:1003,11'
          Dst:             cipher_keylen
        - Src:             'sshkey-xmss.c:1004,10'
          Dst:             cipher_ivlen
        - Src:             'sshkey-xmss.c:1005,12'
          Dst:             cipher_authlen
        - Src:             'sshkey-xmss.c:1012,14'
          Dst:             sshbuf_fromb
        - Src:             'sshkey-xmss.c:1013,19'
          Dst:             sshbuf_new
        - Src:             'sshkey-xmss.c:1020,6'
          Dst:             sshbuf_len
        - Src:             'sshkey-xmss.c:1021,13'
          Dst:             sshbuf_ptr
        - Src:             'sshkey-xmss.c:1021,6'
          Dst:             memcmp
        - Src:             'sshkey-xmss.c:1026,11'
          Dst:             sshbuf_consume
        - Src:             'sshkey-xmss.c:1027,11'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey-xmss.c:1028,11'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey-xmss.c:1037,6'
          Dst:             sshbuf_len
        - Src:             'sshkey-xmss.c:1038,6'
          Dst:             sshbuf_len
        - Src:             'sshkey-xmss.c:1043,11'
          Dst:             sshbuf_len
        - Src:             'sshkey-xmss.c:1043,30'
          Dst:             sshbuf_len
        - Src:             'sshkey-xmss.c:1050,11'
          Dst:             sshbuf_reserve
        - Src:             'sshkey-xmss.c:1051,11'
          Dst:             cipher_init
        - Src:             'sshkey-xmss.c:1053,46'
          Dst:             sshbuf_ptr
        - Src:             'sshkey-xmss.c:1053,11'
          Dst:             cipher_crypt
        - Src:             'sshkey-xmss.c:1058,11'
          Dst:             sshbuf_consume
        - Src:             'sshkey-xmss.c:1060,6'
          Dst:             sshbuf_len
        - Src:             'sshkey-xmss.c:1066,11'
          Dst:             sshbuf_consume
        - Src:             'sshkey-xmss.c:1077,2'
          Dst:             cipher_free
        - Src:             'sshkey-xmss.c:1078,2'
          Dst:             sshbuf_free
        - Src:             'sshkey-xmss.c:1079,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_generate_private_key
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 369
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         25
      ICount:          135
      EdgeCount:       33
      CyclomaticComplexity: 10
      functionsReached:
        - sshkey_xmss_bds_state
        - sshkey_xmss_init
        - sshkey_xmss_init_bds_state
        - sshkey_xmss_init_enc_key
        - sshkey_xmss_params
        - sshkey_xmss_pklen
        - sshkey_xmss_sklen
        - xmss_keypair
      functionUses:    0
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:373,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:374,8'
              BranchSideFuncs:
                - sshkey_xmss_init
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init_bds_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_pklen
                - malloc
                - sshkey_xmss_sklen
                - malloc
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_keypair
            - BranchSide:      'sshkey-xmss.c:375,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init_bds_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_pklen
                - malloc
                - sshkey_xmss_sklen
                - malloc
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_keypair
        - Branch String:   'sshkey-xmss.c:375,13'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:376,8'
              BranchSideFuncs:
                - sshkey_xmss_init
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init_bds_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_pklen
                - malloc
                - sshkey_xmss_sklen
                - malloc
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_keypair
            - BranchSide:      'sshkey-xmss.c:377,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init_bds_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_pklen
                - malloc
                - sshkey_xmss_sklen
                - malloc
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_keypair
        - Branch String:   'sshkey-xmss.c:377,13'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:378,8'
              BranchSideFuncs:
                - sshkey_xmss_init
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init_bds_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_pklen
                - malloc
                - sshkey_xmss_sklen
                - malloc
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_keypair
            - BranchSide:      'sshkey-xmss.c:380,8'
              BranchSideFuncs:
                - sshkey_xmss_init
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init_bds_state
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_init_enc_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_xmss_pklen
                - malloc
                - sshkey_xmss_sklen
                - malloc
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_keypair
        - Branch String:   'sshkey-xmss.c:382,43'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:383,38'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:385,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:383,47'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:384,36'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:385,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:382,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:385,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:386,45'
              BranchSideFuncs:
                - sshkey_xmss_pklen
                - malloc
                - sshkey_xmss_sklen
                - malloc
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_keypair
        - Branch String:   'sshkey-xmss.c:386,58'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:387,45'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:388,3'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:386,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:388,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:390,15'
              BranchSideFuncs:
                - sshkey_xmss_bds_state
                - sshkey_xmss_params
                - xmss_keypair
      Callsites:
        - Src:             'sshkey-xmss.c:382,11'
          Dst:             sshkey_xmss_init
        - Src:             'sshkey-xmss.c:383,11'
          Dst:             sshkey_xmss_init_bds_state
        - Src:             'sshkey-xmss.c:384,11'
          Dst:             sshkey_xmss_init_enc_key
        - Src:             'sshkey-xmss.c:386,27'
          Dst:             sshkey_xmss_pklen
        - Src:             'sshkey-xmss.c:387,27'
          Dst:             sshkey_xmss_sklen
        - Src:             'sshkey-xmss.c:390,39'
          Dst:             sshkey_xmss_bds_state
        - Src:             'sshkey-xmss.c:391,6'
          Dst:             sshkey_xmss_params
        - Src:             'sshkey-xmss.c:390,2'
          Dst:             xmss_keypair
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_init
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 96
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         23
      ICount:          171
      EdgeCount:       31
      CyclomaticComplexity: 10
      functionsReached:
        - calloc
        - strcmp
        - strdup
        - xmss_set_params
      functionUses:    4
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:99,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:100,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:101,6'
              BranchSideFuncs:
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - free
                - strdup
                - xmss_set_params
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
        - Branch String:   'sshkey-xmss.c:101,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:102,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:103,10'
              BranchSideFuncs:
                - calloc
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - free
                - strdup
                - xmss_set_params
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
        - Branch String:   'sshkey-xmss.c:104,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:105,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:106,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - free
                - strdup
                - xmss_set_params
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
        - Branch String:   'sshkey-xmss.c:106,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:107,3'
              BranchSideFuncs:
                - strdup
                - xmss_set_params
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
            - BranchSide:      'sshkey-xmss.c:110,20'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - free
                - strdup
                - xmss_set_params
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
        - Branch String:   'sshkey-xmss.c:110,13'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:111,3'
              BranchSideFuncs:
                - strdup
                - xmss_set_params
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
            - BranchSide:      'sshkey-xmss.c:114,20'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - free
                - strdup
                - xmss_set_params
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
        - Branch String:   'sshkey-xmss.c:114,13'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:115,3'
              BranchSideFuncs:
                - strdup
                - xmss_set_params
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
            - BranchSide:      'sshkey-xmss.c:119,8'
              BranchSideFuncs:
                - free
        - Branch String:   'sshkey-xmss.c:122,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:123,8'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:126,2'
              BranchSideFuncs:
                - xmss_set_params
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'sshkey-xmss.c:128,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:130,8'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:133,20'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey-xmss.c:103,10'
          Dst:             calloc
        - Src:             'sshkey-xmss.c:106,6'
          Dst:             strcmp
        - Src:             'sshkey-xmss.c:110,13'
          Dst:             strcmp
        - Src:             'sshkey-xmss.c:114,13'
          Dst:             strcmp
        - Src:             'sshkey-xmss.c:122,24'
          Dst:             strdup
        - Src:             'sshkey-xmss.c:128,6'
          Dst:             xmss_set_params
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_init_bds_state
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 165
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         23
      ICount:          238
      EdgeCount:       31
      CyclomaticComplexity: 10
      functionsReached:
        - calloc
        - sshkey_xmss_free_bds
        - xmss_set_bds_state
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:170,59'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:171,35'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
            - BranchSide:      'sshkey-xmss.c:178,24'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
        - Branch String:   'sshkey-xmss.c:171,70'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:172,28'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
            - BranchSide:      'sshkey-xmss.c:178,24'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
        - Branch String:   'sshkey-xmss.c:172,57'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:173,28'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
            - BranchSide:      'sshkey-xmss.c:178,24'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
        - Branch String:   'sshkey-xmss.c:173,57'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:174,32'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
            - BranchSide:      'sshkey-xmss.c:178,24'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
        - Branch String:   'sshkey-xmss.c:174,65'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:175,30'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
            - BranchSide:      'sshkey-xmss.c:178,24'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
        - Branch String:   'sshkey-xmss.c:175,61'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:176,32'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
            - BranchSide:      'sshkey-xmss.c:178,24'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
        - Branch String:   'sshkey-xmss.c:170,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:178,24'
              BranchSideFuncs:
                - sshkey_xmss_free_bds
            - BranchSide:      'sshkey-xmss.c:181,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - xmss_set_bds_state
        - Branch String:   'sshkey-xmss.c:181,2'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:182,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - xmss_set_bds_state
            - BranchSide:      'sshkey-xmss.c:183,22'
              BranchSideFuncs:
                - xmss_set_bds_state
      Callsites:
        - Src:             'sshkey-xmss.c:170,22'
          Dst:             calloc
        - Src:             'sshkey-xmss.c:171,28'
          Dst:             calloc
        - Src:             'sshkey-xmss.c:172,21'
          Dst:             calloc
        - Src:             'sshkey-xmss.c:173,21'
          Dst:             calloc
        - Src:             'sshkey-xmss.c:174,25'
          Dst:             calloc
        - Src:             'sshkey-xmss.c:175,23'
          Dst:             calloc
        - Src:             'sshkey-xmss.c:176,25'
          Dst:             calloc
        - Src:             'sshkey-xmss.c:178,3'
          Dst:             sshkey_xmss_free_bds
        - Src:             'sshkey-xmss.c:183,2'
          Dst:             xmss_set_bds_state
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_init_enc_key
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 269
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         12
      ICount:          114
      EdgeCount:       16
      CyclomaticComplexity: 6
      functionsReached:
        - arc4random_buf
        - calloc
        - cipher_by_name
        - cipher_ivlen
        - cipher_keylen
        - strdup
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:274,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:275,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:276,31'
              BranchSideFuncs:
                - cipher_by_name
                - strdup
                - cipher_keylen
                - cipher_ivlen
                - calloc
                - arc4random_buf
                - free
        - Branch String:   'sshkey-xmss.c:276,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:277,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:278,38'
              BranchSideFuncs:
                - strdup
                - cipher_keylen
                - cipher_ivlen
                - calloc
                - arc4random_buf
                - free
        - Branch String:   'sshkey-xmss.c:278,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:279,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:280,25'
              BranchSideFuncs:
                - cipher_keylen
                - cipher_ivlen
                - calloc
                - arc4random_buf
                - free
        - Branch String:   'sshkey-xmss.c:283,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:284,8'
              BranchSideFuncs:
                - free
            - BranchSide:      'sshkey-xmss.c:288,17'
              BranchSideFuncs:
                - arc4random_buf
      Callsites:
        - Src:             'sshkey-xmss.c:276,16'
          Dst:             cipher_by_name
        - Src:             'sshkey-xmss.c:278,31'
          Dst:             strdup
        - Src:             'sshkey-xmss.c:280,11'
          Dst:             cipher_keylen
        - Src:             'sshkey-xmss.c:281,10'
          Dst:             cipher_ivlen
        - Src:             'sshkey-xmss.c:283,26'
          Dst:             calloc
        - Src:             'sshkey-xmss.c:288,2'
          Dst:             arc4random_buf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_pklen
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 249
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         4
      ICount:          34
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    12
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:252,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:253,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:254,9'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_sklen
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 259
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         4
      ICount:          35
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:262,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:263,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:264,9'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_deserialize_pk_info
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 347
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         17
      ICount:          102
      EdgeCount:       23
      CyclomaticComplexity: 8
      functionsReached:
        - sshbuf_get_u32
        - sshbuf_get_u8
        - sshbuf_len
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:352,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:353,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:355,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:355,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:356,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:357,25'
              BranchSideFuncs:
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:357,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:358,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:359,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:359,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:360,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:361,26'
              BranchSideFuncs:
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:361,48'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:362,26'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:363,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:361,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:363,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:364,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey-xmss.c:355,6'
          Dst:             sshbuf_len
        - Src:             'sshkey-xmss.c:357,11'
          Dst:             sshbuf_get_u8
        - Src:             'sshkey-xmss.c:361,11'
          Dst:             sshbuf_get_u32
        - Src:             'sshkey-xmss.c:362,11'
          Dst:             sshbuf_get_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_serialize_pk_info
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 327
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         18
      ICount:          144
      EdgeCount:       24
      CyclomaticComplexity: 8
      functionsReached:
        - sshbuf_put_u32
        - sshbuf_put_u8
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:333,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:334,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:335,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:335,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:336,3'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:337,8'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:337,8'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:337,21'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshkey-xmss.c:337,44'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshkey-xmss.c:338,45'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:339,26'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:341,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:339,40'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:340,26'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:341,10'
              BranchSideFuncs: []
        - Branch String:   'sshkey-xmss.c:338,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:341,10'
              BranchSideFuncs: []
            - BranchSide:      'sshkey-xmss.c:342,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshkey-xmss.c:338,11'
          Dst:             sshbuf_put_u8
        - Src:             'sshkey-xmss.c:339,11'
          Dst:             sshbuf_put_u32
        - Src:             'sshkey-xmss.c:340,11'
          Dst:             sshbuf_put_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshkey_xmss_free_state
      functionSourceFile: '/src/openssh/sshkey-xmss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 139
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          66
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - explicit_bzero
        - sshkey_xmss_free_bds
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshkey-xmss.c:143,6'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:143,6'
              BranchSideFuncs:
                - free
                - free
                - explicit_bzero
                - free
            - BranchSide:      'sshkey-xmss.c:144,7'
              BranchSideFuncs:
                - free
                - free
                - explicit_bzero
                - free
        - Branch String:   'sshkey-xmss.c:144,7'
          Branch Sides:
            - BranchSide:      'sshkey-xmss.c:145,19'
              BranchSideFuncs:
                - explicit_bzero
                - free
                - free
                - free
            - BranchSide:      'sshkey-xmss.c:148,8'
              BranchSideFuncs:
                - free
                - free
      Callsites:
        - Src:             'sshkey-xmss.c:142,2'
          Dst:             sshkey_xmss_free_bds
        - Src:             'sshkey-xmss.c:145,4'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    treehash_update
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 249
      functionDepth:   0
      returnType:      'N/A'
      argCount:        6
      argTypes:
        - 'struct.treehash_inst *'
        - 'struct.bds_state *'
        - 'char *'
        - 'struct.xmss_params *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          240
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - gen_leaf_wots
        - hash_h
        - setLtreeADRS
        - setOTSADRS
        - setTreeHeight
        - setTreeIndex
        - setType
      functionUses:    1
      BranchProfiles:
        - Branch String:   'xmss_fast.c:270,35'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:270,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'xmss_fast.c:270,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:270,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:271,25'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:280,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:280,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:281,12'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
            - BranchSide:      'xmss_fast.c:285,12'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
      Callsites:
        - Src:             'xmss_fast.c:258,3'
          Dst:             setType
        - Src:             'xmss_fast.c:260,3'
          Dst:             setType
        - Src:             'xmss_fast.c:262,3'
          Dst:             setType
        - Src:             'xmss_fast.c:264,3'
          Dst:             setLtreeADRS
        - Src:             'xmss_fast.c:265,3'
          Dst:             setOTSADRS
        - Src:             'xmss_fast.c:269,3'
          Dst:             gen_leaf_wots
        - Src:             'xmss_fast.c:273,5'
          Dst:             setTreeHeight
        - Src:             'xmss_fast.c:274,5'
          Dst:             setTreeIndex
        - Src:             'xmss_fast.c:275,5'
          Dst:             hash_h
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    gen_leaf_wots
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 153
      functionDepth:   0
      returnType:      'N/A'
      argCount:        6
      argTypes:
        - 'char *'
        - 'char *'
        - 'struct.xmss_params *'
        - 'char *'
        - 'int *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          69
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - get_seed
        - l_tree
        - wots_pkgen
      functionUses:    4
      BranchProfiles:  []
      Callsites:
        - Src:             'xmss_fast.c:157,3'
          Dst:             get_seed
        - Src:             'xmss_fast.c:158,3'
          Dst:             wots_pkgen
        - Src:             'xmss_fast.c:160,3'
          Dst:             l_tree
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_seed
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 37
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'int '
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          39
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - addr_to_byte
        - prf
        - setChainADRS
        - setHashADRS
        - setKeyAndMask
      functionUses:    5
      BranchProfiles:  []
      Callsites:
        - Src:             'xmss_fast.c:40,3'
          Dst:             setChainADRS
        - Src:             'xmss_fast.c:41,3'
          Dst:             setHashADRS
        - Src:             'xmss_fast.c:42,3'
          Dst:             setKeyAndMask
        - Src:             'xmss_fast.c:44,3'
          Dst:             addr_to_byte
        - Src:             'xmss_fast.c:45,3'
          Dst:             prf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    l_tree
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 112
      functionDepth:   0
      returnType:      'N/A'
      argCount:        5
      argTypes:
        - 'char *'
        - 'char *'
        - 'struct.xmss_params *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         13
      ICount:          145
      EdgeCount:       16
      CyclomaticComplexity: 5
      functionsReached:
        - hash_h
        - setTreeHeight
        - setTreeIndex
      functionUses:    4
      BranchProfiles:
        - Branch String:   'xmss_fast.c:122,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:123,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - setTreeHeight
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setTreeIndex
                - hash_h
            - BranchSide:      'xmss_fast.c:146,11'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:124,6'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:126,21'
              BranchSideFuncs:
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - setTreeHeight
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:131,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - setTreeHeight
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:131,10'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:133,15'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - setTreeHeight
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - setTreeIndex
                - hash_h
            - BranchSide:      'xmss_fast.c:139,11'
              BranchSideFuncs:
                - setTreeHeight
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - setTreeIndex
                - hash_h
      Callsites:
        - Src:             'xmss_fast.c:120,3'
          Dst:             setTreeHeight
        - Src:             'xmss_fast.c:126,8'
          Dst:             setTreeIndex
        - Src:             'xmss_fast.c:128,8'
          Dst:             hash_h
        - Src:             'xmss_fast.c:143,6'
          Dst:             setTreeHeight
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    treehash_minheight_on_stack
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 163
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.bds_state *'
        - 'struct.xmss_params *'
        - 'struct.treehash_inst *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          81
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'xmss_fast.c:165,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:166,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:170,10'
              BranchSideFuncs: []
        - Branch String:   'xmss_fast.c:166,9'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:167,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:169,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xmssmt_sign_open
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 971
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'char *'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'struct.xmssmt_params *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         27
      ICount:          527
      EdgeCount:       33
      CyclomaticComplexity: 8
      functionsReached:
        - h_msg
        - l_tree
        - printf
        - setLayerADRS
        - setLtreeADRS
        - setOTSADRS
        - setTreeADRS
        - setType
        - to_byte
        - validate_authpath
        - wots_pkFromSig
      functionUses:    0
      BranchProfiles:
        - Branch String:   'xmss_fast.c:996,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:997,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - printf
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - to_byte
                - h_msg
                - setLayerADRS
                - setTreeADRS
                - setType
                - llvm.memcpy.p0i8.p0i8.i64
                - setType
                - llvm.memcpy.p0i8.p0i8.i64
                - setType
                - setOTSADRS
                - wots_pkFromSig
                - setLtreeADRS
                - l_tree
                - validate_authpath
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp8
                - setLayerADRS
                - setTreeADRS
                - setType
                - llvm.memcpy.p0i8.p0i8.i64
                - setType
                - llvm.memcpy.p0i8.p0i8.i64
                - setType
                - setOTSADRS
                - wots_pkFromSig
                - setLtreeADRS
                - l_tree
                - validate_authpath
            - BranchSide:      'xmss_fast.c:999,35'
              BranchSideFuncs:
                - printf
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - to_byte
                - h_msg
                - setLayerADRS
                - setTreeADRS
                - setType
                - llvm.memcpy.p0i8.p0i8.i64
                - setType
                - llvm.memcpy.p0i8.p0i8.i64
                - setType
                - setOTSADRS
                - wots_pkFromSig
                - setLtreeADRS
                - l_tree
                - validate_authpath
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp8
                - setLayerADRS
                - setTreeADRS
                - setType
                - llvm.memcpy.p0i8.p0i8.i64
                - setType
                - llvm.memcpy.p0i8.p0i8.i64
                - setType
                - setOTSADRS
                - wots_pkFromSig
                - setLtreeADRS
                - l_tree
                - validate_authpath
        - Branch String:   'xmss_fast.c:1053,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:1055,17'
              BranchSideFuncs:
                - setLayerADRS
                - setTreeADRS
                - setType
                - llvm.memcpy.p0i8.p0i8.i64
                - setType
                - llvm.memcpy.p0i8.p0i8.i64
                - setType
                - setOTSADRS
                - wots_pkFromSig
                - setLtreeADRS
                - l_tree
                - validate_authpath
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'xmss_fast.c:1088,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'xmss_fast.c:1088,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:1089,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'xmss_fast.c:1092,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
        - Branch String:   'xmss_fast.c:1089,9'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:1089,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
            - BranchSide:      'xmss_fast.c:1090,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
        - Branch String:   'xmss_fast.c:1093,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:1094,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
            - BranchSide:      'xmss_fast.c:1096,3'
              BranchSideFuncs:
                - llvm.stackrestore
        - Branch String:   'xmss_fast.c:1101,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:1102,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
            - BranchSide:      'xmss_fast.c:1103,4'
              BranchSideFuncs:
                - llvm.stackrestore
      Callsites:
        - Src:             'xmss_fast.c:999,3'
          Dst:             printf
        - Src:             'xmss_fast.c:1006,3'
          Dst:             to_byte
        - Src:             'xmss_fast.c:1015,3'
          Dst:             h_msg
        - Src:             'xmss_fast.c:1025,3'
          Dst:             setLayerADRS
        - Src:             'xmss_fast.c:1026,3'
          Dst:             setTreeADRS
        - Src:             'xmss_fast.c:1027,3'
          Dst:             setType
        - Src:             'xmss_fast.c:1030,3'
          Dst:             setType
        - Src:             'xmss_fast.c:1033,3'
          Dst:             setType
        - Src:             'xmss_fast.c:1035,3'
          Dst:             setOTSADRS
        - Src:             'xmss_fast.c:1038,3'
          Dst:             wots_pkFromSig
        - Src:             'xmss_fast.c:1044,3'
          Dst:             setLtreeADRS
        - Src:             'xmss_fast.c:1045,3'
          Dst:             l_tree
        - Src:             'xmss_fast.c:1048,3'
          Dst:             validate_authpath
        - Src:             'xmss_fast.c:1058,5'
          Dst:             setLayerADRS
        - Src:             'xmss_fast.c:1059,5'
          Dst:             setTreeADRS
        - Src:             'xmss_fast.c:1060,5'
          Dst:             setType
        - Src:             'xmss_fast.c:1063,5'
          Dst:             setType
        - Src:             'xmss_fast.c:1066,5'
          Dst:             setType
        - Src:             'xmss_fast.c:1068,5'
          Dst:             setOTSADRS
        - Src:             'xmss_fast.c:1071,5'
          Dst:             wots_pkFromSig
        - Src:             'xmss_fast.c:1077,5'
          Dst:             setLtreeADRS
        - Src:             'xmss_fast.c:1078,5'
          Dst:             l_tree
        - Src:             'xmss_fast.c:1081,5'
          Dst:             validate_authpath
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    printf
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    validate_authpath
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 297
      functionDepth:   0
      returnType:      'N/A'
      argCount:        7
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'struct.xmss_params *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         37
      ICount:          301
      EdgeCount:       46
      CyclomaticComplexity: 11
      functionsReached:
        - hash_h
        - setTreeHeight
        - setTreeIndex
      functionUses:    3
      BranchProfiles:
        - Branch String:   'xmss_fast.c:305,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:306,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - hash_h
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:312,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - hash_h
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:306,5'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:307,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - hash_h
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:308,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - hash_h
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:308,5'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:309,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - hash_h
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:310,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - hash_h
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:312,5'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:313,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - hash_h
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:314,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - hash_h
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:314,5'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:0,0'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - hash_h
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:315,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - hash_h
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:319,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:320,19'
              BranchSideFuncs:
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - hash_h
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:335,17'
              BranchSideFuncs:
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
        - Branch String:   'xmss_fast.c:323,9'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:324,21'
              BranchSideFuncs:
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:329,30'
              BranchSideFuncs:
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:325,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:326,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - hash_h
            - BranchSide:      'xmss_fast.c:327,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - hash_h
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:330,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:0,0'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - hash_h
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:331,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.stackrestore
                - setTreeHeight
                - setTreeIndex
                - __sanitizer_cov_trace_const_cmp8
                - hash_h
                - hash_h
                - __sanitizer_cov_trace_cmp4
      Callsites:
        - Src:             'xmss_fast.c:320,5'
          Dst:             setTreeHeight
        - Src:             'xmss_fast.c:322,5'
          Dst:             setTreeIndex
        - Src:             'xmss_fast.c:324,7'
          Dst:             hash_h
        - Src:             'xmss_fast.c:329,7'
          Dst:             hash_h
        - Src:             'xmss_fast.c:335,3'
          Dst:             setTreeHeight
        - Src:             'xmss_fast.c:337,3'
          Dst:             setTreeIndex
        - Src:             'xmss_fast.c:338,3'
          Dst:             hash_h
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    bds_state_update
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 383
      functionDepth:   0
      returnType:      'char '
      argCount:        5
      argTypes:
        - 'struct.bds_state *'
        - 'char *'
        - 'struct.xmss_params *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         29
      ICount:          437
      EdgeCount:       38
      CyclomaticComplexity: 11
      functionsReached:
        - gen_leaf_wots
        - hash_h
        - setLtreeADRS
        - setOTSADRS
        - setTreeHeight
        - setTreeIndex
        - setType
      functionUses:    2
      BranchProfiles:
        - Branch String:   'xmss_fast.c:394,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:395,5'
              BranchSideFuncs: []
            - BranchSide:      'xmss_fast.c:399,3'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - setType
                - llvm.memcpy.p0i8.p0i8.i64
                - setType
                - llvm.memcpy.p0i8.p0i8.i64
                - setType
                - setOTSADRS
                - setLtreeADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:414,17'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:414,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:417,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:414,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:415,12'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:417,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:417,31'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:417,34'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:417,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:417,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:418,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:437,3'
              BranchSideFuncs: []
        - Branch String:   'xmss_fast.c:419,9'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:420,14'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:423,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:423,25'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:423,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:426,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:423,11'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:424,16'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:426,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:
        - Src:             'xmss_fast.c:401,3'
          Dst:             setType
        - Src:             'xmss_fast.c:403,3'
          Dst:             setType
        - Src:             'xmss_fast.c:405,3'
          Dst:             setType
        - Src:             'xmss_fast.c:407,3'
          Dst:             setOTSADRS
        - Src:             'xmss_fast.c:408,3'
          Dst:             setLtreeADRS
        - Src:             'xmss_fast.c:410,3'
          Dst:             gen_leaf_wots
        - Src:             'xmss_fast.c:430,5'
          Dst:             setTreeHeight
        - Src:             'xmss_fast.c:431,5'
          Dst:             setTreeIndex
        - Src:             'xmss_fast.c:432,5'
          Dst:             hash_h
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xmssmt_sign
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 788
      functionDepth:   0
      returnType:      'int '
      argCount:        8
      argTypes:
        - 'char *'
        - 'struct.bds_state *'
        - 'char *'
        - 'char *'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'struct.xmssmt_params *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         53
      ICount:          905
      EdgeCount:       68
      CyclomaticComplexity: 17
      functionsReached:
        - bds_round
        - bds_state_update
        - bds_treehash_update
        - get_seed
        - h_msg
        - prf
        - setLayerADRS
        - setOTSADRS
        - setTreeADRS
        - setType
        - to_byte
        - wots_sign
      functionUses:    0
      BranchProfiles:
        - Branch String:   'xmss_fast.c:816,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:817,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - to_byte
                - prf
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - to_byte
                - h_msg
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - setType
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:820,19'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - to_byte
                - prf
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - to_byte
                - h_msg
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - setType
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:825,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:826,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - to_byte
                - prf
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - to_byte
                - h_msg
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - setType
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:838,11'
              BranchSideFuncs:
                - to_byte
                - prf
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - to_byte
                - h_msg
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - setType
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:852,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:853,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - setType
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:856,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - setType
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:860,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:861,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - setType
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:863,14'
              BranchSideFuncs:
                - setType
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:894,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:896,12'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
            - BranchSide:      'xmss_fast.c:907,14'
              BranchSideFuncs:
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
        - Branch String:   'xmss_fast.c:911,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:912,23'
              BranchSideFuncs:
                - bds_state_update
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'xmss_fast.c:915,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'xmss_fast.c:915,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:917,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'xmss_fast.c:961,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
        - Branch String:   'xmss_fast.c:917,9'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:918,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'xmss_fast.c:935,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'xmss_fast.c:922,11'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:923,20'
              BranchSideFuncs:
                - bds_round
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
            - BranchSide:      'xmss_fast.c:925,38'
              BranchSideFuncs:
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
        - Branch String:   'xmss_fast.c:928,11'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:929,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
            - BranchSide:      'xmss_fast.c:934,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'xmss_fast.c:929,19'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:929,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
            - BranchSide:      'xmss_fast.c:933,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'xmss_fast.c:929,34'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:929,37'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
            - BranchSide:      'xmss_fast.c:933,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'xmss_fast.c:929,13'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:930,29'
              BranchSideFuncs:
                - bds_state_update
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'xmss_fast.c:933,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'xmss_fast.c:952,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:953,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
            - BranchSide:      'xmss_fast.c:955,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp8
                - setLayerADRS
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - bds_treehash_update
                - setTreeADRS
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - bds_state_update
                - bds_round
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLayerADRS
                - setTreeADRS
                - setOTSADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp8
      Callsites:
        - Src:             'xmss_fast.c:838,3'
          Dst:             to_byte
        - Src:             'xmss_fast.c:839,3'
          Dst:             prf
        - Src:             'xmss_fast.c:843,3'
          Dst:             to_byte
        - Src:             'xmss_fast.c:846,3'
          Dst:             h_msg
        - Src:             'xmss_fast.c:873,3'
          Dst:             setType
        - Src:             'xmss_fast.c:876,3'
          Dst:             setLayerADRS
        - Src:             'xmss_fast.c:877,3'
          Dst:             setTreeADRS
        - Src:             'xmss_fast.c:878,3'
          Dst:             setOTSADRS
        - Src:             'xmss_fast.c:881,3'
          Dst:             get_seed
        - Src:             'xmss_fast.c:884,3'
          Dst:             wots_sign
        - Src:             'xmss_fast.c:909,3'
          Dst:             setTreeADRS
        - Src:             'xmss_fast.c:912,5'
          Dst:             bds_state_update
        - Src:             'xmss_fast.c:920,7'
          Dst:             setLayerADRS
        - Src:             'xmss_fast.c:921,7'
          Dst:             setTreeADRS
        - Src:             'xmss_fast.c:923,9'
          Dst:             bds_round
        - Src:             'xmss_fast.c:925,17'
          Dst:             bds_treehash_update
        - Src:             'xmss_fast.c:926,7'
          Dst:             setTreeADRS
        - Src:             'xmss_fast.c:930,11'
          Dst:             bds_state_update
        - Src:             'xmss_fast.c:940,7'
          Dst:             setLayerADRS
        - Src:             'xmss_fast.c:941,7'
          Dst:             setTreeADRS
        - Src:             'xmss_fast.c:942,7'
          Dst:             setOTSADRS
        - Src:             'xmss_fast.c:944,7'
          Dst:             get_seed
        - Src:             'xmss_fast.c:945,7'
          Dst:             wots_sign
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    bds_round
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 447
      functionDepth:   0
      returnType:      'N/A'
      argCount:        6
      argTypes:
        - 'struct.bds_state *'
        - 'size_t '
        - 'char *'
        - 'struct.xmss_params *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         38
      ICount:          450
      EdgeCount:       49
      CyclomaticComplexity: 13
      functionsReached:
        - gen_leaf_wots
        - hash_h
        - setLtreeADRS
        - setOTSADRS
        - setTreeHeight
        - setTreeIndex
        - setType
      functionUses:    2
      BranchProfiles:
        - Branch String:   'xmss_fast.c:470,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:471,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:477,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:471,9'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:472,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'xmss_fast.c:475,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'xmss_fast.c:477,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:478,21'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:482,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:482,38'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:482,42'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
            - BranchSide:      'xmss_fast.c:485,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
        - Branch String:   'xmss_fast.c:482,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:483,12'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
            - BranchSide:      'xmss_fast.c:485,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
        - Branch String:   'xmss_fast.c:485,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:486,18'
              BranchSideFuncs:
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - llvm.stackrestore
            - BranchSide:      'xmss_fast.c:491,19'
              BranchSideFuncs:
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:494,5'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:495,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:505,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:495,11'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:496,16'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:499,25'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:505,22'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:505,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:505,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:505,5'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:0,0'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
            - BranchSide:      'xmss_fast.c:506,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
        - Branch String:   'xmss_fast.c:507,11'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:508,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:513,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp4
      Callsites:
        - Src:             'xmss_fast.c:464,3'
          Dst:             setType
        - Src:             'xmss_fast.c:466,3'
          Dst:             setType
        - Src:             'xmss_fast.c:468,3'
          Dst:             setType
        - Src:             'xmss_fast.c:486,5'
          Dst:             setLtreeADRS
        - Src:             'xmss_fast.c:487,5'
          Dst:             setOTSADRS
        - Src:             'xmss_fast.c:488,5'
          Dst:             gen_leaf_wots
        - Src:             'xmss_fast.c:491,5'
          Dst:             setTreeHeight
        - Src:             'xmss_fast.c:492,5'
          Dst:             setTreeIndex
        - Src:             'xmss_fast.c:493,5'
          Dst:             hash_h
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    bds_treehash_update
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 345
      functionDepth:   0
      returnType:      'char '
      argCount:        6
      argTypes:
        - 'struct.bds_state *'
        - 'int '
        - 'char *'
        - 'struct.xmss_params *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         23
      ICount:          192
      EdgeCount:       29
      CyclomaticComplexity: 8
      functionsReached:
        - treehash_minheight_on_stack
        - treehash_update
      functionUses:    2
      BranchProfiles:
        - Branch String:   'xmss_fast.c:352,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:352,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - treehash_update
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - treehash_minheight_on_stack
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:353,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - treehash_update
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - treehash_minheight_on_stack
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:355,5'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:356,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - treehash_minheight_on_stack
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - treehash_update
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:370,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - treehash_update
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - treehash_minheight_on_stack
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:356,11'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:357,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - treehash_update
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - treehash_minheight_on_stack
            - BranchSide:      'xmss_fast.c:359,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - treehash_minheight_on_stack
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - treehash_update
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
        - Branch String:   'xmss_fast.c:359,16'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:360,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - treehash_update
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - treehash_minheight_on_stack
            - BranchSide:      'xmss_fast.c:363,43'
              BranchSideFuncs:
                - treehash_minheight_on_stack
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - treehash_update
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'xmss_fast.c:365,11'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:366,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - treehash_update
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - treehash_minheight_on_stack
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:369,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - treehash_update
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - treehash_minheight_on_stack
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:370,9'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:371,7'
              BranchSideFuncs: []
            - BranchSide:      'xmss_fast.c:373,23'
              BranchSideFuncs:
                - treehash_update
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - treehash_minheight_on_stack
                - __sanitizer_cov_trace_cmp4
      Callsites:
        - Src:             'xmss_fast.c:363,15'
          Dst:             treehash_minheight_on_stack
        - Src:             'xmss_fast.c:373,5'
          Dst:             treehash_update
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xmssmt_keypair
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 751
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'char *'
        - 'char *'
        - 'struct.bds_state *'
        - 'char *'
        - 'struct.xmssmt_params *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          221
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - arc4random_buf
        - get_seed
        - setLayerADRS
        - treehash_setup
        - wots_sign
      functionUses:    0
      BranchProfiles:
        - Branch String:   'xmss_fast.c:756,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:757,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - arc4random_buf
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memset.p0i8.i64
                - setLayerADRS
                - __sanitizer_cov_trace_cmp4
                - treehash_setup
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - treehash_setup
                - setLayerADRS
                - get_seed
                - wots_sign
            - BranchSide:      'xmss_fast.c:760,3'
              BranchSideFuncs:
                - arc4random_buf
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memset.p0i8.i64
                - setLayerADRS
                - __sanitizer_cov_trace_cmp4
                - treehash_setup
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - treehash_setup
                - setLayerADRS
                - get_seed
                - wots_sign
        - Branch String:   'xmss_fast.c:768,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:770,20'
              BranchSideFuncs:
                - treehash_setup
                - setLayerADRS
                - get_seed
                - wots_sign
                - __sanitizer_cov_trace_cmp4
                - treehash_setup
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
            - BranchSide:      'xmss_fast.c:775,18'
              BranchSideFuncs:
                - treehash_setup
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
      Callsites:
        - Src:             'xmss_fast.c:760,3'
          Dst:             arc4random_buf
        - Src:             'xmss_fast.c:766,3'
          Dst:             setLayerADRS
        - Src:             'xmss_fast.c:770,5'
          Dst:             treehash_setup
        - Src:             'xmss_fast.c:771,5'
          Dst:             setLayerADRS
        - Src:             'xmss_fast.c:772,5'
          Dst:             get_seed
        - Src:             'xmss_fast.c:773,5'
          Dst:             wots_sign
        - Src:             'xmss_fast.c:775,3'
          Dst:             treehash_setup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    treehash_setup
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 179
      functionDepth:   0
      returnType:      'N/A'
      argCount:        8
      argTypes:
        - 'char *'
        - 'int '
        - 'int '
        - 'struct.bds_state *'
        - 'char *'
        - 'struct.xmss_params *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         38
      ICount:          462
      EdgeCount:       49
      CyclomaticComplexity: 13
      functionsReached:
        - gen_leaf_wots
        - hash_h
        - setLtreeADRS
        - setOTSADRS
        - setTreeHeight
        - setTreeIndex
        - setType
      functionUses:    3
      BranchProfiles:
        - Branch String:   'xmss_fast.c:205,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:206,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:211,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:212,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:213,18'
              BranchSideFuncs:
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:245,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
        - Branch String:   'xmss_fast.c:218,19'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:218,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:221,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:218,9'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:219,14'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:221,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_fast.c:221,26'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:221,41'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:221,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:221,5'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:223,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:242,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:224,11'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:225,16'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:228,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:228,27'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:228,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'xmss_fast.c:231,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:228,13'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:229,18'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_fast.c:231,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - setTreeHeight
                - setTreeIndex
                - hash_h
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
                - setLtreeADRS
                - setOTSADRS
                - gen_leaf_wots
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:245,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:246,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - llvm.stackrestore
            - BranchSide:      'xmss_fast.c:247,1'
              BranchSideFuncs:
                - llvm.stackrestore
      Callsites:
        - Src:             'xmss_fast.c:191,3'
          Dst:             setType
        - Src:             'xmss_fast.c:193,3'
          Dst:             setType
        - Src:             'xmss_fast.c:195,3'
          Dst:             setType
        - Src:             'xmss_fast.c:213,5'
          Dst:             setLtreeADRS
        - Src:             'xmss_fast.c:214,5'
          Dst:             setOTSADRS
        - Src:             'xmss_fast.c:215,5'
          Dst:             gen_leaf_wots
        - Src:             'xmss_fast.c:235,7'
          Dst:             setTreeHeight
        - Src:             'xmss_fast.c:236,7'
          Dst:             setTreeIndex
        - Src:             'xmss_fast.c:237,7'
          Dst:             hash_h
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xmss_sign_open
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 664
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'char *'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'struct.xmss_params *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         19
      ICount:          352
      EdgeCount:       23
      CyclomaticComplexity: 6
      functionsReached:
        - h_msg
        - l_tree
        - printf
        - setLtreeADRS
        - setOTSADRS
        - setType
        - to_byte
        - validate_authpath
        - wots_pkFromSig
      functionUses:    1
      BranchProfiles:
        - Branch String:   'xmss_fast.c:726,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:727,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'xmss_fast.c:730,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
        - Branch String:   'xmss_fast.c:727,9'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:727,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
            - BranchSide:      'xmss_fast.c:728,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
        - Branch String:   'xmss_fast.c:731,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:732,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
            - BranchSide:      'xmss_fast.c:734,3'
              BranchSideFuncs:
                - llvm.stackrestore
        - Branch String:   'xmss_fast.c:739,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:740,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
            - BranchSide:      'xmss_fast.c:741,4'
              BranchSideFuncs:
                - llvm.stackrestore
      Callsites:
        - Src:             'xmss_fast.c:683,3'
          Dst:             setType
        - Src:             'xmss_fast.c:684,3'
          Dst:             setType
        - Src:             'xmss_fast.c:685,3'
          Dst:             setType
        - Src:             'xmss_fast.c:689,3'
          Dst:             printf
        - Src:             'xmss_fast.c:694,3'
          Dst:             to_byte
        - Src:             'xmss_fast.c:702,3'
          Dst:             h_msg
        - Src:             'xmss_fast.c:709,3'
          Dst:             setOTSADRS
        - Src:             'xmss_fast.c:711,3'
          Dst:             wots_pkFromSig
        - Src:             'xmss_fast.c:717,3'
          Dst:             setLtreeADRS
        - Src:             'xmss_fast.c:718,3'
          Dst:             l_tree
        - Src:             'xmss_fast.c:721,3'
          Dst:             validate_authpath
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xmss_sign
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 552
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'char *'
        - 'struct.bds_state *'
        - 'char *'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'struct.xmss_params *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         10
      ICount:          395
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - bds_round
        - bds_treehash_update
        - get_seed
        - h_msg
        - prf
        - setOTSADRS
        - setType
        - to_byte
        - wots_sign
      functionUses:    2
      BranchProfiles:
        - Branch String:   'xmss_fast.c:614,3'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:615,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - setType
                - setOTSADRS
                - get_seed
                - wots_sign
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - bds_round
                - bds_treehash_update
            - BranchSide:      'xmss_fast.c:617,14'
              BranchSideFuncs:
                - setType
                - setOTSADRS
                - get_seed
                - wots_sign
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
                - bds_round
                - bds_treehash_update
        - Branch String:   'xmss_fast.c:640,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:640,7'
              BranchSideFuncs:
                - bds_round
                - bds_treehash_update
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
            - BranchSide:      'xmss_fast.c:641,15'
              BranchSideFuncs:
                - bds_round
                - bds_treehash_update
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.stackrestore
      Callsites:
        - Src:             'xmss_fast.c:569,3'
          Dst:             to_byte
        - Src:             'xmss_fast.c:593,3'
          Dst:             prf
        - Src:             'xmss_fast.c:597,3'
          Dst:             to_byte
        - Src:             'xmss_fast.c:599,3'
          Dst:             h_msg
        - Src:             'xmss_fast.c:625,3'
          Dst:             setType
        - Src:             'xmss_fast.c:626,3'
          Dst:             setOTSADRS
        - Src:             'xmss_fast.c:629,3'
          Dst:             get_seed
        - Src:             'xmss_fast.c:632,3'
          Dst:             wots_sign
        - Src:             'xmss_fast.c:641,5'
          Dst:             bds_round
        - Src:             'xmss_fast.c:642,5'
          Dst:             bds_treehash_update
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xmss_keypair
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 523
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'struct.bds_state *'
        - 'struct.xmss_params *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          90
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - arc4random_buf
        - treehash_setup
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'xmss_fast.c:531,3'
          Dst:             arc4random_buf
        - Src:             'xmss_fast.c:538,3'
          Dst:             treehash_setup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xmssmt_set_params
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 91
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'struct.xmssmt_params *'
        - 'int '
        - 'int '
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          89
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - fprintf
        - xmss_set_params
      functionUses:    0
      BranchProfiles:
        - Branch String:   'xmss_fast.c:92,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:93,13'
              BranchSideFuncs:
                - fprintf
            - BranchSide:      'xmss_fast.c:96,15'
              BranchSideFuncs:
                - xmss_set_params
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'xmss_fast.c:101,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:102,5'
              BranchSideFuncs: []
            - BranchSide:      'xmss_fast.c:104,3'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:
        - Src:             'xmss_fast.c:93,5'
          Dst:             fprintf
        - Src:             'xmss_fast.c:101,7'
          Dst:             xmss_set_params
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xmss_set_params
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 54
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.xmss_params *'
        - 'int '
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          87
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - fprintf
        - wots_set_params
      functionUses:    2
      BranchProfiles:
        - Branch String:   'xmss_fast.c:55,14'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:55,17'
              BranchSideFuncs:
                - fprintf
            - BranchSide:      'xmss_fast.c:56,13'
              BranchSideFuncs:
                - fprintf
        - Branch String:   'xmss_fast.c:55,23'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:55,27'
              BranchSideFuncs:
                - fprintf
            - BranchSide:      'xmss_fast.c:56,13'
              BranchSideFuncs:
                - fprintf
        - Branch String:   'xmss_fast.c:55,7'
          Branch Sides:
            - BranchSide:      'xmss_fast.c:56,13'
              BranchSideFuncs:
                - fprintf
            - BranchSide:      'xmss_fast.c:59,15'
              BranchSideFuncs:
                - wots_set_params
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:
        - Src:             'xmss_fast.c:56,5'
          Dst:             fprintf
        - Src:             'xmss_fast.c:63,3'
          Dst:             wots_set_params
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xmss_set_bds_state
      functionSourceFile: '/src/openssh/xmss_fast.c'
      linkageType:     InternalLinkage
      functionLinenumber: 73
      functionDepth:   0
      returnType:      'N/A'
      argCount:        9
      argTypes:
        - 'struct.bds_state *'
        - 'char *'
        - 'int '
        - 'char *'
        - 'char *'
        - 'char *'
        - 'struct.treehash_inst *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          63
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    hash_f
      functionSourceFile: '/src/openssh/xmss_hash.c'
      linkageType:     InternalLinkage
      functionLinenumber: 117
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          115
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - addr_to_byte
        - core_hash_SHA2
        - prf
        - setKeyAndMask
      functionUses:    1
      BranchProfiles:
        - Branch String:   'xmss_hash.c:132,3'
          Branch Sides:
            - BranchSide:      'xmss_hash.c:133,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - core_hash_SHA2
                - llvm.stackrestore
            - BranchSide:      'xmss_hash.c:135,25'
              BranchSideFuncs:
                - core_hash_SHA2
                - llvm.stackrestore
      Callsites:
        - Src:             'xmss_hash.c:124,3'
          Dst:             setKeyAndMask
        - Src:             'xmss_hash.c:125,3'
          Dst:             addr_to_byte
        - Src:             'xmss_hash.c:126,3'
          Dst:             prf
        - Src:             'xmss_hash.c:128,3'
          Dst:             setKeyAndMask
        - Src:             'xmss_hash.c:129,3'
          Dst:             addr_to_byte
        - Src:             'xmss_hash.c:130,3'
          Dst:             prf
        - Src:             'xmss_hash.c:135,10'
          Dst:             core_hash_SHA2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_to_byte
      functionSourceFile: '/src/openssh/xmss_hash.c'
      linkageType:     InternalLinkage
      functionLinenumber: 26
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         7
      ICount:          50
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - to_byte
      functionUses:    6
      BranchProfiles:
        - Branch String:   'xmss_hash.c:29,3'
          Branch Sides:
            - BranchSide:      'xmss_hash.c:30,13'
              BranchSideFuncs:
                - to_byte
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'xmss_hash.c:31,10'
              BranchSideFuncs: []
      Callsites:
        - Src:             'xmss_hash.c:30,5'
          Dst:             to_byte
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    prf
      functionSourceFile: '/src/openssh/xmss_hash.c'
      linkageType:     InternalLinkage
      functionLinenumber: 72
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          29
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - core_hash_SHA2
      functionUses:    9
      BranchProfiles:  []
      Callsites:
        - Src:             'xmss_hash.c:73,10'
          Dst:             core_hash_SHA2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    core_hash_SHA2
      functionSourceFile: '/src/openssh/xmss_hash.c'
      linkageType:     InternalLinkage
      functionLinenumber: 38
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'char *'
        - 'int '
        - 'char *'
        - 'int '
        - 'char *'
        - 'size_t '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         17
      ICount:          159
      EdgeCount:       21
      CyclomaticComplexity: 6
      functionsReached:
        - SHA256
        - SHA512
        - to_byte
      functionUses:    4
      BranchProfiles:
        - Branch String:   'xmss_hash.c:47,3'
          Branch Sides:
            - BranchSide:      'xmss_hash.c:48,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_pc_indir
                - SHA512
                - __sanitizer_cov_trace_pc_indir
                - SHA256
            - BranchSide:      'xmss_hash.c:51,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_pc_indir
                - SHA512
                - __sanitizer_cov_trace_pc_indir
                - SHA256
        - Branch String:   'xmss_hash.c:51,3'
          Branch Sides:
            - BranchSide:      'xmss_hash.c:52,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_pc_indir
                - SHA512
                - __sanitizer_cov_trace_pc_indir
                - SHA256
            - BranchSide:      'xmss_hash.c:55,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_pc_indir
                - SHA512
                - __sanitizer_cov_trace_pc_indir
                - SHA256
        - Branch String:   'xmss_hash.c:55,7'
          Branch Sides:
            - BranchSide:      'xmss_hash.c:56,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - SHA256
                - llvm.stackrestore
            - BranchSide:      'xmss_hash.c:60,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - llvm.stackrestore
                - __sanitizer_cov_trace_pc_indir
                - SHA512
      Callsites:
        - Src:             'xmss_hash.c:45,3'
          Dst:             to_byte
        - Src:             'xmss_hash.c:56,5'
          Dst:             SHA256
        - Src:             'xmss_hash.c:56,5'
          Dst:             SHA256
        - Src:             'xmss_hash.c:61,7'
          Dst:             SHA512
        - Src:             'xmss_hash.c:61,7'
          Dst:             SHA512
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    SHA256
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    SHA512
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    hash_h
      functionSourceFile: '/src/openssh/xmss_hash.c'
      linkageType:     InternalLinkage
      functionLinenumber: 92
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          131
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - addr_to_byte
        - core_hash_SHA2
        - prf
        - setKeyAndMask
      functionUses:    8
      BranchProfiles:
        - Branch String:   'xmss_hash.c:110,3'
          Branch Sides:
            - BranchSide:      'xmss_hash.c:111,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - core_hash_SHA2
                - llvm.stackrestore
            - BranchSide:      'xmss_hash.c:113,25'
              BranchSideFuncs:
                - core_hash_SHA2
                - llvm.stackrestore
      Callsites:
        - Src:             'xmss_hash.c:100,3'
          Dst:             setKeyAndMask
        - Src:             'xmss_hash.c:101,3'
          Dst:             addr_to_byte
        - Src:             'xmss_hash.c:102,3'
          Dst:             prf
        - Src:             'xmss_hash.c:104,3'
          Dst:             setKeyAndMask
        - Src:             'xmss_hash.c:105,3'
          Dst:             addr_to_byte
        - Src:             'xmss_hash.c:106,3'
          Dst:             prf
        - Src:             'xmss_hash.c:107,3'
          Dst:             setKeyAndMask
        - Src:             'xmss_hash.c:108,3'
          Dst:             addr_to_byte
        - Src:             'xmss_hash.c:109,3'
          Dst:             prf
        - Src:             'xmss_hash.c:113,10'
          Dst:             core_hash_SHA2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    h_msg
      functionSourceFile: '/src/openssh/xmss_hash.c'
      linkageType:     InternalLinkage
      functionLinenumber: 80
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          54
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - core_hash_SHA2
      functionUses:    4
      BranchProfiles:
        - Branch String:   'xmss_hash.c:81,7'
          Branch Sides:
            - BranchSide:      'xmss_hash.c:83,5'
              BranchSideFuncs: []
            - BranchSide:      'xmss_hash.c:85,25'
              BranchSideFuncs:
                - core_hash_SHA2
      Callsites:
        - Src:             'xmss_hash.c:85,10'
          Dst:             core_hash_SHA2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setTreeIndex
      functionSourceFile: '/src/openssh/xmss_hash_address.c'
      linkageType:     InternalLinkage
      functionLinenumber: 63
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setTreeHeight
      functionSourceFile: '/src/openssh/xmss_hash_address.c'
      linkageType:     InternalLinkage
      functionLinenumber: 59
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    8
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setLtreeADRS
      functionSourceFile: '/src/openssh/xmss_hash_address.c'
      linkageType:     InternalLinkage
      functionLinenumber: 53
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setHashADRS
      functionSourceFile: '/src/openssh/xmss_hash_address.c'
      linkageType:     InternalLinkage
      functionLinenumber: 47
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setChainADRS
      functionSourceFile: '/src/openssh/xmss_hash_address.c'
      linkageType:     InternalLinkage
      functionLinenumber: 43
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setOTSADRS
      functionSourceFile: '/src/openssh/xmss_hash_address.c'
      linkageType:     InternalLinkage
      functionLinenumber: 39
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    10
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setKeyAndMask
      functionSourceFile: '/src/openssh/xmss_hash_address.c'
      linkageType:     InternalLinkage
      functionLinenumber: 33
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    6
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setType
      functionSourceFile: '/src/openssh/xmss_hash_address.c'
      linkageType:     InternalLinkage
      functionLinenumber: 25
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         5
      ICount:          38
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    23
      BranchProfiles:
        - Branch String:   'xmss_hash_address.c:28,3'
          Branch Sides:
            - BranchSide:      'xmss_hash_address.c:29,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'xmss_hash_address.c:31,1'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setTreeADRS
      functionSourceFile: '/src/openssh/xmss_hash_address.c'
      linkageType:     InternalLinkage
      functionLinenumber: 20
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          21
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setLayerADRS
      functionSourceFile: '/src/openssh/xmss_hash_address.c'
      linkageType:     InternalLinkage
      functionLinenumber: 16
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    wots_pkFromSig
      functionSourceFile: '/src/openssh/xmss_wots.c'
      linkageType:     InternalLinkage
      functionLinenumber: 159
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
        - 'struct.wots_params *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         18
      ICount:          238
      EdgeCount:       22
      CyclomaticComplexity: 6
      functionsReached:
        - base_w
        - calloc
        - gen_chain
        - setChainADRS
        - to_byte
      functionUses:    3
      BranchProfiles:
        - Branch String:   'xmss_wots.c:163,7'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:164,5'
              BranchSideFuncs: []
            - BranchSide:      'xmss_wots.c:166,10'
              BranchSideFuncs:
                - base_w
                - __sanitizer_cov_trace_cmp4
                - llvm.stacksave
                - to_byte
                - base_w
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - llvm.stackrestore
                - setChainADRS
                - gen_chain
        - Branch String:   'xmss_wots.c:168,3'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:169,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - llvm.stacksave
                - to_byte
                - base_w
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - llvm.stackrestore
                - setChainADRS
                - gen_chain
            - BranchSide:      'xmss_wots.c:172,10'
              BranchSideFuncs:
                - llvm.stacksave
                - to_byte
                - base_w
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - llvm.stackrestore
                - setChainADRS
                - gen_chain
        - Branch String:   'xmss_wots.c:182,3'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:183,43'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - llvm.stackrestore
                - setChainADRS
                - gen_chain
            - BranchSide:      'xmss_wots.c:185,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - free
                - llvm.stackrestore
                - setChainADRS
                - gen_chain
        - Branch String:   'xmss_wots.c:185,3'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:186,18'
              BranchSideFuncs:
                - setChainADRS
                - gen_chain
                - __sanitizer_cov_trace_cmp4
                - free
                - llvm.stackrestore
            - BranchSide:      'xmss_wots.c:189,8'
              BranchSideFuncs:
                - free
                - llvm.stackrestore
      Callsites:
        - Src:             'xmss_wots.c:162,16'
          Dst:             calloc
        - Src:             'xmss_wots.c:166,3'
          Dst:             base_w
        - Src:             'xmss_wots.c:177,3'
          Dst:             to_byte
        - Src:             'xmss_wots.c:180,3'
          Dst:             base_w
        - Src:             'xmss_wots.c:186,5'
          Dst:             setChainADRS
        - Src:             'xmss_wots.c:187,5'
          Dst:             gen_chain
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    base_w
      functionSourceFile: '/src/openssh/xmss_wots.c'
      linkageType:     InternalLinkage
      functionLinenumber: 89
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'int *'
        - 'int '
        - 'char *'
        - 'struct.wots_params *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          96
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    4
      BranchProfiles:
        - Branch String:   'xmss_wots.c:96,3'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:97,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_wots.c:106,1'
              BranchSideFuncs: []
        - Branch String:   'xmss_wots.c:97,9'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:98,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'xmss_wots.c:102,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    gen_chain
      functionSourceFile: '/src/openssh/xmss_wots.c'
      linkageType:     InternalLinkage
      functionLinenumber: 72
      functionDepth:   0
      returnType:      'N/A'
      argCount:        7
      argTypes:
        - 'char *'
        - 'char *'
        - 'int '
        - 'int '
        - 'struct.wots_params *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         14
      ICount:          111
      EdgeCount:       17
      CyclomaticComplexity: 5
      functionsReached:
        - hash_f
        - setHashADRS
      functionUses:    3
      BranchProfiles:
        - Branch String:   'xmss_wots.c:74,3'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:75,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - setHashADRS
                - hash_f
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_wots.c:77,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - setHashADRS
                - hash_f
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_wots.c:77,37'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:77,40'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - setHashADRS
                - hash_f
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_wots.c:77,3'
              BranchSideFuncs:
                - setHashADRS
                - hash_f
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'xmss_wots.c:77,3'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:78,17'
              BranchSideFuncs:
                - setHashADRS
                - hash_f
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_wots.c:81,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'xmss_wots.c:78,5'
          Dst:             setHashADRS
        - Src:             'xmss_wots.c:79,5'
          Dst:             hash_f
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    wots_sign
      functionSourceFile: '/src/openssh/xmss_wots.c'
      linkageType:     InternalLinkage
      functionLinenumber: 120
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
        - 'struct.wots_params *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         18
      ICount:          232
      EdgeCount:       22
      CyclomaticComplexity: 6
      functionsReached:
        - base_w
        - calloc
        - expand_seed
        - gen_chain
        - setChainADRS
        - to_byte
      functionUses:    4
      BranchProfiles:
        - Branch String:   'xmss_wots.c:125,7'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:126,5'
              BranchSideFuncs: []
            - BranchSide:      'xmss_wots.c:128,10'
              BranchSideFuncs:
                - base_w
                - __sanitizer_cov_trace_cmp4
                - llvm.stacksave
                - to_byte
                - base_w
                - __sanitizer_cov_trace_cmp4
                - expand_seed
                - __sanitizer_cov_trace_cmp4
                - free
                - llvm.stackrestore
                - setChainADRS
                - gen_chain
        - Branch String:   'xmss_wots.c:130,3'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:131,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - llvm.stacksave
                - to_byte
                - base_w
                - __sanitizer_cov_trace_cmp4
                - expand_seed
                - __sanitizer_cov_trace_cmp4
                - free
                - llvm.stackrestore
                - setChainADRS
                - gen_chain
            - BranchSide:      'xmss_wots.c:134,10'
              BranchSideFuncs:
                - llvm.stacksave
                - to_byte
                - base_w
                - __sanitizer_cov_trace_cmp4
                - expand_seed
                - __sanitizer_cov_trace_cmp4
                - free
                - llvm.stackrestore
                - setChainADRS
                - gen_chain
        - Branch String:   'xmss_wots.c:144,3'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:145,43'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - expand_seed
                - __sanitizer_cov_trace_cmp4
                - free
                - llvm.stackrestore
                - setChainADRS
                - gen_chain
            - BranchSide:      'xmss_wots.c:148,15'
              BranchSideFuncs:
                - expand_seed
                - __sanitizer_cov_trace_cmp4
                - free
                - llvm.stackrestore
                - setChainADRS
                - gen_chain
        - Branch String:   'xmss_wots.c:150,3'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:151,18'
              BranchSideFuncs:
                - setChainADRS
                - gen_chain
                - __sanitizer_cov_trace_cmp4
                - free
                - llvm.stackrestore
            - BranchSide:      'xmss_wots.c:154,8'
              BranchSideFuncs:
                - free
                - llvm.stackrestore
      Callsites:
        - Src:             'xmss_wots.c:124,16'
          Dst:             calloc
        - Src:             'xmss_wots.c:128,3'
          Dst:             base_w
        - Src:             'xmss_wots.c:139,3'
          Dst:             to_byte
        - Src:             'xmss_wots.c:142,3'
          Dst:             base_w
        - Src:             'xmss_wots.c:148,3'
          Dst:             expand_seed
        - Src:             'xmss_wots.c:151,5'
          Dst:             setChainADRS
        - Src:             'xmss_wots.c:152,5'
          Dst:             gen_chain
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    expand_seed
      functionSourceFile: '/src/openssh/xmss_wots.c'
      linkageType:     InternalLinkage
      functionLinenumber: 55
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'struct.wots_params *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          63
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - prf
        - to_byte
      functionUses:    2
      BranchProfiles:
        - Branch String:   'xmss_wots.c:58,3'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:59,13'
              BranchSideFuncs:
                - to_byte
                - prf
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_wots.c:62,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'xmss_wots.c:59,5'
          Dst:             to_byte
        - Src:             'xmss_wots.c:60,5'
          Dst:             prf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    wots_pkgen
      functionSourceFile: '/src/openssh/xmss_wots.c'
      linkageType:     InternalLinkage
      functionLinenumber: 109
      functionDepth:   0
      returnType:      'N/A'
      argCount:        5
      argTypes:
        - 'char *'
        - 'char *'
        - 'struct.wots_params *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          79
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - expand_seed
        - gen_chain
        - setChainADRS
      functionUses:    1
      BranchProfiles:
        - Branch String:   'xmss_wots.c:112,3'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:113,18'
              BranchSideFuncs:
                - setChainADRS
                - gen_chain
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'xmss_wots.c:116,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'xmss_wots.c:111,3'
          Dst:             expand_seed
        - Src:             'xmss_wots.c:113,5'
          Dst:             setChainADRS
        - Src:             'xmss_wots.c:114,5'
          Dst:             gen_chain
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    wots_log2
      functionSourceFile: '/src/openssh/xmss_wots.c'
      linkageType:     InternalLinkage
      functionLinenumber: 26
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         8
      ICount:          43
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'xmss_wots.c:29,3'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:30,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'xmss_wots.c:34,3'
              BranchSideFuncs: []
        - Branch String:   'xmss_wots.c:30,9'
          Branch Sides:
            - BranchSide:      'xmss_wots.c:31,14'
              BranchSideFuncs: []
            - BranchSide:      'xmss_wots.c:33,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    wots_set_params
      functionSourceFile: '/src/openssh/xmss_wots.c'
      linkageType:     InternalLinkage
      functionLinenumber: 39
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.wots_params *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          79
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - wots_log2
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'xmss_wots.c:42,19'
          Dst:             wots_log2
        - Src:             'xmss_wots.c:44,20'
          Dst:             wots_log2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_set_keyiv
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 500
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshcipher_ctx *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         19
      ICount:          127
      EdgeCount:       26
      CyclomaticComplexity: 9
      functionsReached:
        - EVP_CIPHER_CTX_ctrl
        - EVP_CIPHER_CTX_iv_length
        - EVP_CIPHER_CTX_set_iv
        - cipher_authlen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'cipher.c:506,6'
          Branch Sides:
            - BranchSide:      'cipher.c:507,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:508,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_set_iv
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:508,6'
          Branch Sides:
            - BranchSide:      'cipher.c:509,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:512,36'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_set_iv
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:513,6'
          Branch Sides:
            - BranchSide:      'cipher.c:514,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:515,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_set_iv
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:515,6'
          Branch Sides:
            - BranchSide:      'cipher.c:516,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:517,21'
              BranchSideFuncs:
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_set_iv
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:517,6'
          Branch Sides:
            - BranchSide:      'cipher.c:519,28'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:522,36'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_set_iv
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:519,7'
          Branch Sides:
            - BranchSide:      'cipher.c:521,4'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:522,2'
              BranchSideFuncs: []
        - Branch String:   'cipher.c:522,13'
          Branch Sides:
            - BranchSide:      'cipher.c:0,0'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:523,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'cipher.c:512,11'
          Dst:             EVP_CIPHER_CTX_iv_length
        - Src:             'cipher.c:517,6'
          Dst:             cipher_authlen
        - Src:             'cipher.c:519,8'
          Dst:             EVP_CIPHER_CTX_ctrl
        - Src:             'cipher.c:522,14'
          Dst:             EVP_CIPHER_CTX_set_iv
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_CIPHER_CTX_iv_length
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.evp_cipher_ctx_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    8
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_authlen
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 175
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshcipher *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    14
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_CIPHER_CTX_ctrl
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.evp_cipher_ctx_st *'
        - 'int '
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    6
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_get_keyiv
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 460
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshcipher_ctx *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         28
      ICount:          176
      EdgeCount:       39
      CyclomaticComplexity: 13
      functionsReached:
        - EVP_CIPHER_CTX_ctrl
        - EVP_CIPHER_CTX_get_iv
        - EVP_CIPHER_CTX_iv_length
        - cipher_authlen
      functionUses:    1
      BranchProfiles:
        - Branch String:   'cipher.c:466,6'
          Branch Sides:
            - BranchSide:      'cipher.c:467,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'cipher.c:471,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_get_iv
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'cipher.c:467,7'
          Branch Sides:
            - BranchSide:      'cipher.c:468,4'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:469,3'
              BranchSideFuncs: []
        - Branch String:   'cipher.c:471,6'
          Branch Sides:
            - BranchSide:      'cipher.c:472,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'cipher.c:477,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_get_iv
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:472,7'
          Branch Sides:
            - BranchSide:      'cipher.c:473,4'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:474,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'cipher.c:477,6'
          Branch Sides:
            - BranchSide:      'cipher.c:478,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:481,36'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_get_iv
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:482,6'
          Branch Sides:
            - BranchSide:      'cipher.c:483,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:484,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_get_iv
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:486,6'
          Branch Sides:
            - BranchSide:      'cipher.c:487,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:488,21'
              BranchSideFuncs:
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_get_iv
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:488,6'
          Branch Sides:
            - BranchSide:      'cipher.c:489,28'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:492,36'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_get_iv
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:489,7'
          Branch Sides:
            - BranchSide:      'cipher.c:491,4'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:492,2'
              BranchSideFuncs: []
        - Branch String:   'cipher.c:492,13'
          Branch Sides:
            - BranchSide:      'cipher.c:0,0'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:493,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'cipher.c:481,11'
          Dst:             EVP_CIPHER_CTX_iv_length
        - Src:             'cipher.c:488,6'
          Dst:             cipher_authlen
        - Src:             'cipher.c:489,8'
          Dst:             EVP_CIPHER_CTX_ctrl
        - Src:             'cipher.c:492,14'
          Dst:             EVP_CIPHER_CTX_get_iv
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_get_keyiv_len
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 444
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshcipher_ctx *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          56
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - EVP_CIPHER_CTX_iv_length
      functionUses:    0
      BranchProfiles:
        - Branch String:   'cipher.c:447,6'
          Branch Sides:
            - BranchSide:      'cipher.c:448,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:449,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_iv_length
      Callsites:
        - Src:             'cipher.c:452,9'
          Dst:             EVP_CIPHER_CTX_iv_length
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_free
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 422
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshcipher_ctx *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         12
      ICount:          74
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - EVP_CIPHER_CTX_free
        - chachapoly_free
        - explicit_bzero
        - freezero
      functionUses:    9
      BranchProfiles:
        - Branch String:   'cipher.c:423,6'
          Branch Sides:
            - BranchSide:      'cipher.c:424,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:425,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - explicit_bzero
                - chachapoly_free
        - Branch String:   'cipher.c:425,6'
          Branch Sides:
            - BranchSide:      'cipher.c:426,19'
              BranchSideFuncs:
                - chachapoly_free
                - EVP_CIPHER_CTX_free
                - freezero
            - BranchSide:      'cipher.c:428,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - explicit_bzero
      Callsites:
        - Src:             'cipher.c:426,3'
          Dst:             chachapoly_free
        - Src:             'cipher.c:429,3'
          Dst:             explicit_bzero
        - Src:             'cipher.c:431,2'
          Dst:             EVP_CIPHER_CTX_free
        - Src:             'cipher.c:434,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_CIPHER_CTX_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.evp_cipher_ctx_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_get_length
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 410
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.sshcipher_ctx *'
        - 'int *'
        - 'int '
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          88
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - chachapoly_get_length
      functionUses:    1
      BranchProfiles:
        - Branch String:   'cipher.c:411,6'
          Branch Sides:
            - BranchSide:      'cipher.c:412,32'
              BranchSideFuncs:
                - chachapoly_get_length
            - BranchSide:      'cipher.c:414,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:414,6'
          Branch Sides:
            - BranchSide:      'cipher.c:415,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:416,11'
              BranchSideFuncs: []
      Callsites:
        - Src:             'cipher.c:412,10'
          Dst:             chachapoly_get_length
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_crypt
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 347
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'struct.sshcipher_ctx *'
        - 'int '
        - 'char *'
        - 'char *'
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         42
      ICount:          293
      EdgeCount:       58
      CyclomaticComplexity: 18
      functionsReached:
        - EVP_CIPHER_CTX_ctrl
        - EVP_Cipher
        - chachapoly_crypt
        - cipher_authlen
      functionUses:    9
      BranchProfiles:
        - Branch String:   'cipher.c:348,6'
          Branch Sides:
            - BranchSide:      'cipher.c:349,27'
              BranchSideFuncs:
                - chachapoly_crypt
            - BranchSide:      'cipher.c:352,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'cipher.c:352,6'
          Branch Sides:
            - BranchSide:      'cipher.c:353,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'cipher.c:366,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:366,6'
          Branch Sides:
            - BranchSide:      'cipher.c:369,7'
              BranchSideFuncs:
                - cipher_authlen
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:381,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:369,7'
          Branch Sides:
            - BranchSide:      'cipher.c:370,4'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:372,28'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:372,7'
          Branch Sides:
            - BranchSide:      'cipher.c:374,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:376,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:376,20'
          Branch Sides:
            - BranchSide:      'cipher.c:377,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:380,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:376,7'
          Branch Sides:
            - BranchSide:      'cipher.c:379,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:380,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:381,6'
          Branch Sides:
            - BranchSide:      'cipher.c:382,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:387,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:382,15'
          Branch Sides:
            - BranchSide:      'cipher.c:383,18'
              BranchSideFuncs:
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:385,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:382,7'
          Branch Sides:
            - BranchSide:      'cipher.c:384,4'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:385,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:387,6'
          Branch Sides:
            - BranchSide:      'cipher.c:388,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:389,17'
              BranchSideFuncs:
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:389,6'
          Branch Sides:
            - BranchSide:      'cipher.c:391,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:392,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:392,6'
          Branch Sides:
            - BranchSide:      'cipher.c:394,18'
              BranchSideFuncs:
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:402,2'
              BranchSideFuncs: []
        - Branch String:   'cipher.c:394,7'
          Branch Sides:
            - BranchSide:      'cipher.c:395,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:397,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:397,19'
          Branch Sides:
            - BranchSide:      'cipher.c:398,28'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:401,2'
              BranchSideFuncs: []
        - Branch String:   'cipher.c:397,7'
          Branch Sides:
            - BranchSide:      'cipher.c:400,4'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:401,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'cipher.c:349,10'
          Dst:             chachapoly_crypt
        - Src:             'cipher.c:369,18'
          Dst:             cipher_authlen
        - Src:             'cipher.c:372,8'
          Dst:             EVP_CIPHER_CTX_ctrl
        - Src:             'cipher.c:377,8'
          Dst:             EVP_CIPHER_CTX_ctrl
        - Src:             'cipher.c:383,7'
          Dst:             EVP_Cipher
        - Src:             'cipher.c:389,6'
          Dst:             EVP_Cipher
        - Src:             'cipher.c:394,7'
          Dst:             EVP_Cipher
        - Src:             'cipher.c:398,8'
          Dst:             EVP_CIPHER_CTX_ctrl
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_Cipher
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.evp_cipher_ctx_st *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_init
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 249
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'struct.sshcipher_ctx **'
        - 'struct.sshcipher *'
        - 'char *'
        - 'int '
        - 'char *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         43
      ICount:          301
      EdgeCount:       59
      CyclomaticComplexity: 18
      functionsReached:
        - EVP_CIPHER_CTX_ctrl
        - EVP_CIPHER_CTX_free
        - EVP_CIPHER_CTX_key_length
        - EVP_CIPHER_CTX_new
        - EVP_CIPHER_CTX_set_key_length
        - EVP_CipherInit
        - calloc
        - chachapoly_new
        - cipher_authlen
        - cipher_ivlen
        - freezero
      functionUses:    9
      BranchProfiles:
        - Branch String:   'cipher.c:258,6'
          Branch Sides:
            - BranchSide:      'cipher.c:259,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:261,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - EVP_CIPHER_CTX_new
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - chachapoly_new
                - cipher_ivlen
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'cipher.c:264,31'
          Branch Sides:
            - BranchSide:      'cipher.c:265,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
            - BranchSide:      'cipher.c:266,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
        - Branch String:   'cipher.c:265,18'
          Branch Sides:
            - BranchSide:      'cipher.c:265,21'
              BranchSideFuncs:
                - cipher_ivlen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - EVP_CIPHER_CTX_new
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - chachapoly_new
            - BranchSide:      'cipher.c:270,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - EVP_CIPHER_CTX_new
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - chachapoly_new
        - Branch String:   'cipher.c:264,6'
          Branch Sides:
            - BranchSide:      'cipher.c:266,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
            - BranchSide:      'cipher.c:270,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - EVP_CIPHER_CTX_new
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - chachapoly_new
        - Branch String:   'cipher.c:271,6'
          Branch Sides:
            - BranchSide:      'cipher.c:272,31'
              BranchSideFuncs:
                - chachapoly_new
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
            - BranchSide:      'cipher.c:276,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - EVP_CIPHER_CTX_new
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:276,6'
          Branch Sides:
            - BranchSide:      'cipher.c:277,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
            - BranchSide:      'cipher.c:290,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - EVP_CIPHER_CTX_new
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:291,6'
          Branch Sides:
            - BranchSide:      'cipher.c:292,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
            - BranchSide:      'cipher.c:295,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:295,6'
          Branch Sides:
            - BranchSide:      'cipher.c:297,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
            - BranchSide:      'cipher.c:300,21'
              BranchSideFuncs:
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:300,29'
          Branch Sides:
            - BranchSide:      'cipher.c:301,27'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_ctrl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - EVP_CIPHER_CTX_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:306,35'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:300,6'
          Branch Sides:
            - BranchSide:      'cipher.c:303,7'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:306,35'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - __sanitizer_cov_trace_cmp4
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:307,15'
          Branch Sides:
            - BranchSide:      'cipher.c:307,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:313,21'
              BranchSideFuncs:
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
        - Branch String:   'cipher.c:307,6'
          Branch Sides:
            - BranchSide:      'cipher.c:308,37'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_set_key_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
            - BranchSide:      'cipher.c:313,21'
              BranchSideFuncs:
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
        - Branch String:   'cipher.c:308,7'
          Branch Sides:
            - BranchSide:      'cipher.c:309,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
            - BranchSide:      'cipher.c:312,2'
              BranchSideFuncs:
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
        - Branch String:   'cipher.c:313,6'
          Branch Sides:
            - BranchSide:      'cipher.c:314,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
            - BranchSide:      'cipher.c:317,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_free
                - freezero
        - Branch String:   'cipher.c:320,6'
          Branch Sides:
            - BranchSide:      'cipher.c:322,10'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:324,7'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_free
                - freezero
      Callsites:
        - Src:             'cipher.c:258,12'
          Dst:             calloc
        - Src:             'cipher.c:265,29'
          Dst:             cipher_ivlen
        - Src:             'cipher.c:272,16'
          Dst:             chachapoly_new
        - Src:             'cipher.c:291,17'
          Dst:             EVP_CIPHER_CTX_new
        - Src:             'cipher.c:295,6'
          Dst:             EVP_CipherInit
        - Src:             'cipher.c:300,6'
          Dst:             cipher_authlen
        - Src:             'cipher.c:301,7'
          Dst:             EVP_CIPHER_CTX_ctrl
        - Src:             'cipher.c:306,9'
          Dst:             EVP_CIPHER_CTX_key_length
        - Src:             'cipher.c:308,7'
          Dst:             EVP_CIPHER_CTX_set_key_length
        - Src:             'cipher.c:313,6'
          Dst:             EVP_CipherInit
        - Src:             'cipher.c:326,4'
          Dst:             EVP_CIPHER_CTX_free
        - Src:             'cipher.c:328,4'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_ivlen
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 181
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshcipher *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         7
      ICount:          40
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    11
      BranchProfiles:
        - Branch String:   'cipher.c:186,25'
          Branch Sides:
            - BranchSide:      'cipher.c:186,29'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:187,6'
              BranchSideFuncs: []
        - Branch String:   'cipher.c:186,9'
          Branch Sides:
            - BranchSide:      'cipher.c:187,6'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:187,18'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_CIPHER_CTX_new
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_cipher_ctx_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_CipherInit
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.evp_cipher_ctx_st *'
        - 'struct.evp_cipher_st *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    8
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_CIPHER_CTX_key_length
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.evp_cipher_ctx_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_CIPHER_CTX_set_key_length
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.evp_cipher_ctx_st *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_warning_message
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 238
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.sshcipher_ctx *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         7
      ICount:          32
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'cipher.c:239,17'
          Branch Sides:
            - BranchSide:      'cipher.c:239,20'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:240,3'
              BranchSideFuncs: []
        - Branch String:   'cipher.c:239,6'
          Branch Sides:
            - BranchSide:      'cipher.c:240,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:242,2'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ciphers_valid
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 215
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         23
      ICount:          113
      EdgeCount:       30
      CyclomaticComplexity: 9
      functionsReached:
        - cipher_by_name
        - strcmp
        - strdup
        - strsep
      functionUses:    0
      BranchProfiles:
        - Branch String:   'cipher.c:220,20'
          Branch Sides:
            - BranchSide:      'cipher.c:220,30'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:221,3'
              BranchSideFuncs: []
        - Branch String:   'cipher.c:220,6'
          Branch Sides:
            - BranchSide:      'cipher.c:221,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:222,33'
              BranchSideFuncs:
                - strdup
                - strsep
                - free
                - cipher_by_name
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:222,6'
          Branch Sides:
            - BranchSide:      'cipher.c:223,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:224,12'
              BranchSideFuncs:
                - strsep
                - free
                - cipher_by_name
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:224,40'
          Branch Sides:
            - BranchSide:      'cipher.c:224,44'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - cipher_by_name
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
            - BranchSide:      'cipher.c:224,2'
              BranchSideFuncs:
                - free
                - cipher_by_name
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'cipher.c:224,2'
          Branch Sides:
            - BranchSide:      'cipher.c:226,22'
              BranchSideFuncs:
                - cipher_by_name
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
            - BranchSide:      'cipher.c:232,7'
              BranchSideFuncs:
                - free
        - Branch String:   'cipher.c:227,17'
          Branch Sides:
            - BranchSide:      'cipher.c:227,21'
              BranchSideFuncs:
                - free
            - BranchSide:      'cipher.c:228,9'
              BranchSideFuncs:
                - free
        - Branch String:   'cipher.c:227,7'
          Branch Sides:
            - BranchSide:      'cipher.c:228,9'
              BranchSideFuncs:
                - free
            - BranchSide:      'cipher.c:231,2'
              BranchSideFuncs:
                - strsep
                - free
                - cipher_by_name
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'cipher.c:220,23'
          Dst:             strcmp
        - Src:             'cipher.c:222,26'
          Dst:             strdup
        - Src:             'cipher.c:224,12'
          Dst:             strsep
        - Src:             'cipher.c:226,7'
          Dst:             cipher_by_name
        - Src:             'cipher.c:225,11'
          Dst:             strsep
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_by_name
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 204
      functionDepth:   0
      returnType:      'struct.sshcipher *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          52
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - strcmp
      functionUses:    11
      BranchProfiles:
        - Branch String:   'cipher.c:206,2'
          Branch Sides:
            - BranchSide:      'cipher.c:207,14'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:209,2'
              BranchSideFuncs: []
        - Branch String:   'cipher.c:207,7'
          Branch Sides:
            - BranchSide:      'cipher.c:207,32'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:208,11'
              BranchSideFuncs: []
      Callsites:
        - Src:             'cipher.c:207,7'
          Dst:             strcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_des_ede3_cbc
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_cipher_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_aes_192_cbc
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_cipher_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_aes_256_cbc
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_cipher_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_aes_128_ctr
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_cipher_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_aes_192_ctr
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_cipher_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_aes_256_ctr
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_cipher_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_aes_128_gcm
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_cipher_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_aes_256_gcm
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_cipher_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_ctx_is_plaintext
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 198
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshcipher_ctx *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_is_cbc
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 192
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshcipher *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_seclen
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 167
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshcipher *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          35
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - cipher_keylen
        - strcmp
      functionUses:    2
      BranchProfiles:
        - Branch String:   'cipher.c:168,6'
          Branch Sides:
            - BranchSide:      'cipher.c:169,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher.c:170,23'
              BranchSideFuncs:
                - cipher_keylen
      Callsites:
        - Src:             'cipher.c:168,6'
          Dst:             strcmp
        - Src:             'cipher.c:170,9'
          Dst:             cipher_keylen
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_keylen
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 161
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshcipher *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    13
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_blocksize
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 155
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshcipher *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    8
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    compression_alg_list
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 144
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          12
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cipher_alg_list
      functionSourceFile: '/src/openssh/cipher.c'
      linkageType:     InternalLinkage
      functionLinenumber: 118
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         20
      ICount:          139
      EdgeCount:       26
      CyclomaticComplexity: 8
      functionsReached:
        - realloc
        - strlen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'cipher.c:123,2'
          Branch Sides:
            - BranchSide:      'cipher.c:124,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:139,9'
              BranchSideFuncs: []
        - Branch String:   'cipher.c:124,7'
          Branch Sides:
            - BranchSide:      'cipher.c:125,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:126,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher.c:126,17'
          Branch Sides:
            - BranchSide:      'cipher.c:126,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
            - BranchSide:      'cipher.c:128,7'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'cipher.c:126,7'
          Branch Sides:
            - BranchSide:      'cipher.c:127,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher.c:128,7'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'cipher.c:128,7'
          Branch Sides:
            - BranchSide:      'cipher.c:129,18'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
            - BranchSide:      'cipher.c:130,17'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'cipher.c:131,7'
          Branch Sides:
            - BranchSide:      'cipher.c:132,9'
              BranchSideFuncs:
                - free
            - BranchSide:      'cipher.c:135,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - realloc
                - free
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'cipher.c:130,10'
          Dst:             strlen
        - Src:             'cipher.c:131,14'
          Dst:             realloc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    compat_kex_proposal
      functionSourceFile: '/src/openssh/compat.c'
      linkageType:     InternalLinkage
      functionLinenumber: 143
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         24
      ICount:          135
      EdgeCount:       29
      CyclomaticComplexity: 7
      functionsReached:
        - match_filter_denylist
        - sshfatal
        - sshlog
        - xstrdup
      functionUses:    1
      BranchProfiles:
        - Branch String:   'compat.c:146,6'
          Branch Sides:
            - BranchSide:      'compat.c:147,18'
              BranchSideFuncs:
                - xstrdup
            - BranchSide:      'compat.c:148,2'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshfatal
                - match_filter_denylist
                - free
                - sshfatal
                - match_filter_denylist
                - sshfatal
        - Branch String:   'compat.c:149,6'
          Branch Sides:
            - BranchSide:      'compat.c:150,35'
              BranchSideFuncs:
                - match_filter_denylist
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshfatal
                - match_filter_denylist
                - free
                - sshfatal
                - sshfatal
            - BranchSide:      'compat.c:153,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshfatal
                - match_filter_denylist
                - free
                - sshfatal
        - Branch String:   'compat.c:150,7'
          Branch Sides:
            - BranchSide:      'compat.c:151,43'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'compat.c:152,4'
              BranchSideFuncs:
                - sshfatal
        - Branch String:   'compat.c:153,6'
          Branch Sides:
            - BranchSide:      'compat.c:154,36'
              BranchSideFuncs:
                - match_filter_denylist
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshfatal
                - sshfatal
            - BranchSide:      'compat.c:161,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshfatal
        - Branch String:   'compat.c:154,36'
          Branch Sides:
            - BranchSide:      'compat.c:154,41'
              BranchSideFuncs:
                - match_filter_denylist
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshfatal
                - sshfatal
            - BranchSide:      'compat.c:154,46'
              BranchSideFuncs:
                - match_filter_denylist
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshfatal
                - sshfatal
        - Branch String:   'compat.c:154,7'
          Branch Sides:
            - BranchSide:      'compat.c:157,4'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'compat.c:158,8'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshfatal
        - Branch String:   'compat.c:161,17'
          Branch Sides:
            - BranchSide:      'compat.c:161,21'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'compat.c:162,3'
              BranchSideFuncs:
                - sshfatal
        - Branch String:   'compat.c:161,6'
          Branch Sides:
            - BranchSide:      'compat.c:162,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'compat.c:163,2'
              BranchSideFuncs:
                - sshlog
      Callsites:
        - Src:             'compat.c:147,10'
          Dst:             xstrdup
        - Src:             'compat.c:148,2'
          Dst:             sshlog
        - Src:             'compat.c:150,13'
          Dst:             match_filter_denylist
        - Src:             'compat.c:152,4'
          Dst:             sshfatal
        - Src:             'compat.c:154,14'
          Dst:             match_filter_denylist
        - Src:             'compat.c:157,4'
          Dst:             sshfatal
        - Src:             'compat.c:162,3'
          Dst:             sshfatal
        - Src:             'compat.c:163,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    compat_banner
      functionSourceFile: '/src/openssh/compat.c'
      linkageType:     InternalLinkage
      functionLinenumber: 43
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         10
      ICount:          79
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - match_pattern_list
        - sshlog
      functionUses:    2
      BranchProfiles:
        - Branch String:   'compat.c:129,2'
          Branch Sides:
            - BranchSide:      'compat.c:130,26'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
            - BranchSide:      'compat.c:137,2'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'compat.c:130,7'
          Branch Sides:
            - BranchSide:      'compat.c:131,4'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'compat.c:136,2'
              BranchSideFuncs:
                - sshlog
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
      Callsites:
        - Src:             'compat.c:130,7'
          Dst:             match_pattern_list
        - Src:             'compat.c:131,4'
          Dst:             sshlog
        - Src:             'compat.c:137,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshfatal
      functionSourceFile: '/src/openssh/fatal.c'
      linkageType:     InternalLinkage
      functionLinenumber: 37
      functionDepth:   0
      returnType:      'N/A'
      argCount:        7
      argTypes:
        - 'char *'
        - 'char *'
        - 'int '
        - 'int '
        - 'int '
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          40
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached:
        - cleanup_exit
        - sshlogv
      functionUses:    49
      BranchProfiles:  []
      Callsites:
        - Src:             'fatal.c:43,2'
          Dst:             sshlogv
        - Src:             'fatal.c:45,2'
          Dst:             cleanup_exit
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshlogdirect
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 494
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          33
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - do_log
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'log.c:498,2'
          Dst:             do_log
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    do_log
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 339
      functionDepth:   0
      returnType:      'N/A'
      argCount:        5
      argTypes:
        - 'int '
        - 'int '
        - 'char *'
        - 'char *'
        - 'struct.__va_list_tag *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         45
      ICount:          274
      EdgeCount:       55
      CyclomaticComplexity: 12
      functionsReached:
        - __errno_location
        - closelog
        - openlog
        - snprintf
        - strlcpy
        - strlen
        - strnvis
        - syslog
        - vsnprintf
      functionUses:    2
      BranchProfiles:
        - Branch String:   'log.c:349,25'
          Branch Sides:
            - BranchSide:      'log.c:349,41'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_switch
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'log.c:349,49'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_switch
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'log.c:351,13'
          Branch Sides:
            - BranchSide:      'log.c:351,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'log.c:354,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'log.c:351,6'
          Branch Sides:
            - BranchSide:      'log.c:352,3'
              BranchSideFuncs: []
            - BranchSide:      'log.c:354,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'log.c:354,2'
          Branch Sides:
            - BranchSide:      'log.c:356,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
            - BranchSide:      'log.c:361,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
            - BranchSide:      'log.c:366,7'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
            - BranchSide:      'log.c:369,7'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
            - BranchSide:      'log.c:372,7'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
            - BranchSide:      'log.c:376,7'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
            - BranchSide:      'log.c:380,7'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
            - BranchSide:      'log.c:384,7'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
        - Branch String:   'log.c:356,7'
          Branch Sides:
            - BranchSide:      'log.c:357,8'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
            - BranchSide:      'log.c:358,7'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
        - Branch String:   'log.c:361,7'
          Branch Sides:
            - BranchSide:      'log.c:362,8'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
            - BranchSide:      'log.c:363,7'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
        - Branch String:   'log.c:388,18'
          Branch Sides:
            - BranchSide:      'log.c:388,21'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
                - snprintf
                - vsnprintf
            - BranchSide:      'log.c:392,13'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
        - Branch String:   'log.c:388,6'
          Branch Sides:
            - BranchSide:      'log.c:389,12'
              BranchSideFuncs:
                - snprintf
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
            - BranchSide:      'log.c:392,13'
              BranchSideFuncs:
                - vsnprintf
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
                - snprintf
                - strlcpy
        - Branch String:   'log.c:394,6'
          Branch Sides:
            - BranchSide:      'log.c:395,12'
              BranchSideFuncs:
                - snprintf
                - strlcpy
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
            - BranchSide:      'log.c:398,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strnvis
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'log.c:400,6'
          Branch Sides:
            - BranchSide:      'log.c:402,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
            - BranchSide:      'log.c:406,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - openlog
                - syslog
                - closelog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
        - Branch String:   'log.c:406,13'
          Branch Sides:
            - BranchSide:      'log.c:407,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __errno_location
            - BranchSide:      'log.c:418,11'
              BranchSideFuncs:
                - openlog
                - syslog
                - closelog
                - __errno_location
        - Branch String:   'log.c:408,7'
          Branch Sides:
            - BranchSide:      'log.c:408,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __errno_location
            - BranchSide:      'log.c:409,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - strlen
                - write
                - __errno_location
      Callsites:
        - Src:             'log.c:347,20'
          Dst:             __errno_location
        - Src:             'log.c:389,3'
          Dst:             snprintf
        - Src:             'log.c:390,3'
          Dst:             vsnprintf
        - Src:             'log.c:392,3'
          Dst:             vsnprintf
        - Src:             'log.c:395,3'
          Dst:             snprintf
        - Src:             'log.c:396,3'
          Dst:             strlcpy
        - Src:             'log.c:398,2'
          Dst:             strnvis
        - Src:             'log.c:407,3'
          Dst:             snprintf
        - Src:             'log.c:411,38'
          Dst:             strlen
        - Src:             'log.c:411,9'
          Dst:             write
        - Src:             'log.c:418,3'
          Dst:             openlog
        - Src:             'log.c:419,3'
          Dst:             syslog
        - Src:             'log.c:420,3'
          Dst:             closelog
        - Src:             'log.c:423,2'
          Dst:             __errno_location
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    openlog
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    syslog
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    closelog
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshlogv
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 466
      functionDepth:   0
      returnType:      'N/A'
      argCount:        8
      argTypes:
        - 'char *'
        - 'char *'
        - 'int '
        - 'int '
        - 'int '
        - 'char *'
        - 'char *'
        - 'struct.__va_list_tag *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         19
      ICount:          140
      EdgeCount:       24
      CyclomaticComplexity: 7
      functionsReached:
        - do_log
        - getpid
        - match_pattern_list
        - snprintf
        - strlcpy
        - strrchr
      functionUses:    3
      BranchProfiles:
        - Branch String:   'log.c:473,6'
          Branch Sides:
            - BranchSide:      'log.c:473,42'
              BranchSideFuncs:
                - getpid
                - snprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcpy
                - do_log
                - snprintf
                - snprintf
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'log.c:473,49'
              BranchSideFuncs:
                - getpid
                - snprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcpy
                - do_log
                - snprintf
                - snprintf
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'log.c:475,2'
          Branch Sides:
            - BranchSide:      'log.c:476,26'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcpy
                - do_log
                - snprintf
                - snprintf
            - BranchSide:      'log.c:482,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcpy
                - do_log
                - snprintf
                - snprintf
        - Branch String:   'log.c:476,7'
          Branch Sides:
            - BranchSide:      'log.c:477,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcpy
                - do_log
                - snprintf
                - snprintf
            - BranchSide:      'log.c:480,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcpy
                - do_log
                - snprintf
                - snprintf
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'log.c:482,6'
          Branch Sides:
            - BranchSide:      'log.c:483,12'
              BranchSideFuncs:
                - snprintf
                - do_log
            - BranchSide:      'log.c:484,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlcpy
                - do_log
                - snprintf
        - Branch String:   'log.c:484,11'
          Branch Sides:
            - BranchSide:      'log.c:485,12'
              BranchSideFuncs:
                - snprintf
                - do_log
            - BranchSide:      'log.c:487,11'
              BranchSideFuncs:
                - strlcpy
                - do_log
      Callsites:
        - Src:             'log.c:473,12'
          Dst:             strrchr
        - Src:             'log.c:474,12'
          Dst:             getpid
        - Src:             'log.c:472,2'
          Dst:             snprintf
        - Src:             'log.c:476,7'
          Dst:             match_pattern_list
        - Src:             'log.c:483,3'
          Dst:             snprintf
        - Src:             'log.c:485,3'
          Dst:             snprintf
        - Src:             'log.c:487,3'
          Dst:             strlcpy
        - Src:             'log.c:489,2'
          Dst:             do_log
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strrchr
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getpid
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshlog
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 429
      functionDepth:   0
      returnType:      'N/A'
      argCount:        7
      argTypes:
        - 'char *'
        - 'char *'
        - 'int '
        - 'int '
        - 'int '
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          49
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshlogv
      functionUses:    302
      BranchProfiles:  []
      Callsites:
        - Src:             'log.c:433,2'
          Dst:             sshlogv
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    set_log_handler
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 331
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'func_type *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    log_redirect_stderr_to
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 308
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         11
      ICount:          58
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - __errno_location
        - close
        - exit
        - fprintf
        - open
      functionUses:    0
      BranchProfiles:
        - Branch String:   'log.c:311,6'
          Branch Sides:
            - BranchSide:      'log.c:312,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - close
            - BranchSide:      'log.c:319,17'
              BranchSideFuncs:
                - open
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - fprintf
                - exit
        - Branch String:   'log.c:312,7'
          Branch Sides:
            - BranchSide:      'log.c:313,10'
              BranchSideFuncs:
                - close
            - BranchSide:      'log.c:316,3'
              BranchSideFuncs: []
        - Branch String:   'log.c:319,6'
          Branch Sides:
            - BranchSide:      'log.c:320,11'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - fprintf
                - exit
            - BranchSide:      'log.c:324,18'
              BranchSideFuncs: []
      Callsites:
        - Src:             'log.c:313,4'
          Dst:             close
        - Src:             'log.c:319,12'
          Dst:             open
        - Src:             'log.c:321,16'
          Dst:             __errno_location
        - Src:             'log.c:321,7'
          Dst:             strerror
        - Src:             'log.c:320,3'
          Dst:             fprintf
        - Src:             'log.c:322,3'
          Dst:             exit
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    exit
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    log_is_on_stderr
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 301
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         4
      ICount:          21
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'log.c:302,23'
          Branch Sides:
            - BranchSide:      'log.c:302,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'log.c:302,23'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    log_change_level
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 278
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         14
      ICount:          62
      EdgeCount:       27
      CyclomaticComplexity: 15
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'log.c:280,6'
          Branch Sides:
            - BranchSide:      'log.c:281,3'
              BranchSideFuncs: []
            - BranchSide:      'log.c:283,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
        - Branch String:   'log.c:283,2'
          Branch Sides:
            - BranchSide:      'log.c:292,15'
              BranchSideFuncs: []
            - BranchSide:      'log.c:292,15'
              BranchSideFuncs: []
            - BranchSide:      'log.c:292,15'
              BranchSideFuncs: []
            - BranchSide:      'log.c:292,15'
              BranchSideFuncs: []
            - BranchSide:      'log.c:292,15'
              BranchSideFuncs: []
            - BranchSide:      'log.c:292,15'
              BranchSideFuncs: []
            - BranchSide:      'log.c:292,15'
              BranchSideFuncs: []
            - BranchSide:      'log.c:292,15'
              BranchSideFuncs: []
            - BranchSide:      'log.c:295,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    log_init
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 196
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'char *'
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         25
      ICount:          140
      EdgeCount:       25
      CyclomaticComplexity: 2
      functionsReached:
        - closelog
        - exit
        - fprintf
        - log_change_level
        - openlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'log.c:203,6'
          Branch Sides:
            - BranchSide:      'log.c:204,11'
              BranchSideFuncs:
                - fprintf
                - exit
            - BranchSide:      'log.c:209,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - openlog
                - closelog
                - fprintf
                - exit
        - Branch String:   'log.c:213,6'
          Branch Sides:
            - BranchSide:      'log.c:214,3'
              BranchSideFuncs: []
            - BranchSide:      'log.c:216,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - openlog
                - closelog
                - fprintf
                - exit
        - Branch String:   'log.c:216,2'
          Branch Sides:
            - BranchSide:      'log.c:218,16'
              BranchSideFuncs:
                - openlog
                - closelog
            - BranchSide:      'log.c:221,16'
              BranchSideFuncs:
                - openlog
                - closelog
            - BranchSide:      'log.c:224,16'
              BranchSideFuncs:
                - openlog
                - closelog
            - BranchSide:      'log.c:228,16'
              BranchSideFuncs:
                - openlog
                - closelog
            - BranchSide:      'log.c:232,16'
              BranchSideFuncs:
                - openlog
                - closelog
            - BranchSide:      'log.c:235,16'
              BranchSideFuncs:
                - openlog
                - closelog
            - BranchSide:      'log.c:238,16'
              BranchSideFuncs:
                - openlog
                - closelog
            - BranchSide:      'log.c:241,16'
              BranchSideFuncs:
                - openlog
                - closelog
            - BranchSide:      'log.c:244,16'
              BranchSideFuncs:
                - openlog
                - closelog
            - BranchSide:      'log.c:247,16'
              BranchSideFuncs:
                - openlog
                - closelog
            - BranchSide:      'log.c:250,16'
              BranchSideFuncs:
                - openlog
                - closelog
            - BranchSide:      'log.c:253,16'
              BranchSideFuncs:
                - openlog
                - closelog
            - BranchSide:      'log.c:256,11'
              BranchSideFuncs:
                - fprintf
                - exit
        - Branch String:   'log.c:271,10'
          Branch Sides:
            - BranchSide:      'log.c:271,18'
              BranchSideFuncs:
                - openlog
                - closelog
            - BranchSide:      'log.c:271,26'
              BranchSideFuncs:
                - openlog
                - closelog
      Callsites:
        - Src:             'log.c:203,6'
          Dst:             log_change_level
        - Src:             'log.c:204,3'
          Dst:             fprintf
        - Src:             'log.c:206,3'
          Dst:             exit
        - Src:             'log.c:256,3'
          Dst:             fprintf
        - Src:             'log.c:259,3'
          Dst:             exit
        - Src:             'log.c:271,2'
          Dst:             openlog
        - Src:             'log.c:272,2'
          Dst:             closelog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    log_verbose_reset
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 179
      functionDepth:   0
      returnType:      'N/A'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         7
      ICount:          41
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'log.c:180,9'
          Branch Sides:
            - BranchSide:      'log.c:182,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - free
                - free
            - BranchSide:      'log.c:182,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - free
                - free
        - Branch String:   'log.c:182,2'
          Branch Sides:
            - BranchSide:      'log.c:183,8'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_cmp8
                - free
            - BranchSide:      'log.c:184,7'
              BranchSideFuncs:
                - free
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    log_verbose_add
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 165
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          52
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - recallocarray
        - strdup
      functionUses:    0
      BranchProfiles:
        - Branch String:   'log.c:169,6'
          Branch Sides:
            - BranchSide:      'log.c:169,6'
              BranchSideFuncs:
                - strdup
            - BranchSide:      'log.c:171,17'
              BranchSideFuncs:
                - strdup
        - Branch String:   'log.c:172,7'
          Branch Sides:
            - BranchSide:      'log.c:173,16'
              BranchSideFuncs: []
            - BranchSide:      'log.c:174,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'log.c:169,13'
          Dst:             recallocarray
        - Src:             'log.c:172,36'
          Dst:             strdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    log_level_name
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 154
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         8
      ICount:          52
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'log.c:157,2'
          Branch Sides:
            - BranchSide:      'log.c:158,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'log.c:160,2'
              BranchSideFuncs: []
        - Branch String:   'log.c:158,7'
          Branch Sides:
            - BranchSide:      'log.c:158,28'
              BranchSideFuncs: []
            - BranchSide:      'log.c:159,22'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    log_level_number
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 142
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         13
      ICount:          68
      EdgeCount:       16
      CyclomaticComplexity: 5
      functionsReached:
        - strcasecmp
      functionUses:    0
      BranchProfiles:
        - Branch String:   'log.c:145,6'
          Branch Sides:
            - BranchSide:      'log.c:146,10'
              BranchSideFuncs:
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'log.c:149,2'
              BranchSideFuncs: []
        - Branch String:   'log.c:146,3'
          Branch Sides:
            - BranchSide:      'log.c:147,30'
              BranchSideFuncs:
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'log.c:148,26'
              BranchSideFuncs: []
        - Branch String:   'log.c:147,8'
          Branch Sides:
            - BranchSide:      'log.c:147,48'
              BranchSideFuncs: []
            - BranchSide:      'log.c:148,23'
              BranchSideFuncs: []
      Callsites:
        - Src:             'log.c:147,8'
          Dst:             strcasecmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    log_facility_name
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 131
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         8
      ICount:          52
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'log.c:134,2'
          Branch Sides:
            - BranchSide:      'log.c:135,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'log.c:137,2'
              BranchSideFuncs: []
        - Branch String:   'log.c:135,7'
          Branch Sides:
            - BranchSide:      'log.c:135,32'
              BranchSideFuncs: []
            - BranchSide:      'log.c:136,26'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    log_facility_number
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 119
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         13
      ICount:          68
      EdgeCount:       16
      CyclomaticComplexity: 5
      functionsReached:
        - strcasecmp
      functionUses:    0
      BranchProfiles:
        - Branch String:   'log.c:122,6'
          Branch Sides:
            - BranchSide:      'log.c:123,10'
              BranchSideFuncs:
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'log.c:126,2'
              BranchSideFuncs: []
        - Branch String:   'log.c:123,3'
          Branch Sides:
            - BranchSide:      'log.c:124,34'
              BranchSideFuncs:
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'log.c:125,30'
              BranchSideFuncs: []
        - Branch String:   'log.c:124,8'
          Branch Sides:
            - BranchSide:      'log.c:124,52'
              BranchSideFuncs: []
            - BranchSide:      'log.c:125,27'
              BranchSideFuncs: []
      Callsites:
        - Src:             'log.c:124,8'
          Dst:             strcasecmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    log_level_get
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 113
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         1
      ICount:          5
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshlogdie
      functionSourceFile: '/src/openssh/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 438
      functionDepth:   0
      returnType:      'N/A'
      argCount:        7
      argTypes:
        - 'char *'
        - 'char *'
        - 'int '
        - 'int '
        - 'int '
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          39
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached:
        - cleanup_exit
        - sshlogv
      functionUses:    8
      BranchProfiles:  []
      Callsites:
        - Src:             'log.c:444,2'
          Dst:             sshlogv
        - Src:             'log.c:447,2'
          Dst:             cleanup_exit
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    match_filter_allowlist
      functionSourceFile: '/src/openssh/match.c'
      linkageType:     InternalLinkage
      functionLinenumber: 365
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - filter_list
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'match.c:366,9'
          Dst:             filter_list
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    filter_list
      functionSourceFile: '/src/openssh/match.c'
      linkageType:     InternalLinkage
      functionLinenumber: 322
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         26
      ICount:          148
      EdgeCount:       34
      CyclomaticComplexity: 10
      functionsReached:
        - match_pattern_list
        - strdup
        - strlcat
        - strlen
        - strsep
      functionUses:    2
      BranchProfiles:
        - Branch String:   'match.c:329,23'
          Branch Sides:
            - BranchSide:      'match.c:329,26'
              BranchSideFuncs:
                - free
                - free
            - BranchSide:      'match.c:330,8'
              BranchSideFuncs:
                - free
                - free
        - Branch String:   'match.c:329,6'
          Branch Sides:
            - BranchSide:      'match.c:330,8'
              BranchSideFuncs:
                - free
                - free
            - BranchSide:      'match.c:335,8'
              BranchSideFuncs:
                - strsep
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:337,2'
          Branch Sides:
            - BranchSide:      'match.c:338,26'
              BranchSideFuncs:
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:345,7'
              BranchSideFuncs:
                - free
        - Branch String:   'match.c:339,17'
          Branch Sides:
            - BranchSide:      'match.c:339,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
            - BranchSide:      'match.c:339,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
        - Branch String:   'match.c:339,28'
          Branch Sides:
            - BranchSide:      'match.c:339,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strsep
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
            - BranchSide:      'match.c:340,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strsep
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
        - Branch String:   'match.c:339,42'
          Branch Sides:
            - BranchSide:      'match.c:337,2'
              BranchSideFuncs:
                - strsep
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:339,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strlcat
        - Branch String:   'match.c:339,7'
          Branch Sides:
            - BranchSide:      'match.c:337,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strsep
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
            - BranchSide:      'match.c:340,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - strsep
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
        - Branch String:   'match.c:340,8'
          Branch Sides:
            - BranchSide:      'match.c:341,13'
              BranchSideFuncs:
                - strlcat
                - strlcat
                - strsep
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:342,12'
              BranchSideFuncs:
                - strlcat
                - strsep
                - free
                - match_pattern_list
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strlcat
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'match.c:323,15'
          Dst:             strlen
        - Src:             'match.c:325,20'
          Dst:             strdup
        - Src:             'match.c:337,15'
          Dst:             strsep
        - Src:             'match.c:338,7'
          Dst:             match_pattern_list
        - Src:             'match.c:341,5'
          Dst:             strlcat
        - Src:             'match.c:342,4'
          Dst:             strlcat
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    match_pattern_list
      functionSourceFile: '/src/openssh/match.c'
      linkageType:     InternalLinkage
      functionLinenumber: 123
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         38
      ICount:          240
      EdgeCount:       50
      CyclomaticComplexity: 14
      functionsReached:
        - __ctype_b_loc
        - match_pattern
        - strlen
        - tolower
      functionUses:    14
      BranchProfiles:
        - Branch String:   'match.c:130,2'
          Branch Sides:
            - BranchSide:      'match.c:132,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:171,9'
              BranchSideFuncs: []
        - Branch String:   'match.c:132,7'
          Branch Sides:
            - BranchSide:      'match.c:133,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:136,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:143,15'
          Branch Sides:
            - BranchSide:      'match.c:142,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:143,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:143,41'
          Branch Sides:
            - BranchSide:      'match.c:142,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
            - BranchSide:      'match.c:143,44'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
        - Branch String:   'match.c:142,3'
          Branch Sides:
            - BranchSide:      'match.c:145,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
            - BranchSide:      'match.c:148,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:145,24'
          Branch Sides:
            - BranchSide:      'match.c:145,27'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
            - BranchSide:      'match.c:146,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:145,16'
          Branch Sides:
            - BranchSide:      'match.c:146,24'
              BranchSideFuncs:
                - tolower
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:146,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:148,7'
          Branch Sides:
            - BranchSide:      'match.c:149,4'
              BranchSideFuncs: []
            - BranchSide:      'match.c:152,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:152,15'
          Branch Sides:
            - BranchSide:      'match.c:152,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:156,7'
              BranchSideFuncs:
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:152,7'
          Branch Sides:
            - BranchSide:      'match.c:153,5'
              BranchSideFuncs:
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:156,7'
              BranchSideFuncs:
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:159,7'
          Branch Sides:
            - BranchSide:      'match.c:130,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:160,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:160,8'
          Branch Sides:
            - BranchSide:      'match.c:161,5'
              BranchSideFuncs: []
            - BranchSide:      'match.c:163,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'match.c:127,23'
          Dst:             strlen
        - Src:             'match.c:145,27'
          Dst:             __ctype_b_loc
        - Src:             'match.c:146,8'
          Dst:             tolower
        - Src:             'match.c:159,7'
          Dst:             match_pattern
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    tolower
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    match_pattern
      functionSourceFile: '/src/openssh/match.c'
      linkageType:     InternalLinkage
      functionLinenumber: 58
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         41
      ICount:          209
      EdgeCount:       55
      CyclomaticComplexity: 16
      functionsReached:
        - match_pattern
      functionUses:    7
      BranchProfiles:
        - Branch String:   'match.c:61,7'
          Branch Sides:
            - BranchSide:      'match.c:62,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:64,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:64,7'
          Branch Sides:
            - BranchSide:      'match.c:66,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:101,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'match.c:66,4'
          Branch Sides:
            - BranchSide:      'match.c:67,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:70,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:70,8'
          Branch Sides:
            - BranchSide:      'match.c:71,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:74,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:74,24'
          Branch Sides:
            - BranchSide:      'match.c:74,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:91,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:74,8'
          Branch Sides:
            - BranchSide:      'match.c:80,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:91,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:80,5'
          Branch Sides:
            - BranchSide:      'match.c:81,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:85,5'
              BranchSideFuncs: []
        - Branch String:   'match.c:81,25'
          Branch Sides:
            - BranchSide:      'match.c:82,24'
              BranchSideFuncs:
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'match.c:82,42'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:81,10'
          Branch Sides:
            - BranchSide:      'match.c:82,42'
              BranchSideFuncs: []
            - BranchSide:      'match.c:83,7'
              BranchSideFuncs: []
        - Branch String:   'match.c:91,4'
          Branch Sides:
            - BranchSide:      'match.c:92,23'
              BranchSideFuncs:
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
            - BranchSide:      'match.c:95,4'
              BranchSideFuncs: []
        - Branch String:   'match.c:92,9'
          Branch Sides:
            - BranchSide:      'match.c:92,33'
              BranchSideFuncs: []
            - BranchSide:      'match.c:93,6'
              BranchSideFuncs: []
        - Branch String:   'match.c:101,7'
          Branch Sides:
            - BranchSide:      'match.c:102,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'match.c:105,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'match.c:105,23'
          Branch Sides:
            - BranchSide:      'match.c:105,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:109,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:105,7'
          Branch Sides:
            - BranchSide:      'match.c:106,4'
              BranchSideFuncs: []
            - BranchSide:      'match.c:109,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'match.c:82,10'
          Dst:             match_pattern
        - Src:             'match.c:92,9'
          Dst:             match_pattern
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    match_filter_denylist
      functionSourceFile: '/src/openssh/match.c'
      linkageType:     InternalLinkage
      functionLinenumber: 355
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - filter_list
      functionUses:    3
      BranchProfiles:  []
      Callsites:
        - Src:             'match.c:356,9'
          Dst:             filter_list
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    match_list
      functionSourceFile: '/src/openssh/match.c'
      linkageType:     InternalLinkage
      functionLinenumber: 275
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         37
      ICount:          222
      EdgeCount:       47
      CyclomaticComplexity: 12
      functionsReached:
        - strcmp
        - strlen
        - strsep
        - xstrdup
      functionUses:    8
      BranchProfiles:
        - Branch String:   'match.c:283,38'
          Branch Sides:
            - BranchSide:      'match.c:283,42'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strsep
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
            - BranchSide:      'match.c:283,2'
              BranchSideFuncs:
                - strsep
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strsep
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:283,2'
          Branch Sides:
            - BranchSide:      'match.c:285,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strsep
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:290,15'
              BranchSideFuncs:
                - strsep
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strsep
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:285,7'
          Branch Sides:
            - BranchSide:      'match.c:286,20'
              BranchSideFuncs:
                - strsep
                - strsep
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strsep
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:288,4'
              BranchSideFuncs:
                - strsep
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strsep
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:292,38'
          Branch Sides:
            - BranchSide:      'match.c:292,42'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strsep
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - free
                - free
                - strlen
            - BranchSide:      'match.c:292,2'
              BranchSideFuncs:
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - free
                - free
                - strlen
        - Branch String:   'match.c:292,2'
          Branch Sides:
            - BranchSide:      'match.c:294,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - strsep
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - free
                - free
                - strlen
            - BranchSide:      'match.c:306,6'
              BranchSideFuncs:
                - free
                - free
                - strlen
        - Branch String:   'match.c:294,3'
          Branch Sides:
            - BranchSide:      'match.c:295,15'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - strsep
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - free
                - free
                - strlen
            - BranchSide:      'match.c:305,2'
              BranchSideFuncs:
                - strsep
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:295,8'
          Branch Sides:
            - BranchSide:      'match.c:296,19'
              BranchSideFuncs:
                - xstrdup
                - free
                - free
                - strlen
            - BranchSide:      'match.c:304,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - strsep
                - free
                - free
                - strlen
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - free
                - free
                - strlen
        - Branch String:   'match.c:297,9'
          Branch Sides:
            - BranchSide:      'match.c:298,15'
              BranchSideFuncs:
                - free
                - free
                - strlen
            - BranchSide:      'match.c:300,10'
              BranchSideFuncs:
                - free
                - free
        - Branch String:   'match.c:298,14'
          Branch Sides:
            - BranchSide:      'match.c:299,17'
              BranchSideFuncs:
                - strlen
                - free
                - free
            - BranchSide:      'match.c:299,30'
              BranchSideFuncs:
                - free
                - free
        - Branch String:   'match.c:306,6'
          Branch Sides:
            - BranchSide:      'match.c:307,18'
              BranchSideFuncs:
                - strlen
                - free
                - free
            - BranchSide:      'match.c:308,7'
              BranchSideFuncs:
                - free
                - free
      Callsites:
        - Src:             'match.c:280,11'
          Dst:             xstrdup
        - Src:             'match.c:281,11'
          Dst:             xstrdup
        - Src:             'match.c:283,12'
          Dst:             strsep
        - Src:             'match.c:284,11'
          Dst:             strsep
        - Src:             'match.c:292,12'
          Dst:             strsep
        - Src:             'match.c:295,8'
          Dst:             strcmp
        - Src:             'match.c:296,11'
          Dst:             xstrdup
        - Src:             'match.c:299,10'
          Dst:             strlen
        - Src:             'match.c:293,11'
          Dst:             strsep
        - Src:             'match.c:307,11'
          Dst:             strlen
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    match_user
      functionSourceFile: '/src/openssh/match.c'
      linkageType:     InternalLinkage
      functionLinenumber: 238
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         23
      ICount:          134
      EdgeCount:       31
      CyclomaticComplexity: 10
      functionsReached:
        - match_host_and_ip
        - match_pattern
        - strchr
        - xstrdup
      functionUses:    0
      BranchProfiles:
        - Branch String:   'match.c:243,19'
          Branch Sides:
            - BranchSide:      'match.c:243,22'
              BranchSideFuncs:
                - strchr
                - xstrdup
                - strchr
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_host_and_ip
                - match_pattern
                - strchr
                - match_host_and_ip
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:250,6'
              BranchSideFuncs:
                - strchr
                - xstrdup
                - strchr
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_host_and_ip
                - match_pattern
        - Branch String:   'match.c:243,35'
          Branch Sides:
            - BranchSide:      'match.c:243,38'
              BranchSideFuncs:
                - strchr
                - xstrdup
                - strchr
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_host_and_ip
                - match_pattern
                - strchr
                - match_host_and_ip
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:250,6'
              BranchSideFuncs:
                - strchr
                - xstrdup
                - strchr
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_host_and_ip
                - match_pattern
        - Branch String:   'match.c:243,6'
          Branch Sides:
            - BranchSide:      'match.c:244,19'
              BranchSideFuncs:
                - strchr
                - match_host_and_ip
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:250,6'
              BranchSideFuncs:
                - strchr
                - xstrdup
                - strchr
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_host_and_ip
                - match_pattern
        - Branch String:   'match.c:244,42'
          Branch Sides:
            - BranchSide:      'match.c:245,37'
              BranchSideFuncs:
                - match_host_and_ip
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:247,3'
              BranchSideFuncs: []
        - Branch String:   'match.c:244,7'
          Branch Sides:
            - BranchSide:      'match.c:246,4'
              BranchSideFuncs: []
            - BranchSide:      'match.c:247,3'
              BranchSideFuncs: []
        - Branch String:   'match.c:250,6'
          Branch Sides:
            - BranchSide:      'match.c:251,3'
              BranchSideFuncs: []
            - BranchSide:      'match.c:253,18'
              BranchSideFuncs:
                - strchr
                - xstrdup
                - strchr
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_host_and_ip
                - match_pattern
        - Branch String:   'match.c:253,6'
          Branch Sides:
            - BranchSide:      'match.c:254,24'
              BranchSideFuncs:
                - match_pattern
            - BranchSide:      'match.c:256,16'
              BranchSideFuncs:
                - xstrdup
                - strchr
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_host_and_ip
        - Branch String:   'match.c:260,6'
          Branch Sides:
            - BranchSide:      'match.c:261,27'
              BranchSideFuncs:
                - match_host_and_ip
                - free
            - BranchSide:      'match.c:262,7'
              BranchSideFuncs:
                - free
      Callsites:
        - Src:             'match.c:244,12'
          Dst:             strchr
        - Src:             'match.c:245,7'
          Dst:             match_host_and_ip
        - Src:             'match.c:253,11'
          Dst:             strchr
        - Src:             'match.c:254,10'
          Dst:             match_pattern
        - Src:             'match.c:256,8'
          Dst:             xstrdup
        - Src:             'match.c:257,6'
          Dst:             strchr
        - Src:             'match.c:260,13'
          Dst:             match_pattern
        - Src:             'match.c:261,9'
          Dst:             match_host_and_ip
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strchr
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    18
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    match_host_and_ip
      functionSourceFile: '/src/openssh/match.c'
      linkageType:     InternalLinkage
      functionLinenumber: 213
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         21
      ICount:          98
      EdgeCount:       28
      CyclomaticComplexity: 9
      functionsReached:
        - addr_match_list
        - match_hostname
      functionUses:    2
      BranchProfiles:
        - Branch String:   'match.c:216,6'
          Branch Sides:
            - BranchSide:      'match.c:217,3'
              BranchSideFuncs: []
            - BranchSide:      'match.c:218,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - match_hostname
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:218,24'
          Branch Sides:
            - BranchSide:      'match.c:218,27'
              BranchSideFuncs: []
            - BranchSide:      'match.c:219,3'
              BranchSideFuncs: []
        - Branch String:   'match.c:218,42'
          Branch Sides:
            - BranchSide:      'match.c:218,45'
              BranchSideFuncs: []
            - BranchSide:      'match.c:219,3'
              BranchSideFuncs: []
        - Branch String:   'match.c:222,6'
          Branch Sides:
            - BranchSide:      'match.c:223,3'
              BranchSideFuncs: []
            - BranchSide:      'match.c:225,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'match.c:225,17'
          Branch Sides:
            - BranchSide:      'match.c:225,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'match.c:227,2'
              BranchSideFuncs: []
        - Branch String:   'match.c:225,6'
          Branch Sides:
            - BranchSide:      'match.c:226,3'
              BranchSideFuncs: []
            - BranchSide:      'match.c:227,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'match.c:216,13'
          Dst:             addr_match_list
        - Src:             'match.c:222,15'
          Dst:             match_hostname
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    match_hostname
      functionSourceFile: '/src/openssh/match.c'
      linkageType:     InternalLinkage
      functionLinenumber: 195
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          33
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - lowercase
        - match_pattern_list
        - xstrdup
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'match.c:196,19'
          Dst:             xstrdup
        - Src:             'match.c:199,2'
          Dst:             lowercase
        - Src:             'match.c:200,6'
          Dst:             match_pattern_list
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    match_usergroup_pattern_list
      functionSourceFile: '/src/openssh/match.c'
      linkageType:     InternalLinkage
      functionLinenumber: 177
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - match_pattern_list
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'match.c:183,9'
          Dst:             match_pattern_list
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_add_padding
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2716
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          16
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_send_mux
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2624
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         20
      ICount:          159
      EdgeCount:       26
      CyclomaticComplexity: 8
      functionsReached:
        - ssh_packet_log_type
        - sshbuf_len
        - sshbuf_mutable_ptr
        - sshbuf_putb
        - sshbuf_reset
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:2630,6'
          Branch Sides:
            - BranchSide:      'packet.c:2631,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2632,19'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:2633,6'
          Branch Sides:
            - BranchSide:      'packet.c:2634,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2635,26'
              BranchSideFuncs:
                - sshbuf_mutable_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:2637,6'
          Branch Sides:
            - BranchSide:      'packet.c:2638,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:2640,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:2640,38'
          Branch Sides:
            - BranchSide:      'packet.c:2641,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:2648,15'
              BranchSideFuncs:
                - sshbuf_reset
        - Branch String:   'packet.c:2640,6'
          Branch Sides:
            - BranchSide:      'packet.c:2642,3'
              BranchSideFuncs:
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
            - BranchSide:      'packet.c:2648,15'
              BranchSideFuncs:
                - sshbuf_reset
        - Branch String:   'packet.c:2643,7'
          Branch Sides:
            - BranchSide:      'packet.c:2645,11'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2647,2'
              BranchSideFuncs:
                - sshbuf_reset
      Callsites:
        - Src:             'packet.c:2632,8'
          Dst:             sshbuf_len
        - Src:             'packet.c:2635,7'
          Dst:             sshbuf_mutable_ptr
        - Src:             'packet.c:2637,6'
          Dst:             ssh_packet_log_type
        - Src:             'packet.c:2638,3'
          Dst:             sshlog
        - Src:             'packet.c:2643,12'
          Dst:             sshbuf_putb
        - Src:             'packet.c:2648,2'
          Dst:             sshbuf_reset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_log_type
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1055
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         7
      ICount:          33
      EdgeCount:       12
      CyclomaticComplexity: 7
      functionsReached: []
      functionUses:    4
      BranchProfiles:
        - Branch String:   'packet.c:1056,2'
          Branch Sides:
            - BranchSide:      'packet.c:1060,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1060,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1060,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1062,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_msg_ignore
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2665
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         18
      ICount:          105
      EdgeCount:       23
      CyclomaticComplexity: 7
      functionsReached:
        - arc4random
        - sshpkt_put_u32
        - sshpkt_put_u8
        - sshpkt_start
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:2670,52'
          Branch Sides:
            - BranchSide:      'packet.c:2671,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2672,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2670,6'
          Branch Sides:
            - BranchSide:      'packet.c:2672,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2673,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
        - Branch String:   'packet.c:2673,2'
          Branch Sides:
            - BranchSide:      'packet.c:2674,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - arc4random
            - BranchSide:      'packet.c:2680,2'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2674,7'
          Branch Sides:
            - BranchSide:      'packet.c:2675,10'
              BranchSideFuncs:
                - arc4random
                - sshpkt_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:2676,26'
              BranchSideFuncs:
                - sshpkt_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
        - Branch String:   'packet.c:2676,7'
          Branch Sides:
            - BranchSide:      'packet.c:2677,11'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2678,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - arc4random
      Callsites:
        - Src:             'packet.c:2670,11'
          Dst:             sshpkt_start
        - Src:             'packet.c:2671,11'
          Dst:             sshpkt_put_u32
        - Src:             'packet.c:2675,10'
          Dst:             arc4random
        - Src:             'packet.c:2676,12'
          Dst:             sshpkt_put_u8
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_start
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2612
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          37
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - memset
        - sshbuf_put
        - sshbuf_reset
      functionUses:    8
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2616,2'
          Dst:             memset
        - Src:             'packet.c:2618,2'
          Dst:             sshbuf_reset
        - Src:             'packet.c:2619,9'
          Dst:             sshbuf_put
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_put_u32
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2475
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_put_u32
      functionUses:    4
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2476,9'
          Dst:             sshbuf_put_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_put_u8
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2469
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_put_u8
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2470,9'
          Dst:             sshbuf_put_u8
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_ptr
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2602
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          42
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_len
        - sshbuf_ptr
      functionUses:    2
      BranchProfiles:
        - Branch String:   'packet.c:2603,6'
          Branch Sides:
            - BranchSide:      'packet.c:2603,6'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_ptr
            - BranchSide:      'packet.c:2604,22'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_ptr
      Callsites:
        - Src:             'packet.c:2604,11'
          Dst:             sshbuf_len
        - Src:             'packet.c:2605,9'
          Dst:             sshbuf_ptr
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_get_end
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2594
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          35
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_len
      functionUses:    3
      BranchProfiles:
        - Branch String:   'packet.c:2595,6'
          Branch Sides:
            - BranchSide:      'packet.c:2596,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2597,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:2595,6'
          Dst:             sshbuf_len
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_get_bignum2
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2587
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'struct.bignum_st **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_get_bignum2
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2588,9'
          Dst:             sshbuf_get_bignum2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_get_ec
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2580
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'struct.ec_point_st *'
        - 'struct.ec_group_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_get_ec
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2581,9'
          Dst:             sshbuf_get_ec
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_get_cstring
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2572
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_get_cstring
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2573,9'
          Dst:             sshbuf_get_cstring
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_peek_string_direct
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2566
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_peek_string_direct
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2567,9'
          Dst:             sshbuf_peek_string_direct
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_get_string_direct
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2560
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_get_string_direct
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2561,9'
          Dst:             sshbuf_get_string_direct
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_get_u64
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2548
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_get_u64
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2549,9'
          Dst:             sshbuf_get_u64
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_get
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2530
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_get
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2531,9'
          Dst:             sshbuf_get
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_put_bignum2
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2521
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_put_bignum2
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2522,9'
          Dst:             sshbuf_put_bignum2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_put_ec
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2513
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'struct.ec_point_st *'
        - 'struct.ec_group_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_put_ec
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2514,9'
          Dst:             sshbuf_put_ec
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_getb_froms
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2505
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_froms
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2506,9'
          Dst:             sshbuf_froms
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_put_stringb
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2499
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_put_stringb
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2500,9'
          Dst:             sshbuf_put_stringb
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_put_string
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2487
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_put_string
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2488,9'
          Dst:             sshbuf_put_string
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_put_u64
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2481
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_put_u64
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2482,9'
          Dst:             sshbuf_put_u64
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_putb
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2463
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_putb
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2464,9'
          Dst:             sshbuf_putb
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_put
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2457
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_put
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2458,9'
          Dst:             sshbuf_put
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_postauth
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2189
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          46
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - ssh_packet_enable_delayed_compress
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:2196,6'
          Branch Sides:
            - BranchSide:      'packet.c:2197,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2198,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:2192,2'
          Dst:             sshlog
        - Src:             'packet.c:2196,11'
          Dst:             ssh_packet_enable_delayed_compress
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_enable_delayed_compress
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1021
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         26
      ICount:          147
      EdgeCount:       35
      CyclomaticComplexity: 11
      functionsReached:
        - ssh_packet_init_compression
        - start_compression_in
        - start_compression_out
      functionUses:    3
      BranchProfiles:
        - Branch String:   'packet.c:1031,2'
          Branch Sides:
            - BranchSide:      'packet.c:1033,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1049,2'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1033,7'
          Branch Sides:
            - BranchSide:      'packet.c:1034,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1035,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1036,12'
          Branch Sides:
            - BranchSide:      'packet.c:1036,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1048,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1036,30'
          Branch Sides:
            - BranchSide:      'packet.c:1036,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1048,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1036,7'
          Branch Sides:
            - BranchSide:      'packet.c:1037,41'
              BranchSideFuncs:
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1048,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1037,8'
          Branch Sides:
            - BranchSide:      'packet.c:1038,12'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1039,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1039,8'
          Branch Sides:
            - BranchSide:      'packet.c:1040,36'
              BranchSideFuncs:
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1043,35'
              BranchSideFuncs:
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1040,9'
          Branch Sides:
            - BranchSide:      'packet.c:1041,13'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1042,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1043,9'
          Branch Sides:
            - BranchSide:      'packet.c:0,0'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1044,13'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:1037,13'
          Dst:             ssh_packet_init_compression
        - Src:             'packet.c:1040,14'
          Dst:             start_compression_out
        - Src:             'packet.c:1043,14'
          Dst:             start_compression_in
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_init_compression
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 685
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          46
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - sshbuf_new
      functionUses:    2
      BranchProfiles:
        - Branch String:   'packet.c:686,38'
          Branch Sides:
            - BranchSide:      'packet.c:687,41'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:689,2'
              BranchSideFuncs: []
        - Branch String:   'packet.c:686,6'
          Branch Sides:
            - BranchSide:      'packet.c:688,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:689,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:687,41'
          Dst:             sshbuf_new
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    start_compression_out
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 695
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         16
      ICount:          90
      EdgeCount:       18
      CyclomaticComplexity: 4
      functionsReached:
        - deflateEnd
        - deflateInit_
        - sshlog
      functionUses:    2
      BranchProfiles:
        - Branch String:   'packet.c:696,16'
          Branch Sides:
            - BranchSide:      'packet.c:696,19'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:697,3'
              BranchSideFuncs: []
        - Branch String:   'packet.c:696,6'
          Branch Sides:
            - BranchSide:      'packet.c:697,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:698,2'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - deflateInit_
                - __sanitizer_cov_trace_switch
                - deflateEnd
        - Branch String:   'packet.c:699,6'
          Branch Sides:
            - BranchSide:      'packet.c:700,15'
              BranchSideFuncs:
                - deflateEnd
                - deflateInit_
                - __sanitizer_cov_trace_switch
            - BranchSide:      'packet.c:701,10'
              BranchSideFuncs:
                - deflateInit_
                - __sanitizer_cov_trace_switch
        - Branch String:   'packet.c:701,2'
          Branch Sides:
            - BranchSide:      'packet.c:703,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:706,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:708,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:698,2'
          Dst:             sshlog
        - Src:             'packet.c:700,3'
          Dst:             deflateEnd
        - Src:             'packet.c:701,10'
          Dst:             deflateInit_
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    start_compression_in
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 715
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         11
      ICount:          66
      EdgeCount:       11
      CyclomaticComplexity: 2
      functionsReached:
        - inflateEnd
        - inflateInit_
      functionUses:    2
      BranchProfiles:
        - Branch String:   'packet.c:716,6'
          Branch Sides:
            - BranchSide:      'packet.c:717,15'
              BranchSideFuncs:
                - inflateEnd
                - inflateInit_
                - __sanitizer_cov_trace_switch
            - BranchSide:      'packet.c:718,10'
              BranchSideFuncs:
                - inflateInit_
                - __sanitizer_cov_trace_switch
        - Branch String:   'packet.c:718,2'
          Branch Sides:
            - BranchSide:      'packet.c:720,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:723,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:725,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:717,3'
          Dst:             inflateEnd
        - Src:             'packet.c:718,10'
          Dst:             inflateInit_
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    inflateEnd
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.z_stream_s *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    inflateInit_
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.z_stream_s *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    deflateEnd
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.z_stream_s *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    deflateInit_
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.z_stream_s *'
        - 'int '
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    newkeys_from_blob
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2298
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         42
      ICount:          294
      EdgeCount:       59
      CyclomaticComplexity: 19
      functionsReached:
        - calloc
        - cipher_authlen
        - cipher_by_name
        - mac_setup
        - sshbuf_free
        - sshbuf_froms
        - sshbuf_get_cstring
        - sshbuf_get_string
        - sshbuf_get_u32
        - sshbuf_len
      functionUses:    2
      BranchProfiles:
        - Branch String:   'packet.c:2307,6'
          Branch Sides:
            - BranchSide:      'packet.c:2308,5'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2311,24'
              BranchSideFuncs:
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - cipher_by_name
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - free
                - sshbuf_free
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - mac_setup
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:2311,6'
          Branch Sides:
            - BranchSide:      'packet.c:2312,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2316,9'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - cipher_by_name
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - free
                - sshbuf_free
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - mac_setup
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:2320,57'
          Branch Sides:
            - BranchSide:      'packet.c:2321,26'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2325,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
        - Branch String:   'packet.c:2321,59'
          Branch Sides:
            - BranchSide:      'packet.c:2322,26'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2325,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
        - Branch String:   'packet.c:2322,53'
          Branch Sides:
            - BranchSide:      'packet.c:2323,29'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2325,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
        - Branch String:   'packet.c:2323,58'
          Branch Sides:
            - BranchSide:      'packet.c:2324,29'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2325,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
        - Branch String:   'packet.c:2320,6'
          Branch Sides:
            - BranchSide:      'packet.c:2325,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2326,36'
              BranchSideFuncs:
                - cipher_by_name
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - free
                - sshbuf_free
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - mac_setup
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:2326,6'
          Branch Sides:
            - BranchSide:      'packet.c:2327,5'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2330,21'
              BranchSideFuncs:
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - free
                - sshbuf_free
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - mac_setup
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:2330,6'
          Branch Sides:
            - BranchSide:      'packet.c:2331,31'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - mac_setup
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2344,26'
              BranchSideFuncs:
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - free
                - sshbuf_free
        - Branch String:   'packet.c:2331,7'
          Branch Sides:
            - BranchSide:      'packet.c:2332,4'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2333,22'
              BranchSideFuncs:
                - mac_setup
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - free
                - sshbuf_free
        - Branch String:   'packet.c:2333,7'
          Branch Sides:
            - BranchSide:      'packet.c:2334,4'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2335,27'
              BranchSideFuncs:
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - free
                - sshbuf_free
        - Branch String:   'packet.c:2335,60'
          Branch Sides:
            - BranchSide:      'packet.c:2336,30'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2337,4'
              BranchSideFuncs:
                - free
                - sshbuf_free
        - Branch String:   'packet.c:2335,7'
          Branch Sides:
            - BranchSide:      'packet.c:2337,4'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2338,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - free
                - sshbuf_free
        - Branch String:   'packet.c:2338,7'
          Branch Sides:
            - BranchSide:      'packet.c:2339,6'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2342,18'
              BranchSideFuncs:
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - free
                - sshbuf_free
        - Branch String:   'packet.c:2344,48'
          Branch Sides:
            - BranchSide:      'packet.c:2345,30'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2346,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
        - Branch String:   'packet.c:2344,6'
          Branch Sides:
            - BranchSide:      'packet.c:2346,3'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2347,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - free
                - sshbuf_free
        - Branch String:   'packet.c:2347,6'
          Branch Sides:
            - BranchSide:      'packet.c:2348,5'
              BranchSideFuncs:
                - free
                - sshbuf_free
            - BranchSide:      'packet.c:2351,17'
              BranchSideFuncs:
                - free
                - sshbuf_free
      Callsites:
        - Src:             'packet.c:2307,16'
          Dst:             calloc
        - Src:             'packet.c:2311,11'
          Dst:             sshbuf_froms
        - Src:             'packet.c:2320,11'
          Dst:             sshbuf_get_cstring
        - Src:             'packet.c:2321,11'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2322,11'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2323,11'
          Dst:             sshbuf_get_string
        - Src:             'packet.c:2324,11'
          Dst:             sshbuf_get_string
        - Src:             'packet.c:2326,21'
          Dst:             cipher_by_name
        - Src:             'packet.c:2330,6'
          Dst:             cipher_authlen
        - Src:             'packet.c:2331,12'
          Dst:             sshbuf_get_cstring
        - Src:             'packet.c:2333,12'
          Dst:             mac_setup
        - Src:             'packet.c:2335,12'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2336,12'
          Dst:             sshbuf_get_string
        - Src:             'packet.c:2344,11'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2345,11'
          Dst:             sshbuf_get_cstring
        - Src:             'packet.c:2347,6'
          Dst:             sshbuf_len
        - Src:             'packet.c:2358,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_from_blob
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2365
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.kex **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         39
      ICount:          226
      EdgeCount:       54
      CyclomaticComplexity: 17
      functionsReached:
        - kex_free
        - kex_new
        - sshbuf_get_cstring
        - sshbuf_get_stringb
        - sshbuf_get_u32
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:2369,6'
          Branch Sides:
            - BranchSide:      'packet.c:2370,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2371,26'
              BranchSideFuncs:
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
        - Branch String:   'packet.c:2371,50'
          Branch Sides:
            - BranchSide:      'packet.c:2372,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
            - BranchSide:      'packet.c:2382,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
        - Branch String:   'packet.c:2372,64'
          Branch Sides:
            - BranchSide:      'packet.c:2373,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
            - BranchSide:      'packet.c:2382,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
        - Branch String:   'packet.c:2373,64'
          Branch Sides:
            - BranchSide:      'packet.c:2374,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
            - BranchSide:      'packet.c:2382,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
        - Branch String:   'packet.c:2374,63'
          Branch Sides:
            - BranchSide:      'packet.c:2375,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
            - BranchSide:      'packet.c:2382,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
        - Branch String:   'packet.c:2375,51'
          Branch Sides:
            - BranchSide:      'packet.c:2376,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
            - BranchSide:      'packet.c:2382,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
        - Branch String:   'packet.c:2376,48'
          Branch Sides:
            - BranchSide:      'packet.c:2377,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
            - BranchSide:      'packet.c:2382,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
        - Branch String:   'packet.c:2377,50'
          Branch Sides:
            - BranchSide:      'packet.c:2378,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
            - BranchSide:      'packet.c:2382,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
        - Branch String:   'packet.c:2378,60'
          Branch Sides:
            - BranchSide:      'packet.c:2379,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
            - BranchSide:      'packet.c:2382,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
        - Branch String:   'packet.c:2379,60'
          Branch Sides:
            - BranchSide:      'packet.c:2380,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
            - BranchSide:      'packet.c:2382,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
        - Branch String:   'packet.c:2380,56'
          Branch Sides:
            - BranchSide:      'packet.c:2381,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
            - BranchSide:      'packet.c:2382,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
        - Branch String:   'packet.c:2371,6'
          Branch Sides:
            - BranchSide:      'packet.c:2382,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
            - BranchSide:      'packet.c:2383,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
                - kex_free
        - Branch String:   'packet.c:2387,13'
          Branch Sides:
            - BranchSide:      'packet.c:2387,16'
              BranchSideFuncs:
                - kex_free
            - BranchSide:      'packet.c:2388,12'
              BranchSideFuncs:
                - kex_free
        - Branch String:   'packet.c:2387,6'
          Branch Sides:
            - BranchSide:      'packet.c:2388,12'
              BranchSideFuncs:
                - kex_free
            - BranchSide:      'packet.c:2392,13'
              BranchSideFuncs:
                - kex_free
        - Branch String:   'packet.c:2389,7'
          Branch Sides:
            - BranchSide:      'packet.c:2390,5'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2391,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:2369,13'
          Dst:             kex_new
        - Src:             'packet.c:2371,11'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2372,11'
          Dst:             sshbuf_get_cstring
        - Src:             'packet.c:2373,11'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2374,11'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2375,11'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2376,11'
          Dst:             sshbuf_get_stringb
        - Src:             'packet.c:2377,11'
          Dst:             sshbuf_get_stringb
        - Src:             'packet.c:2378,11'
          Dst:             sshbuf_get_stringb
        - Src:             'packet.c:2379,11'
          Dst:             sshbuf_get_stringb
        - Src:             'packet.c:2380,11'
          Dst:             sshbuf_get_stringb
        - Src:             'packet.c:2381,11'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2388,3'
          Dst:             kex_free
        - Src:             'packet.c:2392,3'
          Dst:             kex_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_state
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2404
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         49
      ICount:          314
      EdgeCount:       70
      CyclomaticComplexity: 23
      functionsReached:
        - kex_from_blob
        - monotime
        - newkeys_from_blob
        - ssh_packet_set_postauth
        - ssh_set_newkeys
        - sshbuf_get_string_direct
        - sshbuf_get_u32
        - sshbuf_get_u64
        - sshbuf_len
        - sshbuf_put
        - sshbuf_reset
        - sshlog
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:2410,45'
          Branch Sides:
            - BranchSide:      'packet.c:2411,29'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2423,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2411,53'
          Branch Sides:
            - BranchSide:      'packet.c:2412,29'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2423,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2412,52'
          Branch Sides:
            - BranchSide:      'packet.c:2413,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2423,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2413,56'
          Branch Sides:
            - BranchSide:      'packet.c:2414,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2423,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2414,59'
          Branch Sides:
            - BranchSide:      'packet.c:2415,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2423,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2415,57'
          Branch Sides:
            - BranchSide:      'packet.c:2416,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2423,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2416,58'
          Branch Sides:
            - BranchSide:      'packet.c:2417,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2423,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2417,59'
          Branch Sides:
            - BranchSide:      'packet.c:2418,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2423,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2418,57'
          Branch Sides:
            - BranchSide:      'packet.c:2419,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2423,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2419,57'
          Branch Sides:
            - BranchSide:      'packet.c:2420,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2423,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2420,58'
          Branch Sides:
            - BranchSide:      'packet.c:2421,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2423,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2421,59'
          Branch Sides:
            - BranchSide:      'packet.c:2422,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2423,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2410,6'
          Branch Sides:
            - BranchSide:      'packet.c:2423,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2428,22'
              BranchSideFuncs:
                - monotime
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_set_postauth
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_reset
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
        - Branch String:   'packet.c:2430,47'
          Branch Sides:
            - BranchSide:      'packet.c:2431,27'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2432,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2430,6'
          Branch Sides:
            - BranchSide:      'packet.c:2432,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2434,35'
              BranchSideFuncs:
                - ssh_packet_set_postauth
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_reset
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
        - Branch String:   'packet.c:2434,6'
          Branch Sides:
            - BranchSide:      'packet.c:2435,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2437,15'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_reset
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
        - Branch String:   'packet.c:2439,60'
          Branch Sides:
            - BranchSide:      'packet.c:2440,36'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2443,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2440,61'
          Branch Sides:
            - BranchSide:      'packet.c:2441,22'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2443,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2441,55'
          Branch Sides:
            - BranchSide:      'packet.c:2442,22'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2443,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2439,6'
          Branch Sides:
            - BranchSide:      'packet.c:2443,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2445,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
        - Branch String:   'packet.c:2445,6'
          Branch Sides:
            - BranchSide:      'packet.c:2446,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2447,2'
              BranchSideFuncs:
                - sshlog
      Callsites:
        - Src:             'packet.c:2410,11'
          Dst:             kex_from_blob
        - Src:             'packet.c:2411,11'
          Dst:             newkeys_from_blob
        - Src:             'packet.c:2412,11'
          Dst:             newkeys_from_blob
        - Src:             'packet.c:2413,11'
          Dst:             sshbuf_get_u64
        - Src:             'packet.c:2414,11'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2415,11'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2416,11'
          Dst:             sshbuf_get_u64
        - Src:             'packet.c:2417,11'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2418,11'
          Dst:             sshbuf_get_u64
        - Src:             'packet.c:2419,11'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2420,11'
          Dst:             sshbuf_get_u64
        - Src:             'packet.c:2421,11'
          Dst:             sshbuf_get_u32
        - Src:             'packet.c:2422,11'
          Dst:             sshbuf_get_u64
        - Src:             'packet.c:2428,22'
          Dst:             monotime
        - Src:             'packet.c:2430,11'
          Dst:             ssh_set_newkeys
        - Src:             'packet.c:2431,11'
          Dst:             ssh_set_newkeys
        - Src:             'packet.c:2434,11'
          Dst:             ssh_packet_set_postauth
        - Src:             'packet.c:2437,2'
          Dst:             sshbuf_reset
        - Src:             'packet.c:2438,2'
          Dst:             sshbuf_reset
        - Src:             'packet.c:2439,11'
          Dst:             sshbuf_get_string_direct
        - Src:             'packet.c:2440,11'
          Dst:             sshbuf_get_string_direct
        - Src:             'packet.c:2441,11'
          Dst:             sshbuf_put
        - Src:             'packet.c:2442,11'
          Dst:             sshbuf_put
        - Src:             'packet.c:2445,6'
          Dst:             sshbuf_len
        - Src:             'packet.c:2447,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_set_newkeys
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 862
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         52
      ICount:          459
      EdgeCount:       71
      CyclomaticComplexity: 21
      functionsReached:
        - cipher_authlen
        - cipher_free
        - cipher_init
        - cipher_warning_message
        - kex_free_newkeys
        - mac_init
        - ssh_packet_init_compression
        - sshlog
        - start_compression_in
        - start_compression_out
      functionUses:    4
      BranchProfiles:
        - Branch String:   'packet.c:876,6'
          Branch Sides:
            - BranchSide:      'packet.c:877,10'
              BranchSideFuncs:
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_warning_message
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - mac_init
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - kex_free_newkeys
            - BranchSide:      'packet.c:882,10'
              BranchSideFuncs:
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_warning_message
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - mac_init
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - kex_free_newkeys
        - Branch String:   'packet.c:887,6'
          Branch Sides:
            - BranchSide:      'packet.c:888,3'
              BranchSideFuncs:
                - sshlog
                - kex_free_newkeys
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_warning_message
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - mac_init
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:898,16'
              BranchSideFuncs:
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_warning_message
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - mac_init
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:900,6'
          Branch Sides:
            - BranchSide:      'packet.c:901,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:902,2'
              BranchSideFuncs:
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_warning_message
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - mac_init
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:906,6'
          Branch Sides:
            - BranchSide:      'packet.c:907,21'
              BranchSideFuncs:
                - mac_init
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_warning_message
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'packet.c:910,2'
              BranchSideFuncs:
                - cipher_free
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_warning_message
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:907,7'
          Branch Sides:
            - BranchSide:      'packet.c:908,11'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:909,2'
              BranchSideFuncs:
                - cipher_free
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_warning_message
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:914,6'
          Branch Sides:
            - BranchSide:      'packet.c:916,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:917,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - cipher_warning_message
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:917,34'
          Branch Sides:
            - BranchSide:      'packet.c:918,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:926,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:917,6'
          Branch Sides:
            - BranchSide:      'packet.c:919,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:926,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:926,31'
          Branch Sides:
            - BranchSide:      'packet.c:927,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:928,39'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:927,34'
          Branch Sides:
            - BranchSide:      'packet.c:928,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:945,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:928,36'
          Branch Sides:
            - BranchSide:      'packet.c:928,39'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:945,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:926,6'
          Branch Sides:
            - BranchSide:      'packet.c:929,40'
              BranchSideFuncs:
                - ssh_packet_init_compression
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:945,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:929,7'
          Branch Sides:
            - BranchSide:      'packet.c:930,11'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:931,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:931,7'
          Branch Sides:
            - BranchSide:      'packet.c:932,35'
              BranchSideFuncs:
                - start_compression_out
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'packet.c:935,34'
              BranchSideFuncs:
                - start_compression_in
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:932,8'
          Branch Sides:
            - BranchSide:      'packet.c:933,12'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:934,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:935,8'
          Branch Sides:
            - BranchSide:      'packet.c:0,0'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:936,12'
              BranchSideFuncs: []
        - Branch String:   'packet.c:945,6'
          Branch Sides:
            - BranchSide:      'packet.c:946,34'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'packet.c:948,40'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:949,6'
          Branch Sides:
            - BranchSide:      'packet.c:950,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshlog
            - BranchSide:      'packet.c:952,2'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'packet.c:950,17'
          Branch Sides:
            - BranchSide:      'packet.c:950,4'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'packet.c:950,4'
              BranchSideFuncs:
                - sshlog
      Callsites:
        - Src:             'packet.c:874,2'
          Dst:             sshlog
        - Src:             'packet.c:888,3'
          Dst:             sshlog
        - Src:             'packet.c:894,3'
          Dst:             kex_free_newkeys
        - Src:             'packet.c:906,6'
          Dst:             cipher_authlen
        - Src:             'packet.c:907,12'
          Dst:             mac_init
        - Src:             'packet.c:912,2'
          Dst:             cipher_free
        - Src:             'packet.c:914,11'
          Dst:             cipher_init
        - Src:             'packet.c:918,14'
          Dst:             cipher_warning_message
        - Src:             'packet.c:919,3'
          Dst:             sshlog
        - Src:             'packet.c:929,12'
          Dst:             ssh_packet_init_compression
        - Src:             'packet.c:932,13'
          Dst:             start_compression_out
        - Src:             'packet.c:935,13'
          Dst:             start_compression_in
        - Src:             'packet.c:952,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    newkeys_to_blob
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2227
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         40
      ICount:          287
      EdgeCount:       55
      CyclomaticComplexity: 17
      functionsReached:
        - cipher_authlen
        - cipher_get_keyiv
        - sshbuf_free
        - sshbuf_new
        - sshbuf_put_cstring
        - sshbuf_put_string
        - sshbuf_put_stringb
        - sshbuf_put_u32
      functionUses:    2
      BranchProfiles:
        - Branch String:   'packet.c:2236,6'
          Branch Sides:
            - BranchSide:      'packet.c:2237,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2238,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - cipher_get_keyiv
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - sshbuf_free
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:2241,7'
          Branch Sides:
            - BranchSide:      'packet.c:2241,28'
              BranchSideFuncs:
                - cipher_get_keyiv
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - sshbuf_free
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:2242,6'
              BranchSideFuncs:
                - cipher_get_keyiv
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - sshbuf_free
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:2243,6'
          Branch Sides:
            - BranchSide:      'packet.c:2244,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2245,11'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - sshbuf_free
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:2245,6'
          Branch Sides:
            - BranchSide:      'packet.c:2246,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2247,30'
              BranchSideFuncs:
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - sshbuf_free
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:2247,50'
          Branch Sides:
            - BranchSide:      'packet.c:2248,26'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'packet.c:2252,3'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'packet.c:2248,49'
          Branch Sides:
            - BranchSide:      'packet.c:2249,26'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'packet.c:2252,3'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'packet.c:2249,52'
          Branch Sides:
            - BranchSide:      'packet.c:2250,29'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'packet.c:2252,3'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'packet.c:2250,62'
          Branch Sides:
            - BranchSide:      'packet.c:2251,29'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'packet.c:2252,3'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'packet.c:2247,6'
          Branch Sides:
            - BranchSide:      'packet.c:2252,3'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'packet.c:2253,21'
              BranchSideFuncs:
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - sshbuf_free
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:2253,6'
          Branch Sides:
            - BranchSide:      'packet.c:2254,31'
              BranchSideFuncs:
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - sshbuf_free
            - BranchSide:      'packet.c:2259,26'
              BranchSideFuncs:
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - sshbuf_free
        - Branch String:   'packet.c:2254,51'
          Branch Sides:
            - BranchSide:      'packet.c:2255,27'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'packet.c:2257,4'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'packet.c:2255,50'
          Branch Sides:
            - BranchSide:      'packet.c:2256,30'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'packet.c:2257,4'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'packet.c:2254,7'
          Branch Sides:
            - BranchSide:      'packet.c:2257,4'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'packet.c:2258,2'
              BranchSideFuncs:
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - sshbuf_free
        - Branch String:   'packet.c:2259,47'
          Branch Sides:
            - BranchSide:      'packet.c:2260,30'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'packet.c:2261,3'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'packet.c:2259,6'
          Branch Sides:
            - BranchSide:      'packet.c:2261,3'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'packet.c:2262,25'
              BranchSideFuncs:
                - sshbuf_put_stringb
                - sshbuf_free
      Callsites:
        - Src:             'packet.c:2243,11'
          Dst:             cipher_get_keyiv
        - Src:             'packet.c:2245,11'
          Dst:             sshbuf_new
        - Src:             'packet.c:2247,11'
          Dst:             sshbuf_put_cstring
        - Src:             'packet.c:2248,11'
          Dst:             sshbuf_put_u32
        - Src:             'packet.c:2249,11'
          Dst:             sshbuf_put_u32
        - Src:             'packet.c:2250,11'
          Dst:             sshbuf_put_string
        - Src:             'packet.c:2251,11'
          Dst:             sshbuf_put_string
        - Src:             'packet.c:2253,6'
          Dst:             cipher_authlen
        - Src:             'packet.c:2254,12'
          Dst:             sshbuf_put_cstring
        - Src:             'packet.c:2255,12'
          Dst:             sshbuf_put_u32
        - Src:             'packet.c:2256,12'
          Dst:             sshbuf_put_string
        - Src:             'packet.c:2259,11'
          Dst:             sshbuf_put_u32
        - Src:             'packet.c:2260,11'
          Dst:             sshbuf_put_cstring
        - Src:             'packet.c:2262,6'
          Dst:             sshbuf_put_stringb
        - Src:             'packet.c:2264,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_to_blob
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2206
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.kex *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         27
      ICount:          172
      EdgeCount:       38
      CyclomaticComplexity: 13
      functionsReached:
        - sshbuf_put_cstring
        - sshbuf_put_stringb
        - sshbuf_put_u32
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:2209,49'
          Branch Sides:
            - BranchSide:      'packet.c:2210,30'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2220,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2210,57'
          Branch Sides:
            - BranchSide:      'packet.c:2211,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2220,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2211,54'
          Branch Sides:
            - BranchSide:      'packet.c:2212,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2220,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2212,53'
          Branch Sides:
            - BranchSide:      'packet.c:2213,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2220,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2213,50'
          Branch Sides:
            - BranchSide:      'packet.c:2214,30'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2220,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2214,48'
          Branch Sides:
            - BranchSide:      'packet.c:2215,30'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2220,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2215,50'
          Branch Sides:
            - BranchSide:      'packet.c:2216,30'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2220,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2216,60'
          Branch Sides:
            - BranchSide:      'packet.c:2217,30'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2220,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2217,60'
          Branch Sides:
            - BranchSide:      'packet.c:2218,30'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2220,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2218,56'
          Branch Sides:
            - BranchSide:      'packet.c:2219,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2220,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2209,6'
          Branch Sides:
            - BranchSide:      'packet.c:2220,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2221,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:2209,11'
          Dst:             sshbuf_put_u32
        - Src:             'packet.c:2210,11'
          Dst:             sshbuf_put_cstring
        - Src:             'packet.c:2211,11'
          Dst:             sshbuf_put_u32
        - Src:             'packet.c:2212,11'
          Dst:             sshbuf_put_u32
        - Src:             'packet.c:2213,11'
          Dst:             sshbuf_put_u32
        - Src:             'packet.c:2214,11'
          Dst:             sshbuf_put_stringb
        - Src:             'packet.c:2215,11'
          Dst:             sshbuf_put_stringb
        - Src:             'packet.c:2216,11'
          Dst:             sshbuf_put_stringb
        - Src:             'packet.c:2217,11'
          Dst:             sshbuf_put_stringb
        - Src:             'packet.c:2218,11'
          Dst:             sshbuf_put_stringb
        - Src:             'packet.c:2219,11'
          Dst:             sshbuf_put_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_get_state
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2271
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         35
      ICount:          234
      EdgeCount:       50
      CyclomaticComplexity: 17
      functionsReached:
        - kex_to_blob
        - newkeys_to_blob
        - sshbuf_put_stringb
        - sshbuf_put_u32
        - sshbuf_put_u64
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:2275,42'
          Branch Sides:
            - BranchSide:      'packet.c:2276,27'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2276,51'
          Branch Sides:
            - BranchSide:      'packet.c:2277,27'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2277,50'
          Branch Sides:
            - BranchSide:      'packet.c:2278,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2278,55'
          Branch Sides:
            - BranchSide:      'packet.c:2279,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2279,58'
          Branch Sides:
            - BranchSide:      'packet.c:2280,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2280,56'
          Branch Sides:
            - BranchSide:      'packet.c:2281,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2281,57'
          Branch Sides:
            - BranchSide:      'packet.c:2282,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2282,58'
          Branch Sides:
            - BranchSide:      'packet.c:2283,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2283,56'
          Branch Sides:
            - BranchSide:      'packet.c:2284,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2284,56'
          Branch Sides:
            - BranchSide:      'packet.c:2285,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2285,57'
          Branch Sides:
            - BranchSide:      'packet.c:2286,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2286,58'
          Branch Sides:
            - BranchSide:      'packet.c:2287,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2287,56'
          Branch Sides:
            - BranchSide:      'packet.c:2288,30'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2288,53'
          Branch Sides:
            - BranchSide:      'packet.c:2289,30'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2275,6'
          Branch Sides:
            - BranchSide:      'packet.c:2290,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2292,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:2275,11'
          Dst:             kex_to_blob
        - Src:             'packet.c:2276,11'
          Dst:             newkeys_to_blob
        - Src:             'packet.c:2277,11'
          Dst:             newkeys_to_blob
        - Src:             'packet.c:2278,11'
          Dst:             sshbuf_put_u64
        - Src:             'packet.c:2279,11'
          Dst:             sshbuf_put_u32
        - Src:             'packet.c:2280,11'
          Dst:             sshbuf_put_u32
        - Src:             'packet.c:2281,11'
          Dst:             sshbuf_put_u64
        - Src:             'packet.c:2282,11'
          Dst:             sshbuf_put_u32
        - Src:             'packet.c:2283,11'
          Dst:             sshbuf_put_u64
        - Src:             'packet.c:2284,11'
          Dst:             sshbuf_put_u32
        - Src:             'packet.c:2285,11'
          Dst:             sshbuf_put_u64
        - Src:             'packet.c:2286,11'
          Dst:             sshbuf_put_u32
        - Src:             'packet.c:2287,11'
          Dst:             sshbuf_put_u64
        - Src:             'packet.c:2288,11'
          Dst:             sshbuf_put_stringb
        - Src:             'packet.c:2289,11'
          Dst:             sshbuf_put_stringb
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_get_output
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2182
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          13
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_get_input
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2176
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          13
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_authenticated
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2170
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          12
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_server
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2163
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          17
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_get_rekey_timeout
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2153
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          45
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - monotime
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:2158,10'
          Branch Sides:
            - BranchSide:      'packet.c:2158,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2158,29'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:2157,6'
          Dst:             monotime
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_rekey_limits
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2144
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'size_t '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          35
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshlog
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2145,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_get_maxsize
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2138
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          12
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_alive_timeouts
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2132
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          16
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_inc_alive_timeouts
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2126
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_maxsize
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2106
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          76
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - sshlog
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:2109,6'
          Branch Sides:
            - BranchSide:      'packet.c:2110,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'packet.c:2114,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
        - Branch String:   'packet.c:2114,19'
          Branch Sides:
            - BranchSide:      'packet.c:2114,22'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'packet.c:2115,3'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'packet.c:2114,6'
          Branch Sides:
            - BranchSide:      'packet.c:2115,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'packet.c:2118,2'
              BranchSideFuncs:
                - sshlog
      Callsites:
        - Src:             'packet.c:2110,3'
          Dst:             sshlog
        - Src:             'packet.c:2115,3'
          Dst:             sshlog
        - Src:             'packet.c:2119,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_is_interactive
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2100
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          12
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_interactive
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2079
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'struct.ssh *'
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          77
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - set_nodelay
        - ssh_packet_connection_is_on_socket
        - ssh_packet_set_tos
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:2082,6'
          Branch Sides:
            - BranchSide:      'packet.c:2083,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2084,2'
              BranchSideFuncs:
                - ssh_packet_connection_is_on_socket
                - __sanitizer_cov_trace_const_cmp4
                - set_nodelay
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_set_tos
        - Branch String:   'packet.c:2090,6'
          Branch Sides:
            - BranchSide:      'packet.c:2091,3'
              BranchSideFuncs:
                - set_nodelay
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_set_tos
            - BranchSide:      'packet.c:2092,14'
              BranchSideFuncs:
                - set_nodelay
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_set_tos
        - Branch String:   'packet.c:2093,26'
          Branch Sides:
            - BranchSide:      'packet.c:2093,40'
              BranchSideFuncs:
                - ssh_packet_set_tos
            - BranchSide:      'packet.c:2093,58'
              BranchSideFuncs:
                - ssh_packet_set_tos
      Callsites:
        - Src:             'packet.c:2090,7'
          Dst:             ssh_packet_connection_is_on_socket
        - Src:             'packet.c:2092,2'
          Dst:             set_nodelay
        - Src:             'packet.c:2093,2'
          Dst:             ssh_packet_set_tos
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_connection_is_on_socket
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 435
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         30
      ICount:          176
      EdgeCount:       41
      CyclomaticComplexity: 13
      functionsReached:
        - getpeername
        - memcmp
        - memset
      functionUses:    4
      BranchProfiles:
        - Branch String:   'packet.c:440,18'
          Branch Sides:
            - BranchSide:      'packet.c:440,21'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:441,3'
              BranchSideFuncs: []
        - Branch String:   'packet.c:440,6'
          Branch Sides:
            - BranchSide:      'packet.c:441,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:443,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - memset
                - getpeername
                - __sanitizer_cov_trace_const_cmp4
                - memset
                - getpeername
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:444,33'
          Branch Sides:
            - BranchSide:      'packet.c:444,36'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:445,3'
              BranchSideFuncs: []
        - Branch String:   'packet.c:444,6'
          Branch Sides:
            - BranchSide:      'packet.c:445,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:447,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - memset
                - getpeername
                - __sanitizer_cov_trace_const_cmp4
                - memset
                - getpeername
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:447,6'
          Branch Sides:
            - BranchSide:      'packet.c:448,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:449,10'
              BranchSideFuncs:
                - memset
                - getpeername
                - __sanitizer_cov_trace_const_cmp4
                - memset
                - getpeername
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:451,6'
          Branch Sides:
            - BranchSide:      'packet.c:453,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:454,8'
              BranchSideFuncs:
                - memset
                - getpeername
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:456,6'
          Branch Sides:
            - BranchSide:      'packet.c:458,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:459,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:459,23'
          Branch Sides:
            - BranchSide:      'packet.c:459,33'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:460,3'
              BranchSideFuncs: []
        - Branch String:   'packet.c:459,6'
          Branch Sides:
            - BranchSide:      'packet.c:460,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:461,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:461,32'
          Branch Sides:
            - BranchSide:      'packet.c:461,40'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:463,2'
              BranchSideFuncs: []
        - Branch String:   'packet.c:461,6'
          Branch Sides:
            - BranchSide:      'packet.c:462,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:463,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:450,2'
          Dst:             memset
        - Src:             'packet.c:451,6'
          Dst:             getpeername
        - Src:             'packet.c:455,2'
          Dst:             memset
        - Src:             'packet.c:456,6'
          Dst:             getpeername
        - Src:             'packet.c:459,26'
          Dst:             memcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_tos
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2069
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          46
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - set_sock_tos
        - ssh_packet_connection_is_on_socket
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:2070,47'
          Branch Sides:
            - BranchSide:      'packet.c:2070,50'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - set_sock_tos
            - BranchSide:      'packet.c:2071,3'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2070,6'
          Branch Sides:
            - BranchSide:      'packet.c:2071,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2072,15'
              BranchSideFuncs:
                - set_sock_tos
      Callsites:
        - Src:             'packet.c:2070,7'
          Dst:             ssh_packet_connection_is_on_socket
        - Src:             'packet.c:2072,2'
          Dst:             set_sock_tos
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getpeername
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'struct.sockaddr *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_not_very_much_data_to_write
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2060
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          52
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - sshbuf_len
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:2061,6'
          Branch Sides:
            - BranchSide:      'packet.c:2062,21'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'packet.c:2064,21'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
      Callsites:
        - Src:             'packet.c:2062,10'
          Dst:             sshbuf_len
        - Src:             'packet.c:2064,10'
          Dst:             sshbuf_len
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_have_data_to_write
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2052
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          23
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_len
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2053,9'
          Dst:             sshbuf_len
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_write_poll
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1977
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         20
      ICount:          121
      EdgeCount:       27
      CyclomaticComplexity: 9
      functionsReached:
        - __errno_location
        - sshbuf_consume
        - sshbuf_len
        - sshbuf_ptr
        - write
      functionUses:    2
      BranchProfiles:
        - Branch String:   'packet.c:1982,6'
          Branch Sides:
            - BranchSide:      'packet.c:1983,15'
              BranchSideFuncs:
                - sshbuf_ptr
                - write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1996,2'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1985,7'
          Branch Sides:
            - BranchSide:      'packet.c:1986,8'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1991,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1986,23'
          Branch Sides:
            - BranchSide:      'packet.c:1986,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1988,5'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1986,42'
          Branch Sides:
            - BranchSide:      'packet.c:1987,8'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1988,5'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1986,8'
          Branch Sides:
            - BranchSide:      'packet.c:1988,5'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1989,4'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1991,7'
          Branch Sides:
            - BranchSide:      'packet.c:1992,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1993,27'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1993,7'
          Branch Sides:
            - BranchSide:      'packet.c:1994,11'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1995,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:1979,12'
          Dst:             sshbuf_len
        - Src:             'packet.c:1984,7'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1983,9'
          Dst:             write
        - Src:             'packet.c:1986,8'
          Dst:             __errno_location
        - Src:             'packet.c:1986,26'
          Dst:             __errno_location
        - Src:             'packet.c:1987,8'
          Dst:             __errno_location
        - Src:             'packet.c:1993,12'
          Dst:             sshbuf_consume
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_disconnect
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1934
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          84
      EdgeCount:       9
      CyclomaticComplexity: 2
      functionsReached:
        - cleanup_exit
        - ssh_packet_close
        - ssh_packet_write_wait
        - sshfatal
        - sshlog
        - sshpkt_disconnect
        - sshpkt_fatal
        - sshpkt_fmt_connection_id
        - vsnprintf
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:1940,6'
          Branch Sides:
            - BranchSide:      'packet.c:1941,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'packet.c:1942,16'
              BranchSideFuncs:
                - sshpkt_fmt_connection_id
                - llvm.va_start
                - vsnprintf
                - llvm.va_end
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_close
                - cleanup_exit
                - sshpkt_fatal
                - sshpkt_fatal
        - Branch String:   'packet.c:1960,6'
          Branch Sides:
            - BranchSide:      'packet.c:1961,16'
              BranchSideFuncs:
                - sshpkt_fatal
            - BranchSide:      'packet.c:1963,33'
              BranchSideFuncs:
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_close
                - cleanup_exit
                - sshpkt_fatal
        - Branch String:   'packet.c:1963,6'
          Branch Sides:
            - BranchSide:      'packet.c:1964,16'
              BranchSideFuncs:
                - sshpkt_fatal
            - BranchSide:      'packet.c:1967,19'
              BranchSideFuncs:
                - ssh_packet_close
                - cleanup_exit
      Callsites:
        - Src:             'packet.c:1941,3'
          Dst:             sshfatal
        - Src:             'packet.c:1948,2'
          Dst:             sshpkt_fmt_connection_id
        - Src:             'packet.c:1950,2'
          Dst:             vsnprintf
        - Src:             'packet.c:1954,2'
          Dst:             sshlog
        - Src:             'packet.c:1960,11'
          Dst:             sshpkt_disconnect
        - Src:             'packet.c:1961,3'
          Dst:             sshpkt_fatal
        - Src:             'packet.c:1963,11'
          Dst:             ssh_packet_write_wait
        - Src:             'packet.c:1964,3'
          Dst:             sshpkt_fatal
        - Src:             'packet.c:1967,2'
          Dst:             ssh_packet_close
        - Src:             'packet.c:1968,2'
          Dst:             cleanup_exit
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_fmt_connection_id
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1853
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          50
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - snprintf
        - ssh_remote_ipaddr
      functionUses:    2
      BranchProfiles:
        - Branch String:   'packet.c:1855,6'
          Branch Sides:
            - BranchSide:      'packet.c:1855,26'
              BranchSideFuncs:
                - ssh_remote_ipaddr
                - ssh_remote_port
                - snprintf
            - BranchSide:      'packet.c:1855,6'
              BranchSideFuncs:
                - ssh_remote_ipaddr
                - ssh_remote_port
                - snprintf
      Callsites:
        - Src:             'packet.c:1857,6'
          Dst:             ssh_remote_ipaddr
        - Src:             'packet.c:1857,30'
          Dst:             ssh_remote_port
        - Src:             'packet.c:1854,2'
          Dst:             snprintf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_disconnect
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2695
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         15
      ICount:          94
      EdgeCount:       20
      CyclomaticComplexity: 7
      functionsReached:
        - sshpkt_put_cstring
        - sshpkt_put_u32
        - sshpkt_send
        - sshpkt_start
        - vsnprintf
      functionUses:    6
      BranchProfiles:
        - Branch String:   'packet.c:2704,56'
          Branch Sides:
            - BranchSide:      'packet.c:2705,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2709,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2705,69'
          Branch Sides:
            - BranchSide:      'packet.c:2706,30'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2709,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2706,46'
          Branch Sides:
            - BranchSide:      'packet.c:2707,30'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2709,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2707,45'
          Branch Sides:
            - BranchSide:      'packet.c:2708,23'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2709,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2704,6'
          Branch Sides:
            - BranchSide:      'packet.c:2709,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2710,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:2701,2'
          Dst:             vsnprintf
        - Src:             'packet.c:2704,11'
          Dst:             sshpkt_start
        - Src:             'packet.c:2705,11'
          Dst:             sshpkt_put_u32
        - Src:             'packet.c:2706,11'
          Dst:             sshpkt_put_cstring
        - Src:             'packet.c:2707,11'
          Dst:             sshpkt_put_cstring
        - Src:             'packet.c:2708,11'
          Dst:             sshpkt_send
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_fatal
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1915
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          24
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached:
        - sshlogdie
        - sshpkt_vfatal
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:1920,2'
          Dst:             sshpkt_vfatal
        - Src:             'packet.c:1923,2'
          Dst:             sshlogdie
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_write_wait
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2005
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         34
      ICount:          192
      EdgeCount:       46
      CyclomaticComplexity: 14
      functionsReached:
        - __errno_location
        - monotime_tv
        - ms_subtract_diff
        - ms_to_timespec
        - ppoll
        - ssh_packet_have_data_to_write
        - ssh_packet_write_poll
      functionUses:    5
      BranchProfiles:
        - Branch String:   'packet.c:2012,6'
          Branch Sides:
            - BranchSide:      'packet.c:2013,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2014,2'
              BranchSideFuncs:
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:2014,2'
          Branch Sides:
            - BranchSide:      'packet.c:2015,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
            - BranchSide:      'packet.c:2045,2'
              BranchSideFuncs: []
        - Branch String:   'packet.c:2018,7'
          Branch Sides:
            - BranchSide:      'packet.c:2019,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
            - BranchSide:      'packet.c:2022,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:2023,8'
          Branch Sides:
            - BranchSide:      'packet.c:2024,31'
              BranchSideFuncs:
                - ms_to_timespec
                - monotime_tv
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:2027,30'
              BranchSideFuncs:
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:2027,8'
          Branch Sides:
            - BranchSide:      'packet.c:2028,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
            - BranchSide:      'packet.c:2029,8'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:2029,24'
          Branch Sides:
            - BranchSide:      'packet.c:2029,27'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:2032,8'
              BranchSideFuncs:
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:2029,42'
          Branch Sides:
            - BranchSide:      'packet.c:2030,8'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
            - BranchSide:      'packet.c:2032,8'
              BranchSideFuncs:
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:2029,8'
          Branch Sides:
            - BranchSide:      'packet.c:2031,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
            - BranchSide:      'packet.c:2032,8'
              BranchSideFuncs:
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:2032,8'
          Branch Sides:
            - BranchSide:      'packet.c:2033,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
            - BranchSide:      'packet.c:2034,4'
              BranchSideFuncs:
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:2035,8'
          Branch Sides:
            - BranchSide:      'packet.c:2022,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
            - BranchSide:      'packet.c:2036,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:2040,7'
          Branch Sides:
            - BranchSide:      'packet.c:2041,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2042,34'
              BranchSideFuncs:
                - ssh_packet_write_poll
                - ssh_packet_have_data_to_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:2042,7'
          Branch Sides:
            - BranchSide:      'packet.c:2014,2'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:2043,11'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:2012,11'
          Dst:             ssh_packet_write_poll
        - Src:             'packet.c:2014,9'
          Dst:             ssh_packet_have_data_to_write
        - Src:             'packet.c:2024,5'
          Dst:             ms_to_timespec
        - Src:             'packet.c:2025,5'
          Dst:             monotime_tv
        - Src:             'packet.c:2027,15'
          Dst:             ppoll
        - Src:             'packet.c:2029,8'
          Dst:             __errno_location
        - Src:             'packet.c:2029,27'
          Dst:             __errno_location
        - Src:             'packet.c:2030,8'
          Dst:             __errno_location
        - Src:             'packet.c:2034,4'
          Dst:             ms_subtract_diff
        - Src:             'packet.c:2042,12'
          Dst:             ssh_packet_write_poll
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_close
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 652
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          16
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_packet_close_internal
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:653,2'
          Dst:             ssh_packet_close_internal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_close_internal
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 583
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         41
      ICount:          325
      EdgeCount:       54
      CyclomaticComplexity: 15
      functionsReached:
        - cipher_free
        - close
        - deflateEnd
        - inflateEnd
        - kex_free
        - kex_free_newkeys
        - ssh_clear_newkeys
        - sshbuf_free
        - sshlog
      functionUses:    2
      BranchProfiles:
        - Branch String:   'packet.c:587,6'
          Branch Sides:
            - BranchSide:      'packet.c:588,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - deflateEnd
                - kex_free_newkeys
                - ssh_clear_newkeys
                - __sanitizer_cov_trace_cmp4
                - close
                - close
                - close
            - BranchSide:      'packet.c:589,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - deflateEnd
                - kex_free_newkeys
                - ssh_clear_newkeys
                - __sanitizer_cov_trace_cmp4
                - close
                - close
                - close
        - Branch String:   'packet.c:590,6'
          Branch Sides:
            - BranchSide:      'packet.c:591,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - close
                - close
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - deflateEnd
                - kex_free_newkeys
                - ssh_clear_newkeys
                - close
            - BranchSide:      'packet.c:598,14'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - deflateEnd
                - kex_free_newkeys
                - ssh_clear_newkeys
        - Branch String:   'packet.c:591,7'
          Branch Sides:
            - BranchSide:      'packet.c:592,10'
              BranchSideFuncs:
                - close
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - deflateEnd
                - kex_free_newkeys
                - ssh_clear_newkeys
            - BranchSide:      'packet.c:594,10'
              BranchSideFuncs:
                - close
                - close
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - deflateEnd
                - kex_free_newkeys
                - ssh_clear_newkeys
        - Branch String:   'packet.c:602,2'
          Branch Sides:
            - BranchSide:      'packet.c:603,20'
              BranchSideFuncs:
                - kex_free_newkeys
                - ssh_clear_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - deflateEnd
            - BranchSide:      'packet.c:609,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - deflateEnd
        - Branch String:   'packet.c:609,15'
          Branch Sides:
            - BranchSide:      'packet.c:609,18'
              BranchSideFuncs:
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - deflateEnd
            - BranchSide:      'packet.c:635,14'
              BranchSideFuncs:
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
        - Branch String:   'packet.c:609,6'
          Branch Sides:
            - BranchSide:      'packet.c:610,15'
              BranchSideFuncs:
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - deflateEnd
            - BranchSide:      'packet.c:635,14'
              BranchSideFuncs:
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
        - Branch String:   'packet.c:611,7'
          Branch Sides:
            - BranchSide:      'packet.c:612,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
                - deflateEnd
            - BranchSide:      'packet.c:622,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
        - Branch String:   'packet.c:613,4'
          Branch Sides:
            - BranchSide:      'packet.c:613,4'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
                - deflateEnd
            - BranchSide:      'packet.c:613,4'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
                - deflateEnd
        - Branch String:   'packet.c:619,8'
          Branch Sides:
            - BranchSide:      'packet.c:620,16'
              BranchSideFuncs:
                - deflateEnd
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
            - BranchSide:      'packet.c:621,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - inflateEnd
        - Branch String:   'packet.c:622,7'
          Branch Sides:
            - BranchSide:      'packet.c:623,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - inflateEnd
            - BranchSide:      'packet.c:633,2'
              BranchSideFuncs:
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
        - Branch String:   'packet.c:624,4'
          Branch Sides:
            - BranchSide:      'packet.c:624,4'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - inflateEnd
            - BranchSide:      'packet.c:624,4'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
                - inflateEnd
        - Branch String:   'packet.c:630,8'
          Branch Sides:
            - BranchSide:      'packet.c:631,16'
              BranchSideFuncs:
                - inflateEnd
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
            - BranchSide:      'packet.c:632,3'
              BranchSideFuncs:
                - cipher_free
                - cipher_free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - kex_free
        - Branch String:   'packet.c:638,6'
          Branch Sides:
            - BranchSide:      'packet.c:638,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - kex_free
            - BranchSide:      'packet.c:639,8'
              BranchSideFuncs:
                - free
                - free
                - free
                - kex_free
      Callsites:
        - Src:             'packet.c:592,4'
          Dst:             close
        - Src:             'packet.c:594,4'
          Dst:             close
        - Src:             'packet.c:595,4'
          Dst:             close
        - Src:             'packet.c:598,2'
          Dst:             sshbuf_free
        - Src:             'packet.c:599,2'
          Dst:             sshbuf_free
        - Src:             'packet.c:600,2'
          Dst:             sshbuf_free
        - Src:             'packet.c:601,2'
          Dst:             sshbuf_free
        - Src:             'packet.c:603,3'
          Dst:             kex_free_newkeys
        - Src:             'packet.c:605,3'
          Dst:             ssh_clear_newkeys
        - Src:             'packet.c:610,3'
          Dst:             sshbuf_free
        - Src:             'packet.c:613,4'
          Dst:             sshlog
        - Src:             'packet.c:620,5'
          Dst:             deflateEnd
        - Src:             'packet.c:624,4'
          Dst:             sshlog
        - Src:             'packet.c:631,5'
          Dst:             inflateEnd
        - Src:             'packet.c:635,2'
          Dst:             cipher_free
        - Src:             'packet.c:636,2'
          Dst:             cipher_free
        - Src:             'packet.c:645,3'
          Dst:             kex_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_clear_newkeys
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 853
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          61
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - kex_free_newkeys
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:854,15'
          Branch Sides:
            - BranchSide:      'packet.c:854,18'
              BranchSideFuncs:
                - kex_free_newkeys
            - BranchSide:      'packet.c:854,15'
              BranchSideFuncs: []
        - Branch String:   'packet.c:854,6'
          Branch Sides:
            - BranchSide:      'packet.c:854,6'
              BranchSideFuncs:
                - kex_free_newkeys
            - BranchSide:      'packet.c:855,20'
              BranchSideFuncs:
                - kex_free_newkeys
      Callsites:
        - Src:             'packet.c:855,3'
          Dst:             kex_free_newkeys
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ppoll
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.pollfd *'
        - 'size_t '
        - 'struct.timeval *'
        - 'struct.__sigset_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_vfatal
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1865
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'struct.ssh *'
        - 'int '
        - 'char *'
        - 'struct.__va_list_tag *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         27
      ICount:          201
      EdgeCount:       52
      CyclomaticComplexity: 27
      functionsReached:
        - __errno_location
        - ssh_err
        - ssh_packet_clear_keys
        - sshlogdie
        - sshpkt_fmt_connection_id
        - vasprintf
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:1871,2'
          Branch Sides:
            - BranchSide:      'packet.c:1873,25'
              BranchSideFuncs:
                - ssh_packet_clear_keys
                - sshlogdie
            - BranchSide:      'packet.c:1876,25'
              BranchSideFuncs:
                - ssh_packet_clear_keys
                - __sanitizer_cov_trace_const_cmp4
                - sshlogdie
            - BranchSide:      'packet.c:1880,25'
              BranchSideFuncs:
                - ssh_packet_clear_keys
                - sshlogdie
            - BranchSide:      'packet.c:1883,7'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - vasprintf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - __sanitizer_cov_trace_const_cmp4
                - sshlogdie
                - ssh_packet_clear_keys
                - sshlogdie
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - sshlogdie
                - ssh_packet_clear_keys
                - sshlogdie
            - BranchSide:      'packet.c:1893,7'
              BranchSideFuncs:
                - vasprintf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - __sanitizer_cov_trace_const_cmp4
                - sshlogdie
                - ssh_packet_clear_keys
                - sshlogdie
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - sshlogdie
            - BranchSide:      'packet.c:1893,7'
              BranchSideFuncs:
                - vasprintf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - __sanitizer_cov_trace_const_cmp4
                - sshlogdie
                - ssh_packet_clear_keys
                - sshlogdie
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - sshlogdie
            - BranchSide:      'packet.c:1893,7'
              BranchSideFuncs:
                - vasprintf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - __sanitizer_cov_trace_const_cmp4
                - sshlogdie
                - ssh_packet_clear_keys
                - sshlogdie
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - sshlogdie
            - BranchSide:      'packet.c:1893,7'
              BranchSideFuncs:
                - vasprintf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - __sanitizer_cov_trace_const_cmp4
                - sshlogdie
                - ssh_packet_clear_keys
                - sshlogdie
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - sshlogdie
            - BranchSide:      'packet.c:1893,7'
              BranchSideFuncs:
                - vasprintf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - __sanitizer_cov_trace_const_cmp4
                - sshlogdie
                - ssh_packet_clear_keys
                - sshlogdie
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - sshlogdie
            - BranchSide:      'packet.c:1902,23'
              BranchSideFuncs:
                - vasprintf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - __sanitizer_cov_trace_const_cmp4
                - sshlogdie
                - ssh_packet_clear_keys
                - sshlogdie
        - Branch String:   'packet.c:1883,7'
          Branch Sides:
            - BranchSide:      'packet.c:1883,16'
              BranchSideFuncs:
                - ssh_packet_clear_keys
                - sshlogdie
            - BranchSide:      'packet.c:1884,26'
              BranchSideFuncs:
                - ssh_packet_clear_keys
                - sshlogdie
        - Branch String:   'packet.c:1893,16'
          Branch Sides:
            - BranchSide:      'packet.c:1893,19'
              BranchSideFuncs:
                - vasprintf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - __sanitizer_cov_trace_const_cmp4
                - sshlogdie
                - ssh_packet_clear_keys
                - sshlogdie
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - sshlogdie
            - BranchSide:      'packet.c:1893,29'
              BranchSideFuncs:
                - vasprintf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - __sanitizer_cov_trace_const_cmp4
                - sshlogdie
                - ssh_packet_clear_keys
                - sshlogdie
        - Branch String:   'packet.c:1893,7'
          Branch Sides:
            - BranchSide:      'packet.c:1893,29'
              BranchSideFuncs:
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - sshlogdie
            - BranchSide:      'packet.c:1894,26'
              BranchSideFuncs:
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - sshlogdie
        - Branch String:   'packet.c:1902,7'
          Branch Sides:
            - BranchSide:      'packet.c:1903,26'
              BranchSideFuncs:
                - ssh_packet_clear_keys
                - sshlogdie
            - BranchSide:      'packet.c:1906,25'
              BranchSideFuncs:
                - ssh_packet_clear_keys
                - __errno_location
                - ssh_err
                - __sanitizer_cov_trace_const_cmp4
                - sshlogdie
        - Branch String:   'packet.c:1908,3'
          Branch Sides:
            - BranchSide:      'packet.c:1908,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlogdie
            - BranchSide:      'packet.c:1908,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlogdie
      Callsites:
        - Src:             'packet.c:1867,15'
          Dst:             __errno_location
        - Src:             'packet.c:1869,2'
          Dst:             sshpkt_fmt_connection_id
        - Src:             'packet.c:1873,3'
          Dst:             ssh_packet_clear_keys
        - Src:             'packet.c:1874,3'
          Dst:             sshlogdie
        - Src:             'packet.c:1876,3'
          Dst:             ssh_packet_clear_keys
        - Src:             'packet.c:1877,3'
          Dst:             sshlogdie
        - Src:             'packet.c:1880,3'
          Dst:             ssh_packet_clear_keys
        - Src:             'packet.c:1881,3'
          Dst:             sshlogdie
        - Src:             'packet.c:1883,7'
          Dst:             __errno_location
        - Src:             'packet.c:1884,4'
          Dst:             ssh_packet_clear_keys
        - Src:             'packet.c:1885,4'
          Dst:             sshlogdie
        - Src:             'packet.c:1894,4'
          Dst:             ssh_packet_clear_keys
        - Src:             'packet.c:1895,4'
          Dst:             __errno_location
        - Src:             'packet.c:1896,4'
          Dst:             ssh_err
        - Src:             'packet.c:1896,4'
          Dst:             sshlogdie
        - Src:             'packet.c:1902,7'
          Dst:             vasprintf
        - Src:             'packet.c:1903,4'
          Dst:             ssh_packet_clear_keys
        - Src:             'packet.c:1904,4'
          Dst:             sshlogdie
        - Src:             'packet.c:1906,3'
          Dst:             ssh_packet_clear_keys
        - Src:             'packet.c:1907,3'
          Dst:             __errno_location
        - Src:             'packet.c:1908,3'
          Dst:             ssh_err
        - Src:             'packet.c:1908,3'
          Dst:             sshlogdie
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_clear_keys
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 658
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          16
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_packet_close_internal
      functionUses:    7
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:659,2'
          Dst:             ssh_packet_close_internal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    vasprintf
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char **'
        - 'char *'
        - 'struct.__va_list_tag *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_put_cstring
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2493
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_put_cstring
      functionUses:    8
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2494,9'
          Dst:             sshbuf_put_cstring
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_send
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2687
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          48
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - ssh_packet_send2
        - ssh_packet_send_mux
      functionUses:    7
      BranchProfiles:
        - Branch String:   'packet.c:2688,17'
          Branch Sides:
            - BranchSide:      'packet.c:2688,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_send2
                - ssh_packet_send_mux
            - BranchSide:      'packet.c:2690,26'
              BranchSideFuncs:
                - ssh_packet_send2
        - Branch String:   'packet.c:2688,6'
          Branch Sides:
            - BranchSide:      'packet.c:2689,30'
              BranchSideFuncs:
                - ssh_packet_send_mux
            - BranchSide:      'packet.c:2690,26'
              BranchSideFuncs:
                - ssh_packet_send2
      Callsites:
        - Src:             'packet.c:2689,10'
          Dst:             ssh_packet_send_mux
        - Src:             'packet.c:2690,9'
          Dst:             ssh_packet_send2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_send2
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1241
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         48
      ICount:          357
      EdgeCount:       64
      CyclomaticComplexity: 18
      functionsReached:
        - calloc
        - kex_start_rekex
        - memset
        - monotime
        - ssh_packet_need_rekeying
        - ssh_packet_send2_wrapped
        - ssh_packet_type_is_kex
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:1247,6'
          Branch Sides:
            - BranchSide:      'packet.c:1248,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1249,20'
              BranchSideFuncs:
                - sshbuf_ptr
                - ssh_packet_type_is_kex
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_send2_wrapped
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - monotime
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
                - ssh_packet_type_is_kex
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - calloc
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - kex_start_rekex
                - sshlog
        - Branch String:   'packet.c:1250,45'
          Branch Sides:
            - BranchSide:      'packet.c:1250,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_send2_wrapped
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - monotime
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
                - ssh_packet_type_is_kex
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - calloc
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - kex_start_rekex
                - sshlog
            - BranchSide:      'packet.c:1251,31'
              BranchSideFuncs:
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_send2_wrapped
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - monotime
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
                - ssh_packet_type_is_kex
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - calloc
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - kex_start_rekex
                - sshlog
        - Branch String:   'packet.c:1257,18'
          Branch Sides:
            - BranchSide:      'packet.c:1257,65'
              BranchSideFuncs:
                - ssh_packet_type_is_kex
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - calloc
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - kex_start_rekex
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_send2_wrapped
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - monotime
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
            - BranchSide:      'packet.c:1257,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_send2_wrapped
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - monotime
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
                - ssh_packet_type_is_kex
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - calloc
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - kex_start_rekex
                - sshlog
        - Branch String:   'packet.c:1257,38'
          Branch Sides:
            - BranchSide:      'packet.c:1257,65'
              BranchSideFuncs:
                - ssh_packet_type_is_kex
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - calloc
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - kex_start_rekex
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_send2_wrapped
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - monotime
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
            - BranchSide:      'packet.c:1282,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_send2_wrapped
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - monotime
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
        - Branch String:   'packet.c:1257,6'
          Branch Sides:
            - BranchSide:      'packet.c:1258,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_send2_wrapped
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - monotime
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
            - BranchSide:      'packet.c:1282,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_send2_wrapped
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - monotime
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
        - Branch String:   'packet.c:1258,7'
          Branch Sides:
            - BranchSide:      'packet.c:1259,4'
              BranchSideFuncs:
                - sshlog
                - sshlog
                - calloc
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - kex_start_rekex
            - BranchSide:      'packet.c:1260,3'
              BranchSideFuncs:
                - sshlog
                - calloc
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - kex_start_rekex
        - Branch String:   'packet.c:1262,7'
          Branch Sides:
            - BranchSide:      'packet.c:1263,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1264,13'
              BranchSideFuncs:
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - kex_start_rekex
        - Branch String:   'packet.c:1268,7'
          Branch Sides:
            - BranchSide:      'packet.c:1269,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1270,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_start_rekex
        - Branch String:   'packet.c:1270,7'
          Branch Sides:
            - BranchSide:      'packet.c:1276,27'
              BranchSideFuncs:
                - kex_start_rekex
            - BranchSide:      'packet.c:1278,3'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1282,6'
          Branch Sides:
            - BranchSide:      'packet.c:1283,3'
              BranchSideFuncs:
                - ssh_packet_send2_wrapped
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - monotime
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
            - BranchSide:      'packet.c:1285,36'
              BranchSideFuncs:
                - ssh_packet_send2_wrapped
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - monotime
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
        - Branch String:   'packet.c:1285,6'
          Branch Sides:
            - BranchSide:      'packet.c:1286,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1289,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - monotime
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
        - Branch String:   'packet.c:1289,6'
          Branch Sides:
            - BranchSide:      'packet.c:1290,3'
              BranchSideFuncs:
                - monotime
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
            - BranchSide:      'packet.c:1314,2'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1292,3'
          Branch Sides:
            - BranchSide:      'packet.c:1293,11'
              BranchSideFuncs:
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshlog
                - kex_start_rekex
            - BranchSide:      'packet.c:1313,2'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1299,8'
          Branch Sides:
            - BranchSide:      'packet.c:1301,5'
              BranchSideFuncs:
                - sshlog
                - kex_start_rekex
            - BranchSide:      'packet.c:1304,4'
              BranchSideFuncs:
                - sshlog
                - sshbuf_free
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - kex_start_rekex
        - Branch String:   'packet.c:1307,4'
          Branch Sides:
            - BranchSide:      'packet.c:1307,4'
              BranchSideFuncs:
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - sshlog
                - kex_start_rekex
            - BranchSide:      'packet.c:1307,4'
              BranchSideFuncs:
                - memset
                - free
                - ssh_packet_send2_wrapped
                - sshbuf_len
                - ssh_packet_need_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_free
                - sshlog
                - kex_start_rekex
        - Branch String:   'packet.c:1310,8'
          Branch Sides:
            - BranchSide:      'packet.c:1292,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1311,12'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:1247,6'
          Dst:             sshbuf_len
        - Src:             'packet.c:1249,9'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1250,16'
          Dst:             ssh_packet_type_is_kex
        - Src:             'packet.c:1251,36'
          Dst:             sshbuf_len
        - Src:             'packet.c:1251,6'
          Dst:             ssh_packet_need_rekeying
        - Src:             'packet.c:1257,42'
          Dst:             ssh_packet_type_is_kex
        - Src:             'packet.c:1259,4'
          Dst:             sshlog
        - Src:             'packet.c:1260,3'
          Dst:             sshlog
        - Src:             'packet.c:1261,7'
          Dst:             calloc
        - Src:             'packet.c:1267,28'
          Dst:             sshbuf_new
        - Src:             'packet.c:1276,11'
          Dst:             kex_start_rekex
        - Src:             'packet.c:1285,11'
          Dst:             ssh_packet_send2_wrapped
        - Src:             'packet.c:1291,23'
          Dst:             monotime
        - Src:             'packet.c:1300,8'
          Dst:             sshbuf_len
        - Src:             'packet.c:1299,8'
          Dst:             ssh_packet_need_rekeying
        - Src:             'packet.c:1301,5'
          Dst:             sshlog
        - Src:             'packet.c:1302,12'
          Dst:             kex_start_rekex
        - Src:             'packet.c:1304,4'
          Dst:             sshlog
        - Src:             'packet.c:1305,4'
          Dst:             sshbuf_free
        - Src:             'packet.c:1308,4'
          Dst:             memset
        - Src:             'packet.c:1310,13'
          Dst:             ssh_packet_send2_wrapped
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_type_is_kex
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1230
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          53
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'packet.c:1232,37'
          Branch Sides:
            - BranchSide:      'packet.c:1232,37'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1233,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1233,37'
          Branch Sides:
            - BranchSide:      'packet.c:1233,37'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1234,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1234,39'
          Branch Sides:
            - BranchSide:      'packet.c:1234,39'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1235,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1235,38'
          Branch Sides:
            - BranchSide:      'packet.c:1235,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1236,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_need_rekeying
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 960
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         34
      ICount:          229
      EdgeCount:       46
      CyclomaticComplexity: 14
      functionsReached:
        - monotime
        - ssh_packet_is_rekeying
      functionUses:    3
      BranchProfiles:
        - Branch String:   'packet.c:965,6'
          Branch Sides:
            - BranchSide:      'packet.c:966,3'
              BranchSideFuncs:
                - ssh_packet_is_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:969,29'
              BranchSideFuncs:
                - ssh_packet_is_rekeying
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:969,6'
          Branch Sides:
            - BranchSide:      'packet.c:970,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:973,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:973,6'
          Branch Sides:
            - BranchSide:      'packet.c:974,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:980,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:980,33'
          Branch Sides:
            - BranchSide:      'packet.c:980,36'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'packet.c:984,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:980,6'
          Branch Sides:
            - BranchSide:      'packet.c:981,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:984,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:984,33'
          Branch Sides:
            - BranchSide:      'packet.c:985,15'
              BranchSideFuncs:
                - monotime
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'packet.c:992,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:984,6'
          Branch Sides:
            - BranchSide:      'packet.c:986,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:992,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:992,42'
          Branch Sides:
            - BranchSide:      'packet.c:993,6'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:994,3'
              BranchSideFuncs: []
        - Branch String:   'packet.c:992,6'
          Branch Sides:
            - BranchSide:      'packet.c:994,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:997,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:999,32'
          Branch Sides:
            - BranchSide:      'packet.c:1000,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'packet.c:1001,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:1000,67'
          Branch Sides:
            - BranchSide:      'packet.c:1000,67'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1001,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'packet.c:1001,28'
          Branch Sides:
            - BranchSide:      'packet.c:1000,67'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'packet.c:1002,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
      Callsites:
        - Src:             'packet.c:969,6'
          Dst:             ssh_packet_is_rekeying
        - Src:             'packet.c:985,60'
          Dst:             monotime
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_send2_wrapped
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1071
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         105
      ICount:          794
      EdgeCount:       144
      CyclomaticComplexity: 41
      functionsReached:
        - arc4random_buf
        - cipher_authlen
        - cipher_crypt
        - cipher_ctx_is_plaintext
        - compress_buffer
        - explicit_bzero
        - mac_compute
        - ssh_packet_enable_delayed_compress
        - ssh_packet_log_type
        - ssh_set_newkeys
        - sshbuf_consume
        - sshbuf_len
        - sshbuf_mutable_ptr
        - sshbuf_ptr
        - sshbuf_put
        - sshbuf_putb
        - sshbuf_reserve
        - sshbuf_reset
        - sshlog
      functionUses:    2
      BranchProfiles:
        - Branch String:   'packet.c:1082,6'
          Branch Sides:
            - BranchSide:      'packet.c:1083,11'
              BranchSideFuncs:
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1090,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1087,7'
          Branch Sides:
            - BranchSide:      'packet.c:1088,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1089,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1090,15'
          Branch Sides:
            - BranchSide:      'packet.c:1090,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1090,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1091,16'
          Branch Sides:
            - BranchSide:      'packet.c:1091,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1091,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1091,32'
          Branch Sides:
            - BranchSide:      'packet.c:1091,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'packet.c:1091,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1091,45'
          Branch Sides:
            - BranchSide:      'packet.c:1091,11'
              BranchSideFuncs:
                - sshbuf_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'packet.c:1091,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1094,6'
          Branch Sides:
            - BranchSide:      'packet.c:1095,3'
              BranchSideFuncs:
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1101,6'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1101,11'
          Branch Sides:
            - BranchSide:      'packet.c:1101,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1121,19'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'packet.c:1101,6'
          Branch Sides:
            - BranchSide:      'packet.c:1102,20'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'packet.c:1121,19'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'packet.c:1104,7'
          Branch Sides:
            - BranchSide:      'packet.c:1105,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1106,16'
              BranchSideFuncs:
                - sshbuf_reset
                - compress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'packet.c:1107,7'
          Branch Sides:
            - BranchSide:      'packet.c:1109,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1110,16'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'packet.c:1112,30'
          Branch Sides:
            - BranchSide:      'packet.c:1113,24'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1115,4'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1111,7'
          Branch Sides:
            - BranchSide:      'packet.c:1115,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1118,2'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'packet.c:1129,6'
          Branch Sides:
            - BranchSide:      'packet.c:1130,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'packet.c:1131,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'packet.c:1131,6'
          Branch Sides:
            - BranchSide:      'packet.c:1132,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
            - BranchSide:      'packet.c:1152,26'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
        - Branch String:   'packet.c:1136,7'
          Branch Sides:
            - BranchSide:      'packet.c:1137,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1138,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
        - Branch String:   'packet.c:1140,7'
          Branch Sides:
            - BranchSide:      'packet.c:1141,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1142,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
        - Branch String:   'packet.c:1148,7'
          Branch Sides:
            - BranchSide:      'packet.c:1149,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1150,3'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
        - Branch String:   'packet.c:1152,6'
          Branch Sides:
            - BranchSide:      'packet.c:1153,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1154,6'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
        - Branch String:   'packet.c:1154,10'
          Branch Sides:
            - BranchSide:      'packet.c:1154,38'
              BranchSideFuncs:
                - cipher_ctx_is_plaintext
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
            - BranchSide:      'packet.c:1159,18'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1154,6'
          Branch Sides:
            - BranchSide:      'packet.c:1156,18'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1159,18'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_len
                - sshbuf_mutable_ptr
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1164,6'
          Branch Sides:
            - BranchSide:      'packet.c:1165,5'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1169,2'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1175,10'
          Branch Sides:
            - BranchSide:      'packet.c:1175,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1183,26'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1175,26'
          Branch Sides:
            - BranchSide:      'packet.c:1175,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1183,26'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1175,6'
          Branch Sides:
            - BranchSide:      'packet.c:1176,24'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1183,26'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1176,7'
          Branch Sides:
            - BranchSide:      'packet.c:1179,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1181,2'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1183,6'
          Branch Sides:
            - BranchSide:      'packet.c:1185,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1186,24'
              BranchSideFuncs:
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1186,6'
          Branch Sides:
            - BranchSide:      'packet.c:1189,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1191,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1191,10'
          Branch Sides:
            - BranchSide:      'packet.c:1191,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1208,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1191,6'
          Branch Sides:
            - BranchSide:      'packet.c:1192,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1208,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1192,7'
          Branch Sides:
            - BranchSide:      'packet.c:1194,25'
              BranchSideFuncs:
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'packet.c:1200,23'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1194,8'
          Branch Sides:
            - BranchSide:      'packet.c:1196,5'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1199,3'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1200,7'
          Branch Sides:
            - BranchSide:      'packet.c:1201,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1202,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1208,6'
          Branch Sides:
            - BranchSide:      'packet.c:1209,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1210,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1210,6'
          Branch Sides:
            - BranchSide:      'packet.c:1211,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
            - BranchSide:      'packet.c:1213,26'
              BranchSideFuncs:
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
        - Branch String:   'packet.c:1211,7'
          Branch Sides:
            - BranchSide:      'packet.c:1211,38'
              BranchSideFuncs:
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_set_newkeys
            - BranchSide:      'packet.c:1212,4'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1217,6'
          Branch Sides:
            - BranchSide:      'packet.c:1218,23'
              BranchSideFuncs:
                - ssh_set_newkeys
            - BranchSide:      'packet.c:1219,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
        - Branch String:   'packet.c:1219,45'
          Branch Sides:
            - BranchSide:      'packet.c:1219,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
            - BranchSide:      'packet.c:1222,5'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1219,11'
          Branch Sides:
            - BranchSide:      'packet.c:1220,42'
              BranchSideFuncs:
                - ssh_packet_enable_delayed_compress
            - BranchSide:      'packet.c:1222,5'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:1087,18'
          Dst:             cipher_authlen
        - Src:             'packet.c:1093,10'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1094,6'
          Dst:             ssh_packet_log_type
        - Src:             'packet.c:1095,3'
          Dst:             sshlog
        - Src:             'packet.c:1102,9'
          Dst:             sshbuf_len
        - Src:             'packet.c:1104,12'
          Dst:             sshbuf_consume
        - Src:             'packet.c:1106,3'
          Dst:             sshbuf_reset
        - Src:             'packet.c:1107,12'
          Dst:             compress_buffer
        - Src:             'packet.c:1110,3'
          Dst:             sshbuf_reset
        - Src:             'packet.c:1111,12'
          Dst:             sshbuf_put
        - Src:             'packet.c:1113,12'
          Dst:             sshbuf_putb
        - Src:             'packet.c:1121,8'
          Dst:             sshbuf_len
        - Src:             'packet.c:1152,11'
          Dst:             sshbuf_reserve
        - Src:             'packet.c:1154,14'
          Dst:             cipher_ctx_is_plaintext
        - Src:             'packet.c:1156,3'
          Dst:             arc4random_buf
        - Src:             'packet.c:1159,3'
          Dst:             explicit_bzero
        - Src:             'packet.c:1162,8'
          Dst:             sshbuf_len
        - Src:             'packet.c:1163,7'
          Dst:             sshbuf_mutable_ptr
        - Src:             'packet.c:1177,7'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1176,12'
          Dst:             mac_compute
        - Src:             'packet.c:1184,6'
          Dst:             sshbuf_len
        - Src:             'packet.c:1183,11'
          Dst:             sshbuf_reserve
        - Src:             'packet.c:1187,6'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1186,11'
          Dst:             cipher_crypt
        - Src:             'packet.c:1194,13'
          Dst:             mac_compute
        - Src:             'packet.c:1200,12'
          Dst:             sshbuf_put
        - Src:             'packet.c:1209,3'
          Dst:             sshlog
        - Src:             'packet.c:1215,2'
          Dst:             sshbuf_reset
        - Src:             'packet.c:1218,7'
          Dst:             ssh_set_newkeys
        - Src:             'packet.c:1220,7'
          Dst:             ssh_packet_enable_delayed_compress
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    compress_buffer
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 733
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         22
      ICount:          161
      EdgeCount:       26
      CyclomaticComplexity: 6
      functionsReached:
        - deflate
        - sshbuf_len
        - sshbuf_mutable_ptr
        - sshbuf_put
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:737,6'
          Branch Sides:
            - BranchSide:      'packet.c:738,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:741,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - sshbuf_len
                - deflate
                - __sanitizer_cov_trace_switch
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:741,6'
          Branch Sides:
            - BranchSide:      'packet.c:742,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:746,25'
              BranchSideFuncs:
                - sshbuf_mutable_ptr
                - sshbuf_len
                - deflate
                - __sanitizer_cov_trace_switch
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:745,6'
          Branch Sides:
            - BranchSide:      'packet.c:747,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:748,59'
              BranchSideFuncs:
                - sshbuf_len
                - deflate
                - __sanitizer_cov_trace_switch
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:759,3'
          Branch Sides:
            - BranchSide:      'packet.c:761,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:764,24'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - deflate
                - __sanitizer_cov_trace_switch
            - BranchSide:      'packet.c:768,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:770,4'
              BranchSideFuncs: []
        - Branch String:   'packet.c:764,8'
          Branch Sides:
            - BranchSide:      'packet.c:766,12'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:767,4'
              BranchSideFuncs:
                - deflate
                - __sanitizer_cov_trace_switch
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:773,2'
          Branch Sides:
            - BranchSide:      'packet.c:753,49'
              BranchSideFuncs:
                - deflate
                - __sanitizer_cov_trace_switch
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:774,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:741,6'
          Dst:             sshbuf_len
        - Src:             'packet.c:746,6'
          Dst:             sshbuf_mutable_ptr
        - Src:             'packet.c:748,48'
          Dst:             sshbuf_len
        - Src:             'packet.c:757,12'
          Dst:             deflate
        - Src:             'packet.c:764,13'
          Dst:             sshbuf_put
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    deflate
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.z_stream_s *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_is_rekeying
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 284
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         7
      ICount:          43
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:285,30'
          Branch Sides:
            - BranchSide:      'packet.c:285,30'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:286,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:286,24'
          Branch Sides:
            - BranchSide:      'packet.c:285,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:286,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_remote_ipaddr
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 516
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          82
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - get_local_ipaddr
        - get_local_port
        - get_peer_ipaddr
        - get_peer_port
        - ssh_packet_connection_is_on_socket
        - xstrdup
      functionUses:    9
      BranchProfiles:
        - Branch String:   'packet.c:520,6'
          Branch Sides:
            - BranchSide:      'packet.c:520,6'
              BranchSideFuncs:
                - ssh_packet_connection_is_on_socket
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - xstrdup
                - get_peer_ipaddr
                - get_peer_port
                - get_local_ipaddr
                - get_local_port
            - BranchSide:      'packet.c:521,42'
              BranchSideFuncs:
                - ssh_packet_connection_is_on_socket
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - xstrdup
                - get_peer_ipaddr
                - get_peer_port
                - get_local_ipaddr
                - get_local_port
        - Branch String:   'packet.c:521,7'
          Branch Sides:
            - BranchSide:      'packet.c:522,11'
              BranchSideFuncs:
                - get_peer_ipaddr
                - get_peer_port
                - get_local_ipaddr
                - get_local_port
            - BranchSide:      'packet.c:528,25'
              BranchSideFuncs:
                - xstrdup
                - xstrdup
      Callsites:
        - Src:             'packet.c:521,7'
          Dst:             ssh_packet_connection_is_on_socket
        - Src:             'packet.c:523,25'
          Dst:             get_peer_ipaddr
        - Src:             'packet.c:524,23'
          Dst:             get_peer_port
        - Src:             'packet.c:525,24'
          Dst:             get_local_ipaddr
        - Src:             'packet.c:526,22'
          Dst:             get_local_port
        - Src:             'packet.c:528,25'
          Dst:             xstrdup
        - Src:             'packet.c:530,24'
          Dst:             xstrdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_remote_port
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 541
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          19
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_remote_ipaddr
      functionUses:    5
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:542,8'
          Dst:             ssh_remote_ipaddr
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_send_debug
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1828
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         19
      ICount:          115
      EdgeCount:       25
      CyclomaticComplexity: 8
      functionsReached:
        - ssh_err
        - ssh_packet_write_wait
        - sshfatal
        - sshlog
        - sshpkt_put_cstring
        - sshpkt_put_u8
        - sshpkt_send
        - sshpkt_start
        - vsnprintf
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:1833,6'
          Branch Sides:
            - BranchSide:      'packet.c:1834,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1836,2'
              BranchSideFuncs:
                - llvm.va_start
                - vsnprintf
                - llvm.va_end
                - sshlog
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
        - Branch String:   'packet.c:1842,51'
          Branch Sides:
            - BranchSide:      'packet.c:1843,25'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'packet.c:1848,3'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
        - Branch String:   'packet.c:1843,39'
          Branch Sides:
            - BranchSide:      'packet.c:1844,30'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'packet.c:1848,3'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
        - Branch String:   'packet.c:1844,46'
          Branch Sides:
            - BranchSide:      'packet.c:1845,30'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'packet.c:1848,3'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
        - Branch String:   'packet.c:1845,45'
          Branch Sides:
            - BranchSide:      'packet.c:1846,23'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'packet.c:1848,3'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
        - Branch String:   'packet.c:1846,34'
          Branch Sides:
            - BranchSide:      'packet.c:1847,33'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'packet.c:1848,3'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
        - Branch String:   'packet.c:1842,6'
          Branch Sides:
            - BranchSide:      'packet.c:1842,6'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'packet.c:1848,3'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
      Callsites:
        - Src:             'packet.c:1837,2'
          Dst:             vsnprintf
        - Src:             'packet.c:1840,2'
          Dst:             sshlog
        - Src:             'packet.c:1842,11'
          Dst:             sshpkt_start
        - Src:             'packet.c:1843,11'
          Dst:             sshpkt_put_u8
        - Src:             'packet.c:1844,11'
          Dst:             sshpkt_put_cstring
        - Src:             'packet.c:1845,11'
          Dst:             sshpkt_put_cstring
        - Src:             'packet.c:1846,11'
          Dst:             sshpkt_send
        - Src:             'packet.c:1847,11'
          Dst:             ssh_packet_write_wait
        - Src:             'packet.c:1848,3'
          Dst:             ssh_err
        - Src:             'packet.c:1848,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_remaining
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1814
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          21
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_len
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:1815,9'
          Dst:             sshbuf_len
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_process_read
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1790
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         15
      ICount:          111
      EdgeCount:       20
      CyclomaticComplexity: 7
      functionsReached:
        - ssh_packet_stop_discard
        - sshbuf_consume_end
        - sshbuf_read
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:1795,6'
          Branch Sides:
            - BranchSide:      'packet.c:1796,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1798,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - ssh_packet_stop_discard
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1798,6'
          Branch Sides:
            - BranchSide:      'packet.c:1799,31'
              BranchSideFuncs:
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - ssh_packet_stop_discard
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1809,2'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1799,7'
          Branch Sides:
            - BranchSide:      'packet.c:1800,11'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1801,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - ssh_packet_stop_discard
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1802,7'
          Branch Sides:
            - BranchSide:      'packet.c:1803,37'
              BranchSideFuncs:
                - ssh_packet_stop_discard
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1806,28'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1803,8'
          Branch Sides:
            - BranchSide:      'packet.c:1804,12'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1805,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:1795,11'
          Dst:             sshbuf_read
        - Src:             'packet.c:1799,12'
          Dst:             sshbuf_consume_end
        - Src:             'packet.c:1803,13'
          Dst:             ssh_packet_stop_discard
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_stop_discard
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 380
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         15
      ICount:          113
      EdgeCount:       19
      CyclomaticComplexity: 6
      functionsReached:
        - mac_compute
        - memset
        - ssh_remote_ipaddr
        - sshbuf_len
        - sshbuf_ptr
        - sshbuf_put
        - sshlog
      functionUses:    3
      BranchProfiles:
        - Branch String:   'packet.c:384,6'
          Branch Sides:
            - BranchSide:      'packet.c:386,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - memset
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - mac_compute
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshbuf_put
            - BranchSide:      'packet.c:400,2'
              BranchSideFuncs:
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
        - Branch String:   'packet.c:388,7'
          Branch Sides:
            - BranchSide:      'packet.c:389,12'
              BranchSideFuncs:
                - memset
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - mac_compute
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshbuf_put
            - BranchSide:      'packet.c:390,10'
              BranchSideFuncs:
                - memset
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - mac_compute
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshbuf_put
        - Branch String:   'packet.c:391,3'
          Branch Sides:
            - BranchSide:      'packet.c:392,24'
              BranchSideFuncs:
                - sshbuf_put
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_ptr
                - mac_compute
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
            - BranchSide:      'packet.c:395,22'
              BranchSideFuncs:
                - sshbuf_ptr
                - mac_compute
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
        - Branch String:   'packet.c:392,8'
          Branch Sides:
            - BranchSide:      'packet.c:391,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:394,12'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:390,3'
          Dst:             memset
        - Src:             'packet.c:391,10'
          Dst:             sshbuf_len
        - Src:             'packet.c:392,13'
          Dst:             sshbuf_put
        - Src:             'packet.c:397,7'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:395,10'
          Dst:             mac_compute
        - Src:             'packet.c:400,2'
          Dst:             ssh_remote_ipaddr
        - Src:             'packet.c:400,2'
          Dst:             ssh_remote_port
        - Src:             'packet.c:400,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_get_u32
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2542
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_get_u32
      functionUses:    4
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2543,9'
          Dst:             sshbuf_get_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_get_string
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2554
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_get_string
      functionUses:    5
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2555,9'
          Dst:             sshbuf_get_string
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshpkt_get_u8
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2536
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshbuf_get_u8
      functionUses:    3
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:2537,9'
          Dst:             sshbuf_get_u8
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    uncompress_buffer
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 779
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         19
      ICount:          147
      EdgeCount:       21
      CyclomaticComplexity: 4
      functionsReached:
        - inflate
        - sshbuf_len
        - sshbuf_mutable_ptr
        - sshbuf_put
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:783,6'
          Branch Sides:
            - BranchSide:      'packet.c:784,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:787,25'
              BranchSideFuncs:
                - sshbuf_mutable_ptr
                - sshbuf_len
                - inflate
                - __sanitizer_cov_trace_switch
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:786,6'
          Branch Sides:
            - BranchSide:      'packet.c:788,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:789,58'
              BranchSideFuncs:
                - sshbuf_len
                - inflate
                - __sanitizer_cov_trace_switch
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:798,3'
          Branch Sides:
            - BranchSide:      'packet.c:800,24'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - inflate
                - __sanitizer_cov_trace_switch
            - BranchSide:      'packet.c:810,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:812,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:814,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:815,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:817,4'
              BranchSideFuncs: []
        - Branch String:   'packet.c:800,8'
          Branch Sides:
            - BranchSide:      'packet.c:802,12'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:803,4'
              BranchSideFuncs:
                - inflate
                - __sanitizer_cov_trace_switch
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'packet.c:787,6'
          Dst:             sshbuf_mutable_ptr
        - Src:             'packet.c:789,47'
          Dst:             sshbuf_len
        - Src:             'packet.c:796,12'
          Dst:             inflate
        - Src:             'packet.c:800,13'
          Dst:             sshbuf_put
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    inflate
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.z_stream_s *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_start_discard
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 408
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshenc *'
        - 'struct.sshmac *'
        - 'size_t '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         23
      ICount:          153
      EdgeCount:       31
      CyclomaticComplexity: 10
      functionsReached:
        - cipher_is_cbc
        - ssh_packet_stop_discard
        - sshbuf_len
        - sshpkt_disconnect
      functionUses:    3
      BranchProfiles:
        - Branch String:   'packet.c:412,18'
          Branch Sides:
            - BranchSide:      'packet.c:412,36'
              BranchSideFuncs:
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:413,30'
              BranchSideFuncs:
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:412,49'
          Branch Sides:
            - BranchSide:      'packet.c:412,53'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - ssh_packet_stop_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:413,30'
              BranchSideFuncs:
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:412,57'
          Branch Sides:
            - BranchSide:      'packet.c:412,60'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - ssh_packet_stop_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:421,6'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - ssh_packet_stop_discard
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:412,6'
          Branch Sides:
            - BranchSide:      'packet.c:413,30'
              BranchSideFuncs:
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:421,6'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - ssh_packet_stop_discard
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:413,7'
          Branch Sides:
            - BranchSide:      'packet.c:414,11'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:415,3'
              BranchSideFuncs: []
        - Branch String:   'packet.c:421,10'
          Branch Sides:
            - BranchSide:      'packet.c:421,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - ssh_packet_stop_discard
            - BranchSide:      'packet.c:425,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - ssh_packet_stop_discard
        - Branch String:   'packet.c:421,6'
          Branch Sides:
            - BranchSide:      'packet.c:422,31'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - ssh_packet_stop_discard
            - BranchSide:      'packet.c:425,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_len
                - ssh_packet_stop_discard
        - Branch String:   'packet.c:425,6'
          Branch Sides:
            - BranchSide:      'packet.c:426,34'
              BranchSideFuncs:
                - ssh_packet_stop_discard
            - BranchSide:      'packet.c:427,26'
              BranchSideFuncs:
                - sshbuf_len
      Callsites:
        - Src:             'packet.c:412,22'
          Dst:             cipher_is_cbc
        - Src:             'packet.c:413,12'
          Dst:             sshpkt_disconnect
        - Src:             'packet.c:425,6'
          Dst:             sshbuf_len
        - Src:             'packet.c:426,10'
          Dst:             ssh_packet_stop_discard
        - Src:             'packet.c:427,36'
          Dst:             sshbuf_len
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_read_poll2_mux
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1442
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         30
      ICount:          230
      EdgeCount:       41
      CyclomaticComplexity: 13
      functionsReached:
        - ssh_packet_log_type
        - sshbuf_consume
        - sshbuf_get_u8
        - sshbuf_len
        - sshbuf_ptr
        - sshbuf_put
        - sshbuf_reset
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:1448,6'
          Branch Sides:
            - BranchSide:      'packet.c:1449,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1450,3'
              BranchSideFuncs:
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1452,6'
          Branch Sides:
            - BranchSide:      'packet.c:1453,18'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'packet.c:1460,9'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1453,7'
          Branch Sides:
            - BranchSide:      'packet.c:1454,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1455,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1456,30'
          Branch Sides:
            - BranchSide:      'packet.c:1457,7'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1458,4'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1456,7'
          Branch Sides:
            - BranchSide:      'packet.c:1458,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1459,2'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1461,6'
          Branch Sides:
            - BranchSide:      'packet.c:1462,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1463,15'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1465,28'
          Branch Sides:
            - BranchSide:      'packet.c:1466,26'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1469,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1466,52'
          Branch Sides:
            - BranchSide:      'packet.c:1467,25'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1469,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1467,61'
          Branch Sides:
            - BranchSide:      'packet.c:1468,25'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1469,10'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1464,6'
          Branch Sides:
            - BranchSide:      'packet.c:1469,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1470,27'
              BranchSideFuncs:
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1470,6'
          Branch Sides:
            - BranchSide:      'packet.c:1471,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'packet.c:1474,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:1451,7'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1453,7'
          Dst:             sshbuf_len
        - Src:             'packet.c:1461,6'
          Dst:             sshbuf_len
        - Src:             'packet.c:1463,2'
          Dst:             sshbuf_reset
        - Src:             'packet.c:1464,11'
          Dst:             sshbuf_put
        - Src:             'packet.c:1466,11'
          Dst:             sshbuf_consume
        - Src:             'packet.c:1467,11'
          Dst:             sshbuf_get_u8
        - Src:             'packet.c:1468,11'
          Dst:             sshbuf_get_u8
        - Src:             'packet.c:1470,6'
          Dst:             ssh_packet_log_type
        - Src:             'packet.c:1471,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_read_poll2
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1480
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         164
      ICount:          1156
      EdgeCount:       229
      CyclomaticComplexity: 67
      functionsReached:
        - cipher_authlen
        - cipher_crypt
        - cipher_get_length
        - mac_check
        - ssh_packet_check_rekey
        - ssh_packet_enable_delayed_compress
        - ssh_packet_log_type
        - ssh_packet_read_poll2_mux
        - ssh_packet_start_discard
        - ssh_packet_write_wait
        - sshbuf_consume
        - sshbuf_consume_end
        - sshbuf_get_u8
        - sshbuf_len
        - sshbuf_ptr
        - sshbuf_putb
        - sshbuf_reserve
        - sshbuf_reset
        - sshlog
        - sshpkt_disconnect
        - uncompress_buffer
      functionUses:    2
      BranchProfiles:
        - Branch String:   'packet.c:1490,6'
          Branch Sides:
            - BranchSide:      'packet.c:1491,36'
              BranchSideFuncs:
                - ssh_packet_read_poll2_mux
            - BranchSide:      'packet.c:1493,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1495,6'
          Branch Sides:
            - BranchSide:      'packet.c:1496,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1498,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1498,6'
          Branch Sides:
            - BranchSide:      'packet.c:1499,11'
              BranchSideFuncs:
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1506,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1503,7'
          Branch Sides:
            - BranchSide:      'packet.c:1504,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1505,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1506,15'
          Branch Sides:
            - BranchSide:      'packet.c:1506,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1506,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1506,11'
          Branch Sides:
            - BranchSide:      'packet.c:1506,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1506,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1507,15'
          Branch Sides:
            - BranchSide:      'packet.c:1507,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1507,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1508,16'
          Branch Sides:
            - BranchSide:      'packet.c:1508,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1508,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1508,32'
          Branch Sides:
            - BranchSide:      'packet.c:1508,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1508,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1508,45'
          Branch Sides:
            - BranchSide:      'packet.c:1508,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1508,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1510,13'
          Branch Sides:
            - BranchSide:      'packet.c:1510,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1526,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1510,6'
          Branch Sides:
            - BranchSide:      'packet.c:1511,25'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - cipher_get_length
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1526,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1511,7'
          Branch Sides:
            - BranchSide:      'packet.c:1514,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1515,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1515,30'
          Branch Sides:
            - BranchSide:      'packet.c:1516,7'
              BranchSideFuncs:
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1520,4'
              BranchSideFuncs:
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1515,7'
          Branch Sides:
            - BranchSide:      'packet.c:1520,4'
              BranchSideFuncs:
                - sshlog
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1525,16'
              BranchSideFuncs:
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1521,8'
          Branch Sides:
            - BranchSide:      'packet.c:1522,12'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1523,4'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1531,7'
          Branch Sides:
            - BranchSide:      'packet.c:1532,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1533,16'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshlog
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1534,7'
          Branch Sides:
            - BranchSide:      'packet.c:1536,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1537,25'
              BranchSideFuncs:
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshlog
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1537,7'
          Branch Sides:
            - BranchSide:      'packet.c:1540,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1541,20'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
                - sshlog
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1542,30'
          Branch Sides:
            - BranchSide:      'packet.c:1543,7'
              BranchSideFuncs:
                - sshlog
                - ssh_packet_start_discard
            - BranchSide:      'packet.c:1550,4'
              BranchSideFuncs:
                - sshlog
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1542,7'
          Branch Sides:
            - BranchSide:      'packet.c:1550,4'
              BranchSideFuncs:
                - sshlog
                - ssh_packet_start_discard
            - BranchSide:      'packet.c:1554,27'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1554,7'
          Branch Sides:
            - BranchSide:      'packet.c:1555,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1556,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1559,6'
          Branch Sides:
            - BranchSide:      'packet.c:1561,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
            - BranchSide:      'packet.c:1567,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1571,6'
          Branch Sides:
            - BranchSide:      'packet.c:1572,3'
              BranchSideFuncs:
                - sshlog
                - ssh_packet_start_discard
            - BranchSide:      'packet.c:1585,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1585,6'
          Branch Sides:
            - BranchSide:      'packet.c:1586,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1592,6'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1592,10'
          Branch Sides:
            - BranchSide:      'packet.c:1592,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'packet.c:1602,26'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1592,26'
          Branch Sides:
            - BranchSide:      'packet.c:1592,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'packet.c:1602,26'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1592,6'
          Branch Sides:
            - BranchSide:      'packet.c:1593,22'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'packet.c:1602,26'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1593,7'
          Branch Sides:
            - BranchSide:      'packet.c:1597,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'packet.c:1601,2'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1597,8'
          Branch Sides:
            - BranchSide:      'packet.c:1598,5'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'packet.c:1599,4'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1602,6'
          Branch Sides:
            - BranchSide:      'packet.c:1604,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1605,24'
              BranchSideFuncs:
                - sshbuf_ptr
                - cipher_crypt
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1605,6'
          Branch Sides:
            - BranchSide:      'packet.c:1607,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1608,26'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1608,6'
          Branch Sides:
            - BranchSide:      'packet.c:1609,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1610,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1610,10'
          Branch Sides:
            - BranchSide:      'packet.c:1610,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
            - BranchSide:      'packet.c:1630,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1610,6'
          Branch Sides:
            - BranchSide:      'packet.c:1612,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_ptr
                - mac_check
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
            - BranchSide:      'packet.c:1630,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1612,17'
          Branch Sides:
            - BranchSide:      'packet.c:1612,35'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'packet.c:1627,27'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1612,7'
          Branch Sides:
            - BranchSide:      'packet.c:1616,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
            - BranchSide:      'packet.c:1627,27'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1616,8'
          Branch Sides:
            - BranchSide:      'packet.c:1617,5'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1618,4'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1619,8'
          Branch Sides:
            - BranchSide:      'packet.c:1620,5'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1621,36'
              BranchSideFuncs:
                - sshbuf_len
                - ssh_packet_start_discard
        - Branch String:   'packet.c:1627,7'
          Branch Sides:
            - BranchSide:      'packet.c:1628,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1629,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1630,6'
          Branch Sides:
            - BranchSide:      'packet.c:1631,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'packet.c:1632,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1632,6'
          Branch Sides:
            - BranchSide:      'packet.c:1633,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1634,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1634,6'
          Branch Sides:
            - BranchSide:      'packet.c:1635,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1637,27'
              BranchSideFuncs:
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1635,7'
          Branch Sides:
            - BranchSide:      'packet.c:1635,38'
              BranchSideFuncs:
                - sshbuf_ptr
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1636,4'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1643,6'
          Branch Sides:
            - BranchSide:      'packet.c:1644,30'
              BranchSideFuncs:
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1652,26'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1645,54'
          Branch Sides:
            - BranchSide:      'packet.c:1646,34'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1647,11'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1644,7'
          Branch Sides:
            - BranchSide:      'packet.c:1647,11'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1648,3'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1652,63'
          Branch Sides:
            - BranchSide:      'packet.c:1653,31'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1654,3'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1652,6'
          Branch Sides:
            - BranchSide:      'packet.c:1654,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1658,6'
              BranchSideFuncs:
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1658,11'
          Branch Sides:
            - BranchSide:      'packet.c:1658,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1674,25'
              BranchSideFuncs:
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1658,6'
          Branch Sides:
            - BranchSide:      'packet.c:1659,16'
              BranchSideFuncs:
                - sshbuf_reset
                - uncompress_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'packet.c:1674,25'
              BranchSideFuncs:
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1660,7'
          Branch Sides:
            - BranchSide:      'packet.c:1662,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1663,16'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1664,7'
          Branch Sides:
            - BranchSide:      'packet.c:1666,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1669,2'
              BranchSideFuncs:
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1674,6'
          Branch Sides:
            - BranchSide:      'packet.c:1675,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1676,27'
              BranchSideFuncs:
                - ssh_packet_log_type
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'packet.c:1676,6'
          Branch Sides:
            - BranchSide:      'packet.c:1677,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1678,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1678,28'
          Branch Sides:
            - BranchSide:      'packet.c:1678,32'
              BranchSideFuncs:
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1679,30'
              BranchSideFuncs:
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1678,6'
          Branch Sides:
            - BranchSide:      'packet.c:1679,30'
              BranchSideFuncs:
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_write_wait
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1685,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1680,53'
          Branch Sides:
            - BranchSide:      'packet.c:1681,34'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1682,11'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1679,7'
          Branch Sides:
            - BranchSide:      'packet.c:1682,11'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1683,3'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1685,29'
          Branch Sides:
            - BranchSide:      'packet.c:1686,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
            - BranchSide:      'packet.c:1689,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
        - Branch String:   'packet.c:1685,6'
          Branch Sides:
            - BranchSide:      'packet.c:1688,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1689,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
        - Branch String:   'packet.c:1689,42'
          Branch Sides:
            - BranchSide:      'packet.c:1689,46'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_enable_delayed_compress
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1692,5'
              BranchSideFuncs:
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1689,6'
          Branch Sides:
            - BranchSide:      'packet.c:1690,42'
              BranchSideFuncs:
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1692,5'
              BranchSideFuncs:
                - ssh_packet_check_rekey
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1700,6'
          Branch Sides:
            - BranchSide:      'packet.c:1700,43'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1701,10'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:1491,10'
          Dst:             ssh_packet_read_poll2_mux
        - Src:             'packet.c:1503,18'
          Dst:             cipher_authlen
        - Src:             'packet.c:1513,7'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1513,33'
          Dst:             sshbuf_len
        - Src:             'packet.c:1511,7'
          Dst:             cipher_get_length
        - Src:             'packet.c:1520,4'
          Dst:             sshlog
        - Src:             'packet.c:1521,13'
          Dst:             sshpkt_disconnect
        - Src:             'packet.c:1525,3'
          Dst:             sshbuf_reset
        - Src:             'packet.c:1531,7'
          Dst:             sshbuf_len
        - Src:             'packet.c:1533,3'
          Dst:             sshbuf_reset
        - Src:             'packet.c:1534,12'
          Dst:             sshbuf_reserve
        - Src:             'packet.c:1538,32'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1537,12'
          Dst:             cipher_crypt
        - Src:             'packet.c:1541,20'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1541,20'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1541,20'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1541,20'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1550,4'
          Dst:             sshlog
        - Src:             'packet.c:1551,11'
          Dst:             ssh_packet_start_discard
        - Src:             'packet.c:1554,12'
          Dst:             sshbuf_consume
        - Src:             'packet.c:1572,3'
          Dst:             sshlog
        - Src:             'packet.c:1574,10'
          Dst:             ssh_packet_start_discard
        - Src:             'packet.c:1585,6'
          Dst:             sshbuf_len
        - Src:             'packet.c:1594,7'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1595,7'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1593,12'
          Dst:             mac_check
        - Src:             'packet.c:1598,5'
          Dst:             sshlog
        - Src:             'packet.c:1602,11'
          Dst:             sshbuf_reserve
        - Src:             'packet.c:1606,6'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1605,11'
          Dst:             cipher_crypt
        - Src:             'packet.c:1608,11'
          Dst:             sshbuf_consume
        - Src:             'packet.c:1613,7'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1614,7'
          Dst:             sshbuf_len
        - Src:             'packet.c:1615,7'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1612,25'
          Dst:             mac_check
        - Src:             'packet.c:1618,4'
          Dst:             sshlog
        - Src:             'packet.c:1622,8'
          Dst:             sshbuf_len
        - Src:             'packet.c:1621,11'
          Dst:             ssh_packet_start_discard
        - Src:             'packet.c:1627,12'
          Dst:             sshbuf_consume
        - Src:             'packet.c:1633,3'
          Dst:             sshlog
        - Src:             'packet.c:1641,11'
          Dst:             sshbuf_ptr
        - Src:             'packet.c:1644,12'
          Dst:             sshpkt_disconnect
        - Src:             'packet.c:1646,12'
          Dst:             ssh_packet_write_wait
        - Src:             'packet.c:1652,11'
          Dst:             sshbuf_consume
        - Src:             'packet.c:1653,12'
          Dst:             sshbuf_consume_end
        - Src:             'packet.c:1659,3'
          Dst:             sshbuf_reset
        - Src:             'packet.c:1660,12'
          Dst:             uncompress_buffer
        - Src:             'packet.c:1663,3'
          Dst:             sshbuf_reset
        - Src:             'packet.c:1664,12'
          Dst:             sshbuf_putb
        - Src:             'packet.c:1674,11'
          Dst:             sshbuf_get_u8
        - Src:             'packet.c:1676,6'
          Dst:             ssh_packet_log_type
        - Src:             'packet.c:1677,3'
          Dst:             sshlog
        - Src:             'packet.c:1679,12'
          Dst:             sshpkt_disconnect
        - Src:             'packet.c:1681,12'
          Dst:             ssh_packet_write_wait
        - Src:             'packet.c:1690,7'
          Dst:             ssh_packet_enable_delayed_compress
        - Src:             'packet.c:1700,11'
          Dst:             ssh_packet_check_rekey
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_check_rekey
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1007
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          34
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - kex_start_rekex
        - ssh_packet_need_rekeying
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:1008,6'
          Branch Sides:
            - BranchSide:      'packet.c:1009,3'
              BranchSideFuncs:
                - sshlog
                - kex_start_rekex
            - BranchSide:      'packet.c:1010,2'
              BranchSideFuncs:
                - sshlog
                - kex_start_rekex
      Callsites:
        - Src:             'packet.c:1008,7'
          Dst:             ssh_packet_need_rekeying
        - Src:             'packet.c:1010,2'
          Dst:             sshlog
        - Src:             'packet.c:1011,9'
          Dst:             kex_start_rekex
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_read_expect
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1424
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         10
      ICount:          66
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - ssh_packet_read_seqnr
        - sshpkt_disconnect
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:1428,6'
          Branch Sides:
            - BranchSide:      'packet.c:1429,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1430,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1430,6'
          Branch Sides:
            - BranchSide:      'packet.c:1431,30'
              BranchSideFuncs:
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1437,2'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1431,7'
          Branch Sides:
            - BranchSide:      'packet.c:1434,11'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1435,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:1428,11'
          Dst:             ssh_packet_read_seqnr
        - Src:             'packet.c:1431,12'
          Dst:             sshpkt_disconnect
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_read_seqnr
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1325
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         41
      ICount:          238
      EdgeCount:       56
      CyclomaticComplexity: 17
      functionsReached:
        - __errno_location
        - monotime_tv
        - ms_subtract_diff
        - ms_to_timespec
        - ppoll
        - read
        - ssh_packet_process_incoming
        - ssh_packet_read_poll_seqnr
        - ssh_packet_write_wait
      functionUses:    2
      BranchProfiles:
        - Branch String:   'packet.c:1339,6'
          Branch Sides:
            - BranchSide:      'packet.c:1340,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1343,2'
              BranchSideFuncs:
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:1346,7'
          Branch Sides:
            - BranchSide:      'packet.c:1347,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1349,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:1349,7'
          Branch Sides:
            - BranchSide:      'packet.c:1350,4'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1355,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:1358,7'
          Branch Sides:
            - BranchSide:      'packet.c:1359,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
            - BranchSide:      'packet.c:1363,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:1364,8'
          Branch Sides:
            - BranchSide:      'packet.c:1365,31'
              BranchSideFuncs:
                - ms_to_timespec
                - monotime_tv
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1368,28'
              BranchSideFuncs:
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1368,8'
          Branch Sides:
            - BranchSide:      'packet.c:1369,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
            - BranchSide:      'packet.c:1370,8'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1370,24'
          Branch Sides:
            - BranchSide:      'packet.c:1370,27'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1375,8'
              BranchSideFuncs:
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:1370,42'
          Branch Sides:
            - BranchSide:      'packet.c:1371,8'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
            - BranchSide:      'packet.c:1375,8'
              BranchSideFuncs:
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:1370,8'
          Branch Sides:
            - BranchSide:      'packet.c:1372,7'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1375,8'
              BranchSideFuncs:
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:1375,8'
          Branch Sides:
            - BranchSide:      'packet.c:1376,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
            - BranchSide:      'packet.c:1377,4'
              BranchSideFuncs:
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:1378,8'
          Branch Sides:
            - BranchSide:      'packet.c:1363,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
            - BranchSide:      'packet.c:1379,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:1383,7'
          Branch Sides:
            - BranchSide:      'packet.c:1384,6'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1388,14'
              BranchSideFuncs:
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:1389,7'
          Branch Sides:
            - BranchSide:      'packet.c:1390,6'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1393,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:1393,7'
          Branch Sides:
            - BranchSide:      'packet.c:1394,6'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1399,40'
              BranchSideFuncs:
                - ssh_packet_process_incoming
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_subtract_diff
                - __sanitizer_cov_trace_const_cmp4
                - read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ms_to_timespec
                - monotime_tv
        - Branch String:   'packet.c:1399,7'
          Branch Sides:
            - BranchSide:      'packet.c:1343,2'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1400,4'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:1339,11'
          Dst:             ssh_packet_write_wait
        - Src:             'packet.c:1345,7'
          Dst:             ssh_packet_read_poll_seqnr
        - Src:             'packet.c:1365,5'
          Dst:             ms_to_timespec
        - Src:             'packet.c:1366,5'
          Dst:             monotime_tv
        - Src:             'packet.c:1368,13'
          Dst:             ppoll
        - Src:             'packet.c:1370,8'
          Dst:             __errno_location
        - Src:             'packet.c:1370,27'
          Dst:             __errno_location
        - Src:             'packet.c:1371,8'
          Dst:             __errno_location
        - Src:             'packet.c:1377,4'
          Dst:             ms_subtract_diff
        - Src:             'packet.c:1388,9'
          Dst:             read
        - Src:             'packet.c:1399,12'
          Dst:             ssh_packet_process_incoming
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_read_poll_seqnr
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1708
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         33
      ICount:          203
      EdgeCount:       41
      CyclomaticComplexity: 10
      functionsReached:
        - ssh_packet_read_poll2
        - ssh_remote_ipaddr
        - sshlog
        - sshpkt_get_string
        - sshpkt_get_u32
        - sshpkt_get_u8
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:1717,7'
          Branch Sides:
            - BranchSide:      'packet.c:1718,11'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1719,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_switch
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - sshlog
        - Branch String:   'packet.c:1719,7'
          Branch Sides:
            - BranchSide:      'packet.c:1720,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - sshlog
            - BranchSide:      'packet.c:1723,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - sshlog
        - Branch String:   'packet.c:1723,3'
          Branch Sides:
            - BranchSide:      'packet.c:1725,4'
              BranchSideFuncs:
                - sshlog
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_switch
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
            - BranchSide:      'packet.c:1728,27'
              BranchSideFuncs:
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_switch
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
            - BranchSide:      'packet.c:1738,28'
              BranchSideFuncs:
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1751,28'
              BranchSideFuncs:
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_switch
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - sshlog
            - BranchSide:      'packet.c:1757,4'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1728,44'
          Branch Sides:
            - BranchSide:      'packet.c:1729,31'
              BranchSideFuncs:
                - free
            - BranchSide:      'packet.c:1731,10'
              BranchSideFuncs:
                - free
        - Branch String:   'packet.c:1729,54'
          Branch Sides:
            - BranchSide:      'packet.c:1730,31'
              BranchSideFuncs:
                - free
            - BranchSide:      'packet.c:1731,10'
              BranchSideFuncs:
                - free
        - Branch String:   'packet.c:1728,8'
          Branch Sides:
            - BranchSide:      'packet.c:1731,10'
              BranchSideFuncs:
                - free
            - BranchSide:      'packet.c:1734,4'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_switch
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - free
                - sshlog
        - Branch String:   'packet.c:1738,48'
          Branch Sides:
            - BranchSide:      'packet.c:1739,31'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1740,12'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1738,8'
          Branch Sides:
            - BranchSide:      'packet.c:1740,12'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1742,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1742,4'
          Branch Sides:
            - BranchSide:      'packet.c:1742,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
            - BranchSide:      'packet.c:1742,4'
              BranchSideFuncs:
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
        - Branch String:   'packet.c:1751,8'
          Branch Sides:
            - BranchSide:      'packet.c:1752,12'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1753,4'
              BranchSideFuncs:
                - sshlog
                - ssh_packet_read_poll2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_switch
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - sshlog
      Callsites:
        - Src:             'packet.c:1716,7'
          Dst:             ssh_packet_read_poll2
        - Src:             'packet.c:1725,4'
          Dst:             sshlog
        - Src:             'packet.c:1728,13'
          Dst:             sshpkt_get_u8
        - Src:             'packet.c:1729,13'
          Dst:             sshpkt_get_string
        - Src:             'packet.c:1730,13'
          Dst:             sshpkt_get_string
        - Src:             'packet.c:1734,4'
          Dst:             sshlog
        - Src:             'packet.c:1738,13'
          Dst:             sshpkt_get_u32
        - Src:             'packet.c:1739,13'
          Dst:             sshpkt_get_string
        - Src:             'packet.c:1742,4'
          Dst:             ssh_remote_ipaddr
        - Src:             'packet.c:1742,4'
          Dst:             ssh_remote_port
        - Src:             'packet.c:1742,4'
          Dst:             sshlog
        - Src:             'packet.c:1751,13'
          Dst:             sshpkt_get_u32
        - Src:             'packet.c:1753,4'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_process_incoming
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1768
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         13
      ICount:          96
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - ssh_packet_stop_discard
        - sshbuf_put
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:1772,6'
          Branch Sides:
            - BranchSide:      'packet.c:1773,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - ssh_packet_stop_discard
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1781,22'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:1774,7'
          Branch Sides:
            - BranchSide:      'packet.c:1775,37'
              BranchSideFuncs:
                - ssh_packet_stop_discard
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'packet.c:1778,28'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1775,8'
          Branch Sides:
            - BranchSide:      'packet.c:1776,12'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1777,3'
              BranchSideFuncs: []
        - Branch String:   'packet.c:1781,6'
          Branch Sides:
            - BranchSide:      'packet.c:1782,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:1784,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:1775,13'
          Dst:             ssh_packet_stop_discard
        - Src:             'packet.c:1781,11'
          Dst:             sshbuf_put
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_read
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1408
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         5
      ICount:          36
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_err
        - ssh_packet_read_seqnr
        - sshfatal
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:1412,6'
          Branch Sides:
            - BranchSide:      'packet.c:1413,3'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'packet.c:1414,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:1412,11'
          Dst:             ssh_packet_read_seqnr
        - Src:             'packet.c:1413,3'
          Dst:             ssh_err
        - Src:             'packet.c:1413,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_get_protocol_flags
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 674
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          12
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_protocol_flags
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 666
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          16
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_rdomain_in
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 570
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         8
      ICount:          56
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - get_rdomain
        - ssh_packet_connection_is_on_socket
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:571,6'
          Branch Sides:
            - BranchSide:      'packet.c:572,10'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:573,42'
              BranchSideFuncs:
                - ssh_packet_connection_is_on_socket
                - __sanitizer_cov_trace_const_cmp4
                - get_rdomain
        - Branch String:   'packet.c:573,6'
          Branch Sides:
            - BranchSide:      'packet.c:574,3'
              BranchSideFuncs:
                - get_rdomain
            - BranchSide:      'packet.c:575,32'
              BranchSideFuncs:
                - get_rdomain
      Callsites:
        - Src:             'packet.c:573,7'
          Dst:             ssh_packet_connection_is_on_socket
        - Src:             'packet.c:575,20'
          Dst:             get_rdomain
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_local_port
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 562
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          19
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_remote_ipaddr
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:563,8'
          Dst:             ssh_remote_ipaddr
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_local_ipaddr
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 553
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          19
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_remote_ipaddr
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:554,8'
          Dst:             ssh_remote_ipaddr
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_get_connection_out
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 505
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          12
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_get_connection_in
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 497
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          12
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_nonblocking
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 485
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          47
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - set_nonblock
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:489,6'
          Branch Sides:
            - BranchSide:      'packet.c:489,6'
              BranchSideFuncs:
                - set_nonblock
            - BranchSide:      'packet.c:490,16'
              BranchSideFuncs:
                - set_nonblock
      Callsites:
        - Src:             'packet.c:487,2'
          Dst:             set_nonblock
        - Src:             'packet.c:490,3'
          Dst:             set_nonblock
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_connection_af
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 477
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - get_sock_af
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:478,9'
          Dst:             get_sock_af
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_get_bytes
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 468
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'size_t *'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          51
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:469,6'
          Branch Sides:
            - BranchSide:      'packet.c:470,13'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:471,6'
              BranchSideFuncs: []
        - Branch String:   'packet.c:471,6'
          Branch Sides:
            - BranchSide:      'packet.c:471,6'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:472,13'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_log_preamble
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 361
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         12
      ICount:          74
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - vasprintf
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:366,6'
          Branch Sides:
            - BranchSide:      'packet.c:367,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:369,3'
              BranchSideFuncs:
                - llvm.va_start
                - vasprintf
                - llvm.va_end
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'packet.c:372,13'
          Branch Sides:
            - BranchSide:      'packet.c:372,16'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:373,4'
              BranchSideFuncs: []
        - Branch String:   'packet.c:372,7'
          Branch Sides:
            - BranchSide:      'packet.c:0,0'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:373,4'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:370,7'
          Dst:             vasprintf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_get_mux
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 355
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          12
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_mux
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 346
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          31
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - kex_free
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'packet.c:349,2'
          Dst:             kex_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_timeout
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 331
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         9
      ICount:          63
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'packet.c:334,19'
          Branch Sides:
            - BranchSide:      'packet.c:334,22'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:335,3'
              BranchSideFuncs: []
        - Branch String:   'packet.c:334,6'
          Branch Sides:
            - BranchSide:      'packet.c:335,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:338,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'packet.c:338,6'
          Branch Sides:
            - BranchSide:      'packet.c:339,3'
              BranchSideFuncs: []
            - BranchSide:      'packet.c:341,30'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_connection
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 294
      functionDepth:   0
      returnType:      'struct.ssh *'
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         16
      ICount:          121
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - cipher_by_name
        - cipher_init
        - ssh_alloc_session_state
        - ssh_err
        - ssh_remote_ipaddr
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:299,6'
          Branch Sides:
            - BranchSide:      'packet.c:300,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'packet.c:303,6'
              BranchSideFuncs:
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_err
                - sshlog
                - free
                - sshlog
                - ssh_alloc_session_state
        - Branch String:   'packet.c:303,6'
          Branch Sides:
            - BranchSide:      'packet.c:304,9'
              BranchSideFuncs:
                - ssh_alloc_session_state
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_err
                - sshlog
                - free
                - sshlog
            - BranchSide:      'packet.c:305,6'
              BranchSideFuncs:
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_err
                - sshlog
                - free
                - sshlog
        - Branch String:   'packet.c:305,6'
          Branch Sides:
            - BranchSide:      'packet.c:306,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'packet.c:309,10'
              BranchSideFuncs:
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - cipher_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_err
                - sshlog
                - free
        - Branch String:   'packet.c:313,60'
          Branch Sides:
            - BranchSide:      'packet.c:314,24'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
            - BranchSide:      'packet.c:316,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
        - Branch String:   'packet.c:312,6'
          Branch Sides:
            - BranchSide:      'packet.c:316,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
            - BranchSide:      'packet.c:320,28'
              BranchSideFuncs:
                - ssh_remote_ipaddr
      Callsites:
        - Src:             'packet.c:296,33'
          Dst:             cipher_by_name
        - Src:             'packet.c:300,3'
          Dst:             sshlog
        - Src:             'packet.c:304,9'
          Dst:             ssh_alloc_session_state
        - Src:             'packet.c:306,3'
          Dst:             sshlog
        - Src:             'packet.c:312,11'
          Dst:             cipher_init
        - Src:             'packet.c:314,11'
          Dst:             cipher_init
        - Src:             'packet.c:316,3'
          Dst:             ssh_err
        - Src:             'packet.c:316,3'
          Dst:             sshlog
        - Src:             'packet.c:325,8'
          Dst:             ssh_remote_ipaddr
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_alloc_session_state
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 231
      functionDepth:   0
      returnType:      'struct.ssh *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         32
      ICount:          214
      EdgeCount:       41
      CyclomaticComplexity: 11
      functionsReached:
        - calloc
        - kex_free
        - kex_new
        - sshbuf_free
        - sshbuf_new
      functionUses:    1
      BranchProfiles:
        - Branch String:   'packet.c:232,14'
          Branch Sides:
            - BranchSide:      'packet.c:232,14'
              BranchSideFuncs:
                - calloc
                - calloc
                - kex_new
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
            - BranchSide:      'packet.c:232,14'
              BranchSideFuncs:
                - calloc
                - calloc
                - kex_new
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
        - Branch String:   'packet.c:235,46'
          Branch Sides:
            - BranchSide:      'packet.c:236,15'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
            - BranchSide:      'packet.c:242,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
        - Branch String:   'packet.c:236,50'
          Branch Sides:
            - BranchSide:      'packet.c:237,18'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
            - BranchSide:      'packet.c:242,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
        - Branch String:   'packet.c:237,37'
          Branch Sides:
            - BranchSide:      'packet.c:238,22'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
            - BranchSide:      'packet.c:242,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
        - Branch String:   'packet.c:238,44'
          Branch Sides:
            - BranchSide:      'packet.c:239,23'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
            - BranchSide:      'packet.c:242,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
        - Branch String:   'packet.c:239,45'
          Branch Sides:
            - BranchSide:      'packet.c:240,32'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
            - BranchSide:      'packet.c:242,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
        - Branch String:   'packet.c:240,54'
          Branch Sides:
            - BranchSide:      'packet.c:241,32'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
            - BranchSide:      'packet.c:242,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
        - Branch String:   'packet.c:235,6'
          Branch Sides:
            - BranchSide:      'packet.c:242,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
                - kex_free
                - free
            - BranchSide:      'packet.c:243,2'
              BranchSideFuncs: []
        - Branch String:   'packet.c:260,6'
          Branch Sides:
            - BranchSide:      'packet.c:261,12'
              BranchSideFuncs:
                - kex_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'packet.c:264,6'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'packet.c:264,6'
          Branch Sides:
            - BranchSide:      'packet.c:265,15'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'packet.c:271,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'packet.c:235,13'
          Dst:             calloc
        - Src:             'packet.c:236,15'
          Dst:             calloc
        - Src:             'packet.c:237,18'
          Dst:             kex_new
        - Src:             'packet.c:238,22'
          Dst:             sshbuf_new
        - Src:             'packet.c:239,23'
          Dst:             sshbuf_new
        - Src:             'packet.c:240,32'
          Dst:             sshbuf_new
        - Src:             'packet.c:241,32'
          Dst:             sshbuf_new
        - Src:             'packet.c:261,3'
          Dst:             kex_free
        - Src:             'packet.c:265,3'
          Dst:             sshbuf_free
        - Src:             'packet.c:266,3'
          Dst:             sshbuf_free
        - Src:             'packet.c:267,3'
          Dst:             sshbuf_free
        - Src:             'packet.c:268,3'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_packet_set_input_hook
      functionSourceFile: '/src/openssh/packet.c'
      linkageType:     InternalLinkage
      functionLinenumber: 276
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'func_type *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          25
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xasprintf
      functionSourceFile: '/src/openssh/xmalloc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 110
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char **'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          33
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - xvasprintf
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'xmalloc.c:115,6'
          Dst:             xvasprintf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xvasprintf
      functionSourceFile: '/src/openssh/xmalloc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 99
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char **'
        - 'char *'
        - 'struct.__va_list_tag *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          49
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached:
        - sshfatal
        - vasprintf
      functionUses:    2
      BranchProfiles:
        - Branch String:   'xmalloc.c:103,12'
          Branch Sides:
            - BranchSide:      'xmalloc.c:103,16'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'xmalloc.c:104,3'
              BranchSideFuncs:
                - sshfatal
        - Branch String:   'xmalloc.c:103,6'
          Branch Sides:
            - BranchSide:      'xmalloc.c:104,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'xmalloc.c:105,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'xmalloc.c:102,6'
          Dst:             vasprintf
        - Src:             'xmalloc.c:104,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xstrdup
      functionSourceFile: '/src/openssh/xmalloc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 88
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          29
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - strlen
        - xmalloc
      functionUses:    41
      BranchProfiles:  []
      Callsites:
        - Src:             'xmalloc.c:92,8'
          Dst:             strlen
        - Src:             'xmalloc.c:93,7'
          Dst:             xmalloc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xmalloc
      functionSourceFile: '/src/openssh/xmalloc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 35
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         7
      ICount:          41
      EdgeCount:       7
      CyclomaticComplexity: 2
      functionsReached:
        - sshfatal
      functionUses:    5
      BranchProfiles:
        - Branch String:   'xmalloc.c:38,6'
          Branch Sides:
            - BranchSide:      'xmalloc.c:39,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'xmalloc.c:40,15'
              BranchSideFuncs:
                - malloc
                - sshfatal
        - Branch String:   'xmalloc.c:41,6'
          Branch Sides:
            - BranchSide:      'xmalloc.c:42,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'xmalloc.c:43,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'xmalloc.c:39,3'
          Dst:             sshfatal
        - Src:             'xmalloc.c:42,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xrecallocarray
      functionSourceFile: '/src/openssh/xmalloc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 76
      functionDepth:   0
      returnType:      'char *'
      argCount:        4
      argTypes:
        - 'char *'
        - 'size_t '
        - 'size_t '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         5
      ICount:          45
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached:
        - recallocarray
        - sshfatal
      functionUses:    5
      BranchProfiles:
        - Branch String:   'xmalloc.c:80,6'
          Branch Sides:
            - BranchSide:      'xmalloc.c:81,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'xmalloc.c:83,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'xmalloc.c:79,12'
          Dst:             recallocarray
        - Src:             'xmalloc.c:81,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xreallocarray
      functionSourceFile: '/src/openssh/xmalloc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 64
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'size_t '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         5
      ICount:          41
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached:
        - reallocarray
        - sshfatal
      functionUses:    2
      BranchProfiles:
        - Branch String:   'xmalloc.c:68,6'
          Branch Sides:
            - BranchSide:      'xmalloc.c:69,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'xmalloc.c:71,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'xmalloc.c:67,12'
          Dst:             reallocarray
        - Src:             'xmalloc.c:69,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    reallocarray
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'size_t '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xcalloc
      functionSourceFile: '/src/openssh/xmalloc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 48
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'size_t '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         12
      ICount:          67
      EdgeCount:       13
      CyclomaticComplexity: 3
      functionsReached:
        - calloc
        - sshfatal
      functionUses:    10
      BranchProfiles:
        - Branch String:   'xmalloc.c:51,16'
          Branch Sides:
            - BranchSide:      'xmalloc.c:51,19'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'xmalloc.c:52,3'
              BranchSideFuncs:
                - sshfatal
        - Branch String:   'xmalloc.c:51,6'
          Branch Sides:
            - BranchSide:      'xmalloc.c:52,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'xmalloc.c:53,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - calloc
                - sshfatal
                - sshfatal
        - Branch String:   'xmalloc.c:53,6'
          Branch Sides:
            - BranchSide:      'xmalloc.c:54,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'xmalloc.c:55,15'
              BranchSideFuncs:
                - calloc
                - sshfatal
        - Branch String:   'xmalloc.c:56,6'
          Branch Sides:
            - BranchSide:      'xmalloc.c:57,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'xmalloc.c:59,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'xmalloc.c:52,3'
          Dst:             sshfatal
        - Src:             'xmalloc.c:54,3'
          Dst:             sshfatal
        - Src:             'xmalloc.c:55,8'
          Dst:             calloc
        - Src:             'xmalloc.c:57,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_match_cidr_list
      functionSourceFile: '/src/openssh/addrmatch.c'
      linkageType:     InternalLinkage
      functionLinenumber: 110
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         36
      ICount:          188
      EdgeCount:       48
      CyclomaticComplexity: 14
      functionsReached:
        - addr_netmatch
        - addr_pton
        - addr_pton_cidr
        - sshlog
        - strdup
        - strlen
        - strsep
        - strspn
      functionUses:    0
      BranchProfiles:
        - Branch String:   'addrmatch.c:116,19'
          Branch Sides:
            - BranchSide:      'addrmatch.c:116,32'
              BranchSideFuncs:
                - addr_pton
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
            - BranchSide:      'addrmatch.c:120,25'
              BranchSideFuncs:
                - strdup
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'addrmatch.c:116,6'
          Branch Sides:
            - BranchSide:      'addrmatch.c:117,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'addrmatch.c:120,25'
              BranchSideFuncs:
                - strdup
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'addrmatch.c:120,6'
          Branch Sides:
            - BranchSide:      'addrmatch.c:121,3'
              BranchSideFuncs: []
            - BranchSide:      'addrmatch.c:122,2'
              BranchSideFuncs:
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'addrmatch.c:122,2'
          Branch Sides:
            - BranchSide:      'addrmatch.c:123,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
            - BranchSide:      'addrmatch.c:166,7'
              BranchSideFuncs:
                - free
        - Branch String:   'addrmatch.c:123,7'
          Branch Sides:
            - BranchSide:      'addrmatch.c:124,4'
              BranchSideFuncs:
                - sshlog
                - free
            - BranchSide:      'addrmatch.c:136,14'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'addrmatch.c:136,7'
          Branch Sides:
            - BranchSide:      'addrmatch.c:137,4'
              BranchSideFuncs:
                - sshlog
                - free
            - BranchSide:      'addrmatch.c:142,14'
              BranchSideFuncs:
                - strspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - sshlog
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'addrmatch.c:142,7'
          Branch Sides:
            - BranchSide:      'addrmatch.c:143,4'
              BranchSideFuncs:
                - sshlog
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - sshlog
                - sshlog
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
            - BranchSide:      'addrmatch.c:149,22'
              BranchSideFuncs:
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - sshlog
                - sshlog
                - sshlog
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
        - Branch String:   'addrmatch.c:150,7'
          Branch Sides:
            - BranchSide:      'addrmatch.c:151,4'
              BranchSideFuncs:
                - sshlog
                - free
            - BranchSide:      'addrmatch.c:154,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'addrmatch.c:154,14'
          Branch Sides:
            - BranchSide:      'addrmatch.c:155,4'
              BranchSideFuncs:
                - sshlog
                - free
            - BranchSide:      'addrmatch.c:159,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'addrmatch.c:160,8'
          Branch Sides:
            - BranchSide:      'addrmatch.c:162,9'
              BranchSideFuncs:
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
            - BranchSide:      'addrmatch.c:163,4'
              BranchSideFuncs:
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strspn
                - strlen
                - __sanitizer_cov_trace_cmp8
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
      Callsites:
        - Src:             'addrmatch.c:116,22'
          Dst:             addr_pton
        - Src:             'addrmatch.c:117,3'
          Dst:             sshlog
        - Src:             'addrmatch.c:120,18'
          Dst:             strdup
        - Src:             'addrmatch.c:122,15'
          Dst:             strsep
        - Src:             'addrmatch.c:124,4'
          Dst:             sshlog
        - Src:             'addrmatch.c:136,7'
          Dst:             strlen
        - Src:             'addrmatch.c:137,4'
          Dst:             sshlog
        - Src:             'addrmatch.c:142,7'
          Dst:             strspn
        - Src:             'addrmatch.c:142,39'
          Dst:             strlen
        - Src:             'addrmatch.c:143,4'
          Dst:             sshlog
        - Src:             'addrmatch.c:149,7'
          Dst:             addr_pton_cidr
        - Src:             'addrmatch.c:151,4'
          Dst:             sshlog
        - Src:             'addrmatch.c:155,4'
          Dst:             sshlog
        - Src:             'addrmatch.c:160,8'
          Dst:             addr_netmatch
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strspn
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    6
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_match_list
      functionSourceFile: '/src/openssh/addrmatch.c'
      linkageType:     InternalLinkage
      functionLinenumber: 50
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         39
      ICount:          200
      EdgeCount:       52
      CyclomaticComplexity: 15
      functionsReached:
        - addr_netmatch
        - addr_pton
        - addr_pton_cidr
        - match_pattern
        - sshlog
        - strdup
        - strsep
      functionUses:    1
      BranchProfiles:
        - Branch String:   'addrmatch.c:56,19'
          Branch Sides:
            - BranchSide:      'addrmatch.c:56,32'
              BranchSideFuncs:
                - addr_pton
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
            - BranchSide:      'addrmatch.c:60,25'
              BranchSideFuncs:
                - strdup
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'addrmatch.c:56,6'
          Branch Sides:
            - BranchSide:      'addrmatch.c:57,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'addrmatch.c:60,25'
              BranchSideFuncs:
                - strdup
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'addrmatch.c:60,6'
          Branch Sides:
            - BranchSide:      'addrmatch.c:61,3'
              BranchSideFuncs: []
            - BranchSide:      'addrmatch.c:62,2'
              BranchSideFuncs:
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'addrmatch.c:62,2'
          Branch Sides:
            - BranchSide:      'addrmatch.c:63,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'addrmatch.c:94,7'
              BranchSideFuncs:
                - free
        - Branch String:   'addrmatch.c:64,7'
          Branch Sides:
            - BranchSide:      'addrmatch.c:65,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'addrmatch.c:66,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'addrmatch.c:66,7'
          Branch Sides:
            - BranchSide:      'addrmatch.c:67,8'
              BranchSideFuncs:
                - free
            - BranchSide:      'addrmatch.c:71,22'
              BranchSideFuncs:
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'addrmatch.c:72,7'
          Branch Sides:
            - BranchSide:      'addrmatch.c:73,4'
              BranchSideFuncs:
                - sshlog
                - free
            - BranchSide:      'addrmatch.c:77,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'addrmatch.c:77,14'
          Branch Sides:
            - BranchSide:      'addrmatch.c:78,8'
              BranchSideFuncs:
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addrmatch.c:90,8'
              BranchSideFuncs:
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'addrmatch.c:78,21'
          Branch Sides:
            - BranchSide:      'addrmatch.c:79,21'
              BranchSideFuncs:
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'addrmatch.c:87,4'
              BranchSideFuncs:
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'addrmatch.c:78,8'
          Branch Sides:
            - BranchSide:      'addrmatch.c:79,36'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'addrmatch.c:87,4'
              BranchSideFuncs:
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'addrmatch.c:81,9'
          Branch Sides:
            - BranchSide:      'addrmatch.c:82,10'
              BranchSideFuncs:
                - free
            - BranchSide:      'addrmatch.c:85,9'
              BranchSideFuncs:
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_pton_cidr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_pattern
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - addr_netmatch
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
      Callsites:
        - Src:             'addrmatch.c:56,22'
          Dst:             addr_pton
        - Src:             'addrmatch.c:57,3'
          Dst:             sshlog
        - Src:             'addrmatch.c:60,18'
          Dst:             strdup
        - Src:             'addrmatch.c:62,15'
          Dst:             strsep
        - Src:             'addrmatch.c:71,7'
          Dst:             addr_pton_cidr
        - Src:             'addrmatch.c:73,4'
          Dst:             sshlog
        - Src:             'addrmatch.c:78,24'
          Dst:             addr_netmatch
        - Src:             'addrmatch.c:90,24'
          Dst:             match_pattern
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    atomiciov
      functionSourceFile: '/src/openssh/atomicio.c'
      linkageType:     InternalLinkage
      functionLinenumber: 177
      functionDepth:   0
      returnType:      'size_t '
      argCount:        4
      argTypes:
        - 'func_type *'
        - 'int '
        - 'struct.iovec *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - atomiciov6
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'atomicio.c:178,9'
          Dst:             atomiciov6
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    atomiciov6
      functionSourceFile: '/src/openssh/atomicio.c'
      linkageType:     InternalLinkage
      functionLinenumber: 108
      functionDepth:   0
      returnType:      'size_t '
      argCount:        6
      argTypes:
        - 'func_type *'
        - 'int '
        - 'struct.iovec *'
        - 'int '
        - 'func_type *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         53
      ICount:          328
      EdgeCount:       69
      CyclomaticComplexity: 18
      functionsReached:
        - __errno_location
        - poll
      functionUses:    1
      BranchProfiles:
        - Branch String:   'atomicio.c:114,17'
          Branch Sides:
            - BranchSide:      'atomicio.c:114,20'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'atomicio.c:115,3'
              BranchSideFuncs:
                - __errno_location
        - Branch String:   'atomicio.c:114,6'
          Branch Sides:
            - BranchSide:      'atomicio.c:115,3'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'atomicio.c:119,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'atomicio.c:127,20'
          Branch Sides:
            - BranchSide:      'atomicio.c:127,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'atomicio.c:127,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'atomicio.c:127,2'
          Branch Sides:
            - BranchSide:      'atomicio.c:128,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'atomicio.c:171,9'
              BranchSideFuncs: []
        - Branch String:   'atomicio.c:129,3'
          Branch Sides:
            - BranchSide:      'atomicio.c:131,8'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'atomicio.c:144,4'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'atomicio.c:147,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'atomicio.c:131,8'
          Branch Sides:
            - BranchSide:      'atomicio.c:133,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'atomicio.c:138,15'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'atomicio.c:133,20'
          Branch Sides:
            - BranchSide:      'atomicio.c:133,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
            - BranchSide:      'atomicio.c:137,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'atomicio.c:133,9'
          Branch Sides:
            - BranchSide:      'atomicio.c:134,6'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'atomicio.c:137,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'atomicio.c:138,31'
          Branch Sides:
            - BranchSide:      'atomicio.c:138,34'
              BranchSideFuncs:
                - poll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'atomicio.c:139,11'
              BranchSideFuncs:
                - poll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'atomicio.c:150,22'
          Branch Sides:
            - BranchSide:      'atomicio.c:150,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
            - BranchSide:      'atomicio.c:150,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
        - Branch String:   'atomicio.c:150,4'
          Branch Sides:
            - BranchSide:      'atomicio.c:151,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'atomicio.c:156,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
        - Branch String:   'atomicio.c:156,16'
          Branch Sides:
            - BranchSide:      'atomicio.c:156,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
            - BranchSide:      'atomicio.c:160,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'atomicio.c:156,32'
          Branch Sides:
            - BranchSide:      'atomicio.c:156,35'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'atomicio.c:157,5'
              BranchSideFuncs:
                - __errno_location
        - Branch String:   'atomicio.c:156,8'
          Branch Sides:
            - BranchSide:      'atomicio.c:157,5'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'atomicio.c:160,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'atomicio.c:160,8'
          Branch Sides:
            - BranchSide:      'atomicio.c:161,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'atomicio.c:163,31'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'atomicio.c:166,18'
          Branch Sides:
            - BranchSide:      'atomicio.c:127,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
            - BranchSide:      'atomicio.c:166,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
        - Branch String:   'atomicio.c:166,7'
          Branch Sides:
            - BranchSide:      'atomicio.c:127,2'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'atomicio.c:167,4'
              BranchSideFuncs:
                - __errno_location
      Callsites:
        - Src:             'atomicio.c:115,3'
          Dst:             __errno_location
        - Src:             'atomicio.c:131,8'
          Dst:             __errno_location
        - Src:             'atomicio.c:134,6'
          Dst:             __errno_location
        - Src:             'atomicio.c:138,15'
          Dst:             __errno_location
        - Src:             'atomicio.c:138,34'
          Dst:             __errno_location
        - Src:             'atomicio.c:139,11'
          Dst:             poll
        - Src:             'atomicio.c:144,4'
          Dst:             __errno_location
        - Src:             'atomicio.c:157,5'
          Dst:             __errno_location
        - Src:             'atomicio.c:167,4'
          Dst:             __errno_location
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    readv
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'int '
        - 'struct.iovec *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    poll
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.pollfd *'
        - 'size_t '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    atomicio
      functionSourceFile: '/src/openssh/atomicio.c'
      linkageType:     InternalLinkage
      functionLinenumber: 97
      functionDepth:   0
      returnType:      'size_t '
      argCount:        4
      argTypes:
        - 'func_type *'
        - 'int '
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - atomicio6
      functionUses:    8
      BranchProfiles:  []
      Callsites:
        - Src:             'atomicio.c:98,9'
          Dst:             atomicio6
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    atomicio6
      functionSourceFile: '/src/openssh/atomicio.c'
      linkageType:     InternalLinkage
      functionLinenumber: 53
      functionDepth:   0
      returnType:      'size_t '
      argCount:        6
      argTypes:
        - 'func_type *'
        - 'int '
        - 'char *'
        - 'size_t '
        - 'func_type *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         29
      ICount:          183
      EdgeCount:       36
      CyclomaticComplexity: 9
      functionsReached:
        - __errno_location
        - poll
      functionUses:    1
      BranchProfiles:
        - Branch String:   'atomicio.c:65,2'
          Branch Sides:
            - BranchSide:      'atomicio.c:66,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'atomicio.c:92,9'
              BranchSideFuncs: []
        - Branch String:   'atomicio.c:67,3'
          Branch Sides:
            - BranchSide:      'atomicio.c:69,8'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'atomicio.c:82,4'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'atomicio.c:85,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'atomicio.c:69,8'
          Branch Sides:
            - BranchSide:      'atomicio.c:71,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'atomicio.c:76,15'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'atomicio.c:71,20'
          Branch Sides:
            - BranchSide:      'atomicio.c:71,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
            - BranchSide:      'atomicio.c:75,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'atomicio.c:71,9'
          Branch Sides:
            - BranchSide:      'atomicio.c:72,6'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'atomicio.c:75,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'atomicio.c:76,31'
          Branch Sides:
            - BranchSide:      'atomicio.c:76,34'
              BranchSideFuncs:
                - poll
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'atomicio.c:77,11'
              BranchSideFuncs:
                - poll
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'atomicio.c:86,19'
          Branch Sides:
            - BranchSide:      'atomicio.c:86,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
            - BranchSide:      'atomicio.c:90,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'atomicio.c:86,8'
          Branch Sides:
            - BranchSide:      'atomicio.c:87,5'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'atomicio.c:90,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - poll
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
      Callsites:
        - Src:             'atomicio.c:69,8'
          Dst:             __errno_location
        - Src:             'atomicio.c:72,6'
          Dst:             __errno_location
        - Src:             'atomicio.c:76,15'
          Dst:             __errno_location
        - Src:             'atomicio.c:76,34'
          Dst:             __errno_location
        - Src:             'atomicio.c:77,11'
          Dst:             poll
        - Src:             'atomicio.c:82,4'
          Dst:             __errno_location
        - Src:             'atomicio.c:87,5'
          Dst:             __errno_location
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mac_valid
      functionSourceFile: '/src/openssh/mac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 246
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         20
      ICount:          98
      EdgeCount:       26
      CyclomaticComplexity: 8
      functionsReached:
        - mac_setup
        - strcmp
        - strdup
        - strsep
      functionUses:    0
      BranchProfiles:
        - Branch String:   'mac.c:249,20'
          Branch Sides:
            - BranchSide:      'mac.c:249,30'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:250,3'
              BranchSideFuncs: []
        - Branch String:   'mac.c:249,6'
          Branch Sides:
            - BranchSide:      'mac.c:250,3'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:251,29'
              BranchSideFuncs:
                - strdup
                - strsep
                - free
                - mac_setup
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'mac.c:251,6'
          Branch Sides:
            - BranchSide:      'mac.c:252,3'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:253,12'
              BranchSideFuncs:
                - strsep
                - free
                - mac_setup
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'mac.c:253,37'
          Branch Sides:
            - BranchSide:      'mac.c:253,41'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - mac_setup
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
            - BranchSide:      'mac.c:253,2'
              BranchSideFuncs:
                - free
                - mac_setup
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'mac.c:253,2'
          Branch Sides:
            - BranchSide:      'mac.c:255,23'
              BranchSideFuncs:
                - mac_setup
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
            - BranchSide:      'mac.c:260,7'
              BranchSideFuncs:
                - free
        - Branch String:   'mac.c:255,7'
          Branch Sides:
            - BranchSide:      'mac.c:256,9'
              BranchSideFuncs:
                - free
            - BranchSide:      'mac.c:259,2'
              BranchSideFuncs:
                - strsep
                - free
                - mac_setup
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'mac.c:249,23'
          Dst:             strcmp
        - Src:             'mac.c:251,22'
          Dst:             strdup
        - Src:             'mac.c:253,12'
          Dst:             strsep
        - Src:             'mac.c:255,7'
          Dst:             mac_setup
        - Src:             'mac.c:254,11'
          Dst:             strsep
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mac_setup
      functionSourceFile: '/src/openssh/mac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 126
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshmac *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         12
      ICount:          65
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - mac_setup_by_alg
        - strcmp
      functionUses:    3
      BranchProfiles:
        - Branch String:   'mac.c:129,2'
          Branch Sides:
            - BranchSide:      'mac.c:130,14'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - mac_setup_by_alg
            - BranchSide:      'mac.c:136,2'
              BranchSideFuncs: []
        - Branch String:   'mac.c:130,7'
          Branch Sides:
            - BranchSide:      'mac.c:131,4'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - mac_setup_by_alg
            - BranchSide:      'mac.c:132,7'
              BranchSideFuncs:
                - mac_setup_by_alg
        - Branch String:   'mac.c:132,7'
          Branch Sides:
            - BranchSide:      'mac.c:133,28'
              BranchSideFuncs:
                - mac_setup_by_alg
            - BranchSide:      'mac.c:134,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'mac.c:130,7'
          Dst:             strcmp
        - Src:             'mac.c:133,11'
          Dst:             mac_setup_by_alg
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mac_setup_by_alg
      functionSourceFile: '/src/openssh/mac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 107
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshmac *'
        - 'struct.macalg *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         12
      ICount:          110
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - ssh_hmac_bytes
        - ssh_hmac_start
      functionUses:    1
      BranchProfiles:
        - Branch String:   'mac.c:109,6'
          Branch Sides:
            - BranchSide:      'mac.c:110,39'
              BranchSideFuncs:
                - ssh_hmac_start
                - ssh_hmac_bytes
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'mac.c:114,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'mac.c:110,7'
          Branch Sides:
            - BranchSide:      'mac.c:111,4'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:112,48'
              BranchSideFuncs:
                - ssh_hmac_bytes
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'mac.c:118,6'
          Branch Sides:
            - BranchSide:      'mac.c:119,18'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:120,13'
              BranchSideFuncs: []
      Callsites:
        - Src:             'mac.c:110,24'
          Dst:             ssh_hmac_start
        - Src:             'mac.c:112,33'
          Dst:             ssh_hmac_bytes
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mac_clear
      functionSourceFile: '/src/openssh/mac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 229
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshmac *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         18
      ICount:          87
      EdgeCount:       23
      CyclomaticComplexity: 7
      functionsReached:
        - ssh_hmac_free
        - umac128_delete
        - umac_delete
      functionUses:    1
      BranchProfiles:
        - Branch String:   'mac.c:230,6'
          Branch Sides:
            - BranchSide:      'mac.c:231,7'
              BranchSideFuncs:
                - umac_delete
            - BranchSide:      'mac.c:233,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_hmac_free
                - umac128_delete
        - Branch String:   'mac.c:231,7'
          Branch Sides:
            - BranchSide:      'mac.c:232,16'
              BranchSideFuncs:
                - umac_delete
            - BranchSide:      'mac.c:233,2'
              BranchSideFuncs: []
        - Branch String:   'mac.c:233,13'
          Branch Sides:
            - BranchSide:      'mac.c:234,7'
              BranchSideFuncs:
                - umac128_delete
            - BranchSide:      'mac.c:236,13'
              BranchSideFuncs:
                - ssh_hmac_free
        - Branch String:   'mac.c:234,7'
          Branch Sides:
            - BranchSide:      'mac.c:235,19'
              BranchSideFuncs:
                - umac128_delete
            - BranchSide:      'mac.c:236,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'mac.c:232,4'
          Dst:             umac_delete
        - Src:             'mac.c:235,4'
          Dst:             umac128_delete
        - Src:             'mac.c:237,3'
          Dst:             ssh_hmac_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mac_check
      functionSourceFile: '/src/openssh/mac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 213
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'struct.sshmac *'
        - 'int '
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         10
      ICount:          85
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - mac_compute
        - timingsafe_bcmp
      functionUses:    2
      BranchProfiles:
        - Branch String:   'mac.c:217,6'
          Branch Sides:
            - BranchSide:      'mac.c:218,3'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:219,23'
              BranchSideFuncs:
                - mac_compute
                - __sanitizer_cov_trace_const_cmp4
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'mac.c:219,6'
          Branch Sides:
            - BranchSide:      'mac.c:221,10'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:222,22'
              BranchSideFuncs:
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'mac.c:222,6'
          Branch Sides:
            - BranchSide:      'mac.c:223,3'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:224,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'mac.c:219,11'
          Dst:             mac_compute
        - Src:             'mac.c:222,6'
          Dst:             timingsafe_bcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mac_compute
      functionSourceFile: '/src/openssh/mac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 167
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'struct.sshmac *'
        - 'int '
        - 'char *'
        - 'int '
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         28
      ICount:          247
      EdgeCount:       34
      CyclomaticComplexity: 8
      functionsReached:
        - put_u32
        - put_u64
        - ssh_hmac_final
        - ssh_hmac_init
        - ssh_hmac_update
        - umac128_final
        - umac128_update
        - umac_final
        - umac_update
      functionUses:    4
      BranchProfiles:
        - Branch String:   'mac.c:175,6'
          Branch Sides:
            - BranchSide:      'mac.c:176,3'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:178,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - put_u64
                - umac128_update
                - umac128_final
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - umac_update
                - umac_final
                - put_u32
                - ssh_hmac_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_hmac_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_hmac_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_hmac_final
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'mac.c:178,2'
          Branch Sides:
            - BranchSide:      'mac.c:180,11'
              BranchSideFuncs:
                - put_u32
                - ssh_hmac_init
                - __sanitizer_cov_trace_const_cmp4
                - ssh_hmac_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_hmac_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_hmac_final
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'mac.c:189,3'
              BranchSideFuncs:
                - umac_update
                - umac_final
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'mac.c:194,11'
              BranchSideFuncs:
                - put_u64
                - umac128_update
                - umac128_final
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'mac.c:199,3'
              BranchSideFuncs: []
        - Branch String:   'mac.c:182,49'
          Branch Sides:
            - BranchSide:      'mac.c:183,23'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:186,4'
              BranchSideFuncs: []
        - Branch String:   'mac.c:183,56'
          Branch Sides:
            - BranchSide:      'mac.c:184,23'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:186,4'
              BranchSideFuncs: []
        - Branch String:   'mac.c:184,57'
          Branch Sides:
            - BranchSide:      'mac.c:185,22'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:186,4'
              BranchSideFuncs: []
        - Branch String:   'mac.c:182,7'
          Branch Sides:
            - BranchSide:      'mac.c:186,4'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:187,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'mac.c:201,6'
          Branch Sides:
            - BranchSide:      'mac.c:202,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'mac.c:206,2'
              BranchSideFuncs: []
        - Branch String:   'mac.c:202,7'
          Branch Sides:
            - BranchSide:      'mac.c:203,11'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'mac.c:204,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:
        - Src:             'mac.c:180,3'
          Dst:             put_u32
        - Src:             'mac.c:182,7'
          Dst:             ssh_hmac_init
        - Src:             'mac.c:183,7'
          Dst:             ssh_hmac_update
        - Src:             'mac.c:184,7'
          Dst:             ssh_hmac_update
        - Src:             'mac.c:185,7'
          Dst:             ssh_hmac_final
        - Src:             'mac.c:190,3'
          Dst:             umac_update
        - Src:             'mac.c:191,3'
          Dst:             umac_final
        - Src:             'mac.c:194,3'
          Dst:             put_u64
        - Src:             'mac.c:195,3'
          Dst:             umac128_update
        - Src:             'mac.c:196,3'
          Dst:             umac128_final
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mac_init
      functionSourceFile: '/src/openssh/mac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 141
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshmac *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         19
      ICount:          109
      EdgeCount:       23
      CyclomaticComplexity: 6
      functionsReached:
        - ssh_hmac_init
        - umac128_new
        - umac_new
      functionUses:    1
      BranchProfiles:
        - Branch String:   'mac.c:142,6'
          Branch Sides:
            - BranchSide:      'mac.c:143,3'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:144,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - umac128_new
                - umac_new
                - ssh_hmac_init
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'mac.c:144,2'
          Branch Sides:
            - BranchSide:      'mac.c:146,7'
              BranchSideFuncs:
                - ssh_hmac_init
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'mac.c:151,33'
              BranchSideFuncs:
                - umac_new
            - BranchSide:      'mac.c:155,36'
              BranchSideFuncs:
                - umac128_new
            - BranchSide:      'mac.c:159,3'
              BranchSideFuncs: []
        - Branch String:   'mac.c:146,29'
          Branch Sides:
            - BranchSide:      'mac.c:147,21'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:148,4'
              BranchSideFuncs: []
        - Branch String:   'mac.c:146,7'
          Branch Sides:
            - BranchSide:      'mac.c:148,4'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:149,3'
              BranchSideFuncs: []
        - Branch String:   'mac.c:151,7'
          Branch Sides:
            - BranchSide:      'mac.c:152,4'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:153,3'
              BranchSideFuncs: []
        - Branch String:   'mac.c:155,7'
          Branch Sides:
            - BranchSide:      'mac.c:156,4'
              BranchSideFuncs: []
            - BranchSide:      'mac.c:157,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'mac.c:147,7'
          Dst:             ssh_hmac_init
        - Src:             'mac.c:151,24'
          Dst:             umac_new
        - Src:             'mac.c:155,24'
          Dst:             umac128_new
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mac_alg_list
      functionSourceFile: '/src/openssh/mac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 85
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         13
      ICount:          103
      EdgeCount:       16
      CyclomaticComplexity: 5
      functionsReached:
        - realloc
        - strlen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'mac.c:90,2'
          Branch Sides:
            - BranchSide:      'mac.c:91,7'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
            - BranchSide:      'mac.c:102,9'
              BranchSideFuncs: []
        - Branch String:   'mac.c:91,7'
          Branch Sides:
            - BranchSide:      'mac.c:92,18'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
            - BranchSide:      'mac.c:93,17'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
        - Branch String:   'mac.c:94,7'
          Branch Sides:
            - BranchSide:      'mac.c:95,9'
              BranchSideFuncs:
                - free
            - BranchSide:      'mac.c:98,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - strlen
                - realloc
                - free
      Callsites:
        - Src:             'mac.c:93,10'
          Dst:             strlen
        - Src:             'mac.c:94,14'
          Dst:             realloc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    hexchar
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 903
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         24
      ICount:          176
      EdgeCount:       30
      CyclomaticComplexity: 8
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'misc.c:907,2'
          Branch Sides:
            - BranchSide:      'misc.c:908,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:917,10'
              BranchSideFuncs: []
        - Branch String:   'misc.c:908,19'
          Branch Sides:
            - BranchSide:      'misc.c:908,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:910,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:908,7'
          Branch Sides:
            - BranchSide:      'misc.c:909,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:910,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:910,24'
          Branch Sides:
            - BranchSide:      'misc.c:910,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:912,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:910,12'
          Branch Sides:
            - BranchSide:      'misc.c:911,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:912,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:912,24'
          Branch Sides:
            - BranchSide:      'misc.c:912,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:915,4'
              BranchSideFuncs: []
        - Branch String:   'misc.c:912,12'
          Branch Sides:
            - BranchSide:      'misc.c:913,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:915,4'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ptimeout_isset
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2914
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.timeval *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          13
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ptimeout_get_tsp
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2907
      functionDepth:   0
      returnType:      'struct.timeval *'
      argCount:        1
      argTypes:
        - 'struct.timeval *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         4
      ICount:          23
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2908,9'
          Branch Sides:
            - BranchSide:      'misc.c:2908,9'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2908,35'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ptimeout_get_ms
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2896
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.timeval *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          52
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2897,6'
          Branch Sides:
            - BranchSide:      'misc.c:2898,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2899,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'misc.c:2899,6'
          Branch Sides:
            - BranchSide:      'misc.c:2900,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2901,10'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ptimeout_deadline_monotime
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2878
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.timeval *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         17
      ICount:          110
      EdgeCount:       21
      CyclomaticComplexity: 6
      functionsReached:
        - monotime_ts
        - ptimeout_deadline_sec
        - ptimeout_deadline_tsp
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2885,6'
          Branch Sides:
            - BranchSide:      'misc.c:2885,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - ptimeout_deadline_tsp
                - ptimeout_deadline_sec
            - BranchSide:      'misc.c:2885,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - ptimeout_deadline_tsp
                - ptimeout_deadline_sec
        - Branch String:   'misc.c:2885,6'
          Branch Sides:
            - BranchSide:      'misc.c:2886,25'
              BranchSideFuncs:
                - ptimeout_deadline_sec
            - BranchSide:      'misc.c:2888,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - ptimeout_deadline_tsp
        - Branch String:   'misc.c:2885,6'
          Branch Sides:
            - BranchSide:      'misc.c:2886,25'
              BranchSideFuncs:
                - ptimeout_deadline_sec
            - BranchSide:      'misc.c:2888,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - ptimeout_deadline_tsp
        - Branch String:   'misc.c:2888,3'
          Branch Sides:
            - BranchSide:      'misc.c:2888,3'
              BranchSideFuncs:
                - ptimeout_deadline_tsp
            - BranchSide:      'misc.c:2889,25'
              BranchSideFuncs:
                - ptimeout_deadline_tsp
      Callsites:
        - Src:             'misc.c:2883,2'
          Dst:             monotime_ts
        - Src:             'misc.c:2886,3'
          Dst:             ptimeout_deadline_sec
        - Src:             'misc.c:2889,3'
          Dst:             ptimeout_deadline_tsp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    monotime_ts
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1660
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.timeval *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         13
      ICount:          73
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - __errno_location
        - clock_gettime
        - gettimeofday
        - sshlog
      functionUses:    4
      BranchProfiles:
        - Branch String:   'misc.c:1666,6'
          Branch Sides:
            - BranchSide:      'misc.c:1668,37'
              BranchSideFuncs:
                - gettimeofday
            - BranchSide:      'misc.c:1684,2'
              BranchSideFuncs:
                - gettimeofday
        - Branch String:   'misc.c:1668,7'
          Branch Sides:
            - BranchSide:      'misc.c:1669,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1672,38'
              BranchSideFuncs:
                - clock_gettime
                - __sanitizer_cov_trace_const_cmp4
                - clock_gettime
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - gettimeofday
        - Branch String:   'misc.c:1672,7'
          Branch Sides:
            - BranchSide:      'misc.c:1673,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1677,37'
              BranchSideFuncs:
                - clock_gettime
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - gettimeofday
        - Branch String:   'misc.c:1677,7'
          Branch Sides:
            - BranchSide:      'misc.c:1678,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1680,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - gettimeofday
      Callsites:
        - Src:             'misc.c:1668,7'
          Dst:             clock_gettime
        - Src:             'misc.c:1672,7'
          Dst:             clock_gettime
        - Src:             'misc.c:1677,7'
          Dst:             clock_gettime
        - Src:             'misc.c:1680,3'
          Dst:             __errno_location
        - Src:             'misc.c:1680,3'
          Dst:             strerror
        - Src:             'misc.c:1680,3'
          Dst:             sshlog
        - Src:             'misc.c:1684,2'
          Dst:             gettimeofday
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ptimeout_deadline_sec
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2849
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.timeval *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         7
      ICount:          43
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'misc.c:2850,23'
          Branch Sides:
            - BranchSide:      'misc.c:2850,26'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2851,16'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2850,6'
          Branch Sides:
            - BranchSide:      'misc.c:2850,6'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2851,16'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ptimeout_deadline_tsp
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2859
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.timeval *'
        - 'struct.timeval *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          69
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'misc.c:2860,23'
          Branch Sides:
            - BranchSide:      'misc.c:2860,26'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'misc.c:2861,4'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'misc.c:2860,6'
          Branch Sides:
            - BranchSide:      'misc.c:2860,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'misc.c:2860,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'misc.c:2860,26'
          Branch Sides:
            - BranchSide:      'misc.c:2860,26'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'misc.c:2861,4'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'misc.c:2860,6'
          Branch Sides:
            - BranchSide:      'misc.c:2860,6'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'misc.c:2861,4'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    clock_gettime
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'struct.timeval *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    gettimeofday
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.timeval *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ptimeout_deadline_ms
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2867
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.timeval *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          30
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ptimeout_deadline_tsp
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'misc.c:2872,2'
          Dst:             ptimeout_deadline_tsp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ptimeout_init
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2837
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.timeval *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          13
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    lookup_setenv_in_list
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2814
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char **'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          58
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - lookup_env_in_list
        - strchr
        - xstrdup
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2819,6'
          Branch Sides:
            - BranchSide:      'misc.c:2820,8'
              BranchSideFuncs:
                - free
            - BranchSide:      'misc.c:2823,3'
              BranchSideFuncs:
                - lookup_env_in_list
                - free
      Callsites:
        - Src:             'misc.c:2818,9'
          Dst:             xstrdup
        - Src:             'misc.c:2819,12'
          Dst:             strchr
        - Src:             'misc.c:2824,8'
          Dst:             lookup_env_in_list
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    lookup_env_in_list
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2799
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char **'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         13
      ICount:          90
      EdgeCount:       16
      CyclomaticComplexity: 5
      functionsReached:
        - strlen
        - strncmp
      functionUses:    1
      BranchProfiles:
        - Branch String:   'misc.c:2803,2'
          Branch Sides:
            - BranchSide:      'misc.c:2804,15'
              BranchSideFuncs:
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2809,2'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2804,42'
          Branch Sides:
            - BranchSide:      'misc.c:2805,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2808,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2804,7'
          Branch Sides:
            - BranchSide:      'misc.c:2806,11'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2808,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'misc.c:2802,11'
          Dst:             strlen
        - Src:             'misc.c:2804,7'
          Dst:             strncmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strncmp
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    subprocess
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2635
      functionDepth:   0
      returnType:      'int '
      argCount:        9
      argTypes:
        - 'char *'
        - 'char *'
        - 'int '
        - 'char **'
        - 'struct._IO_FILE **'
        - 'int '
        - 'struct.passwd *'
        - 'func_type *'
        - 'func_type *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         108
      ICount:          709
      EdgeCount:       137
      CyclomaticComplexity: 31
      functionsReached:
        - __errno_location
        - _exit
        - child_set_env
        - close
        - closefrom
        - dup2
        - execv
        - execve
        - fdopen
        - fork
        - getenv
        - geteuid
        - getuid
        - initgroups
        - kill
        - open
        - path_absolute
        - pipe
        - safe_path
        - setresgid
        - setresuid
        - ssh_signal
        - sshlog
        - stat
        - waitpid
        - xcalloc
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2645,25'
          Branch Sides:
            - BranchSide:      'misc.c:2645,29'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - path_absolute
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - getuid
                - getpwuid
                - sshlog
                - sshlog
            - BranchSide:      'misc.c:2649,6'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - path_absolute
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - getuid
                - getpwuid
                - sshlog
        - Branch String:   'misc.c:2645,40'
          Branch Sides:
            - BranchSide:      'misc.c:2645,43'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'misc.c:2646,3'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'misc.c:2645,6'
          Branch Sides:
            - BranchSide:      'misc.c:2646,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'misc.c:2649,6'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - path_absolute
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - getuid
                - getpwuid
                - sshlog
        - Branch String:   'misc.c:2649,17'
          Branch Sides:
            - BranchSide:      'misc.c:2649,35'
              BranchSideFuncs:
                - getuid
                - getpwuid
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - path_absolute
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
            - BranchSide:      'misc.c:2653,6'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - path_absolute
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'misc.c:2649,6'
          Branch Sides:
            - BranchSide:      'misc.c:2650,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'misc.c:2653,6'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - path_absolute
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'misc.c:2653,6'
          Branch Sides:
            - BranchSide:      'misc.c:2654,4'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - path_absolute
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'misc.c:2656,2'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - path_absolute
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'misc.c:2660,51'
          Branch Sides:
            - BranchSide:      'misc.c:2661,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - path_absolute
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshlog
                - sshlog
            - BranchSide:      'misc.c:2665,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - path_absolute
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshlog
        - Branch String:   'misc.c:2660,6'
          Branch Sides:
            - BranchSide:      'misc.c:2662,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'misc.c:2665,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - path_absolute
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshlog
        - Branch String:   'misc.c:2665,6'
          Branch Sides:
            - BranchSide:      'misc.c:2666,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'misc.c:2674,21'
              BranchSideFuncs:
                - path_absolute
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'misc.c:2674,6'
          Branch Sides:
            - BranchSide:      'misc.c:2675,3'
              BranchSideFuncs:
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
            - BranchSide:      'misc.c:2678,6'
              BranchSideFuncs:
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'misc.c:2678,6'
          Branch Sides:
            - BranchSide:      'misc.c:2679,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:2680,11'
              BranchSideFuncs:
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'misc.c:2680,6'
          Branch Sides:
            - BranchSide:      'misc.c:2681,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
            - BranchSide:      'misc.c:2685,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'misc.c:2685,48'
          Branch Sides:
            - BranchSide:      'misc.c:2686,16'
              BranchSideFuncs:
                - safe_path
                - __sanitizer_cov_trace_const_cmp4
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshlog
            - BranchSide:      'misc.c:2691,11'
              BranchSideFuncs:
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'misc.c:2685,6'
          Branch Sides:
            - BranchSide:      'misc.c:2687,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_pc_indir
            - BranchSide:      'misc.c:2691,11'
              BranchSideFuncs:
                - pipe
                - __sanitizer_cov_trace_const_cmp4
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'misc.c:2691,6'
          Branch Sides:
            - BranchSide:      'misc.c:2692,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_pc_indir
            - BranchSide:      'misc.c:2698,6'
              BranchSideFuncs:
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'misc.c:2694,7'
          Branch Sides:
            - BranchSide:      'misc.c:2695,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
            - BranchSide:      'misc.c:2696,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2698,6'
          Branch Sides:
            - BranchSide:      'misc.c:2699,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
            - BranchSide:      'misc.c:2701,17'
              BranchSideFuncs:
                - fork
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
        - Branch String:   'misc.c:2701,2'
          Branch Sides:
            - BranchSide:      'misc.c:2703,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - close
                - close
            - BranchSide:      'misc.c:2709,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - child_set_env
            - BranchSide:      'misc.c:2775,3'
              BranchSideFuncs:
                - close
                - __sanitizer_cov_trace_const_cmp4
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
        - Branch String:   'misc.c:2709,7'
          Branch Sides:
            - BranchSide:      'misc.c:2710,9'
              BranchSideFuncs:
                - xcalloc
                - child_set_env
                - child_set_env
                - child_set_env
                - child_set_env
                - getenv
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
                - child_set_env
            - BranchSide:      'misc.c:2720,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
        - Branch String:   'misc.c:2716,8'
          Branch Sides:
            - BranchSide:      'misc.c:2717,40'
              BranchSideFuncs:
                - child_set_env
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
            - BranchSide:      'misc.c:2718,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - ssh_signal
        - Branch String:   'misc.c:2720,3'
          Branch Sides:
            - BranchSide:      'misc.c:2721,15'
              BranchSideFuncs:
                - ssh_signal
                - __sanitizer_cov_trace_const_cmp4
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
            - BranchSide:      'misc.c:2723,18'
              BranchSideFuncs:
                - open
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
        - Branch String:   'misc.c:2723,7'
          Branch Sides:
            - BranchSide:      'misc.c:2724,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - _exit
            - BranchSide:      'misc.c:2728,12'
              BranchSideFuncs:
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
        - Branch String:   'misc.c:2728,7'
          Branch Sides:
            - BranchSide:      'misc.c:2729,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - _exit
            - BranchSide:      'misc.c:2734,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
        - Branch String:   'misc.c:2735,7'
          Branch Sides:
            - BranchSide:      'misc.c:2736,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
            - BranchSide:      'misc.c:2737,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
        - Branch String:   'misc.c:2739,16'
          Branch Sides:
            - BranchSide:      'misc.c:2739,24'
              BranchSideFuncs:
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
            - BranchSide:      'misc.c:2743,3'
              BranchSideFuncs:
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
        - Branch String:   'misc.c:2739,7'
          Branch Sides:
            - BranchSide:      'misc.c:2740,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - _exit
            - BranchSide:      'misc.c:2743,3'
              BranchSideFuncs:
                - closefrom
                - geteuid
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
        - Branch String:   'misc.c:2745,22'
          Branch Sides:
            - BranchSide:      'misc.c:2746,18'
              BranchSideFuncs:
                - initgroups
                - __sanitizer_cov_trace_const_cmp4
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
            - BranchSide:      'misc.c:2751,17'
              BranchSideFuncs:
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
        - Branch String:   'misc.c:2745,7'
          Branch Sides:
            - BranchSide:      'misc.c:2747,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - _exit
            - BranchSide:      'misc.c:2751,17'
              BranchSideFuncs:
                - setresgid
                - __sanitizer_cov_trace_const_cmp4
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
        - Branch String:   'misc.c:2751,7'
          Branch Sides:
            - BranchSide:      'misc.c:2752,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - _exit
            - BranchSide:      'misc.c:2756,17'
              BranchSideFuncs:
                - setresuid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - __errno_location
                - strerror
                - sshlog
                - _exit
        - Branch String:   'misc.c:2756,7'
          Branch Sides:
            - BranchSide:      'misc.c:2757,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - _exit
            - BranchSide:      'misc.c:2762,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - _exit
        - Branch String:   'misc.c:2762,52'
          Branch Sides:
            - BranchSide:      'misc.c:2763,7'
              BranchSideFuncs:
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
                - __errno_location
                - strerror
                - sshlog
                - _exit
            - BranchSide:      'misc.c:2767,7'
              BranchSideFuncs:
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
        - Branch String:   'misc.c:2762,7'
          Branch Sides:
            - BranchSide:      'misc.c:2764,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - _exit
            - BranchSide:      'misc.c:2767,7'
              BranchSideFuncs:
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
                - execve
        - Branch String:   'misc.c:2767,7'
          Branch Sides:
            - BranchSide:      'misc.c:2768,11'
              BranchSideFuncs:
                - execve
                - __errno_location
                - strerror
                - sshlog
                - _exit
            - BranchSide:      'misc.c:2770,10'
              BranchSideFuncs:
                - execv
                - __errno_location
                - strerror
                - sshlog
                - _exit
        - Branch String:   'misc.c:2779,6'
          Branch Sides:
            - BranchSide:      'misc.c:2780,9'
              BranchSideFuncs:
                - close
                - sshlog
            - BranchSide:      'misc.c:2781,23'
              BranchSideFuncs:
                - fdopen
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2781,11'
          Branch Sides:
            - BranchSide:      'misc.c:0,0'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2782,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - close
                - kill
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2786,38'
          Branch Sides:
            - BranchSide:      'misc.c:2786,41'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2786,3'
              BranchSideFuncs:
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2786,3'
          Branch Sides:
            - BranchSide:      'misc.c:2786,18'
              BranchSideFuncs:
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2788,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2792,6'
          Branch Sides:
            - BranchSide:      'misc.c:2793,12'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2794,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:2646,3'
          Dst:             sshlog
        - Src:             'misc.c:2649,35'
          Dst:             getuid
        - Src:             'misc.c:2649,26'
          Dst:             getpwuid
        - Src:             'misc.c:2650,3'
          Dst:             sshlog
        - Src:             'misc.c:2656,2'
          Dst:             sshlog
        - Src:             'misc.c:2662,3'
          Dst:             sshlog
        - Src:             'misc.c:2666,3'
          Dst:             sshlog
        - Src:             'misc.c:2674,7'
          Dst:             path_absolute
        - Src:             'misc.c:2675,3'
          Dst:             sshlog
        - Src:             'misc.c:2680,6'
          Dst:             stat
        - Src:             'misc.c:2681,3'
          Dst:             __errno_location
        - Src:             'misc.c:2681,3'
          Dst:             strerror
        - Src:             'misc.c:2681,3'
          Dst:             sshlog
        - Src:             'misc.c:2686,6'
          Dst:             safe_path
        - Src:             'misc.c:2687,3'
          Dst:             sshlog
        - Src:             'misc.c:2691,6'
          Dst:             pipe
        - Src:             'misc.c:2692,3'
          Dst:             __errno_location
        - Src:             'misc.c:2692,3'
          Dst:             strerror
        - Src:             'misc.c:2692,3'
          Dst:             sshlog
        - Src:             'misc.c:2701,17'
          Dst:             fork
        - Src:             'misc.c:2703,3'
          Dst:             __errno_location
        - Src:             'misc.c:2703,3'
          Dst:             strerror
        - Src:             'misc.c:2703,3'
          Dst:             sshlog
        - Src:             'misc.c:2704,3'
          Dst:             close
        - Src:             'misc.c:2705,3'
          Dst:             close
        - Src:             'misc.c:2711,10'
          Dst:             xcalloc
        - Src:             'misc.c:2712,4'
          Dst:             child_set_env
        - Src:             'misc.c:2713,4'
          Dst:             child_set_env
        - Src:             'misc.c:2714,4'
          Dst:             child_set_env
        - Src:             'misc.c:2715,4'
          Dst:             child_set_env
        - Src:             'misc.c:2716,14'
          Dst:             getenv
        - Src:             'misc.c:2717,5'
          Dst:             child_set_env
        - Src:             'misc.c:2721,4'
          Dst:             ssh_signal
        - Src:             'misc.c:2723,18'
          Dst:             open
        - Src:             'misc.c:2724,4'
          Dst:             __errno_location
        - Src:             'misc.c:2724,4'
          Dst:             strerror
        - Src:             'misc.c:2724,4'
          Dst:             sshlog
        - Src:             'misc.c:2726,4'
          Dst:             _exit
        - Src:             'misc.c:2728,7'
          Dst:             dup2
        - Src:             'misc.c:2729,4'
          Dst:             __errno_location
        - Src:             'misc.c:2729,4'
          Dst:             strerror
        - Src:             'misc.c:2729,4'
          Dst:             sshlog
        - Src:             'misc.c:2730,4'
          Dst:             _exit
        - Src:             'misc.c:2739,19'
          Dst:             dup2
        - Src:             'misc.c:2740,4'
          Dst:             __errno_location
        - Src:             'misc.c:2740,4'
          Dst:             strerror
        - Src:             'misc.c:2740,4'
          Dst:             sshlog
        - Src:             'misc.c:2741,4'
          Dst:             _exit
        - Src:             'misc.c:2743,3'
          Dst:             closefrom
        - Src:             'misc.c:2745,7'
          Dst:             geteuid
        - Src:             'misc.c:2746,7'
          Dst:             initgroups
        - Src:             'misc.c:2747,4'
          Dst:             __errno_location
        - Src:             'misc.c:2747,4'
          Dst:             strerror
        - Src:             'misc.c:2747,4'
          Dst:             sshlog
        - Src:             'misc.c:2749,4'
          Dst:             _exit
        - Src:             'misc.c:2751,7'
          Dst:             setresgid
        - Src:             'misc.c:2752,4'
          Dst:             __errno_location
        - Src:             'misc.c:2752,4'
          Dst:             strerror
        - Src:             'misc.c:2752,4'
          Dst:             sshlog
        - Src:             'misc.c:2754,4'
          Dst:             _exit
        - Src:             'misc.c:2756,7'
          Dst:             setresuid
        - Src:             'misc.c:2757,4'
          Dst:             __errno_location
        - Src:             'misc.c:2757,4'
          Dst:             strerror
        - Src:             'misc.c:2757,4'
          Dst:             sshlog
        - Src:             'misc.c:2759,4'
          Dst:             _exit
        - Src:             'misc.c:2763,7'
          Dst:             dup2
        - Src:             'misc.c:2764,4'
          Dst:             __errno_location
        - Src:             'misc.c:2764,4'
          Dst:             strerror
        - Src:             'misc.c:2764,4'
          Dst:             sshlog
        - Src:             'misc.c:2765,4'
          Dst:             _exit
        - Src:             'misc.c:2768,4'
          Dst:             execve
        - Src:             'misc.c:2770,4'
          Dst:             execv
        - Src:             'misc.c:2771,3'
          Dst:             __errno_location
        - Src:             'misc.c:2771,3'
          Dst:             strerror
        - Src:             'misc.c:2771,3'
          Dst:             sshlog
        - Src:             'misc.c:2773,3'
          Dst:             _exit
        - Src:             'misc.c:2778,2'
          Dst:             close
        - Src:             'misc.c:2780,3'
          Dst:             close
        - Src:             'misc.c:2781,16'
          Dst:             fdopen
        - Src:             'misc.c:2782,3'
          Dst:             __errno_location
        - Src:             'misc.c:2782,3'
          Dst:             strerror
        - Src:             'misc.c:2782,3'
          Dst:             sshlog
        - Src:             'misc.c:2783,3'
          Dst:             close
        - Src:             'misc.c:2785,3'
          Dst:             kill
        - Src:             'misc.c:2786,10'
          Dst:             waitpid
        - Src:             'misc.c:2786,41'
          Dst:             __errno_location
        - Src:             'misc.c:2791,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getuid
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getpwuid
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.passwd *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    path_absolute
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2470
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    stat
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'struct.stat *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    safe_path
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2179
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'char *'
        - 'struct.stat *'
        - 'char *'
        - 'int '
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         45
      ICount:          251
      EdgeCount:       61
      CyclomaticComplexity: 18
      functionsReached:
        - __errno_location
        - dirname
        - platform_sys_dir_uid
        - realpath
        - snprintf
        - stat
        - strcmp
        - strlcpy
      functionUses:    2
      BranchProfiles:
        - Branch String:   'misc.c:2185,6'
          Branch Sides:
            - BranchSide:      'misc.c:2186,12'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - snprintf
            - BranchSide:      'misc.c:2190,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
                - snprintf
                - realpath
        - Branch String:   'misc.c:2190,21'
          Branch Sides:
            - BranchSide:      'misc.c:2190,33'
              BranchSideFuncs:
                - realpath
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
                - snprintf
            - BranchSide:      'misc.c:2193,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
                - snprintf
        - Branch String:   'misc.c:2190,6'
          Branch Sides:
            - BranchSide:      'misc.c:2191,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
                - snprintf
            - BranchSide:      'misc.c:2193,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
                - snprintf
        - Branch String:   'misc.c:2193,6'
          Branch Sides:
            - BranchSide:      'misc.c:2194,12'
              BranchSideFuncs:
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
                - snprintf
            - BranchSide:      'misc.c:2197,29'
              BranchSideFuncs:
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
                - snprintf
        - Branch String:   'misc.c:2197,42'
          Branch Sides:
            - BranchSide:      'misc.c:2197,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
                - snprintf
            - BranchSide:      'misc.c:2198,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
                - snprintf
        - Branch String:   'misc.c:2197,65'
          Branch Sides:
            - BranchSide:      'misc.c:2198,7'
              BranchSideFuncs:
                - snprintf
            - BranchSide:      'misc.c:2199,12'
              BranchSideFuncs:
                - snprintf
        - Branch String:   'misc.c:2197,6'
          Branch Sides:
            - BranchSide:      'misc.c:2199,12'
              BranchSideFuncs:
                - snprintf
            - BranchSide:      'misc.c:2205,2'
              BranchSideFuncs:
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
        - Branch String:   'misc.c:2206,7'
          Branch Sides:
            - BranchSide:      'misc.c:2207,13'
              BranchSideFuncs:
                - snprintf
            - BranchSide:      'misc.c:2210,11'
              BranchSideFuncs:
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - dirname
                - snprintf
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
        - Branch String:   'misc.c:2212,28'
          Branch Sides:
            - BranchSide:      'misc.c:2213,33'
              BranchSideFuncs:
                - snprintf
            - BranchSide:      'misc.c:2215,13'
              BranchSideFuncs:
                - snprintf
        - Branch String:   'misc.c:2213,41'
          Branch Sides:
            - BranchSide:      'misc.c:2213,47'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - snprintf
                - snprintf
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2214,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - snprintf
                - snprintf
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2213,62'
          Branch Sides:
            - BranchSide:      'misc.c:2214,11'
              BranchSideFuncs:
                - snprintf
            - BranchSide:      'misc.c:2215,13'
              BranchSideFuncs:
                - snprintf
        - Branch String:   'misc.c:2212,7'
          Branch Sides:
            - BranchSide:      'misc.c:2215,13'
              BranchSideFuncs:
                - snprintf
            - BranchSide:      'misc.c:2221,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2221,19'
          Branch Sides:
            - BranchSide:      'misc.c:2221,29'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
            - BranchSide:      'misc.c:2228,20'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
        - Branch String:   'misc.c:2221,7'
          Branch Sides:
            - BranchSide:      'misc.c:2222,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2228,20'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - dirname
                - strlcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - platform_sys_dir_uid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
        - Branch String:   'misc.c:2228,31'
          Branch Sides:
            - BranchSide:      'misc.c:2228,47'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2229,4'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2228,7'
          Branch Sides:
            - BranchSide:      'misc.c:2205,2'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2229,4'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:2185,6'
          Dst:             realpath
        - Src:             'misc.c:2187,16'
          Dst:             __errno_location
        - Src:             'misc.c:2187,7'
          Dst:             strerror
        - Src:             'misc.c:2186,3'
          Dst:             snprintf
        - Src:             'misc.c:2190,24'
          Dst:             realpath
        - Src:             'misc.c:2194,3'
          Dst:             snprintf
        - Src:             'misc.c:2197,8'
          Dst:             platform_sys_dir_uid
        - Src:             'misc.c:2199,3'
          Dst:             snprintf
        - Src:             'misc.c:2206,13'
          Dst:             dirname
        - Src:             'misc.c:2207,4'
          Dst:             snprintf
        - Src:             'misc.c:2210,3'
          Dst:             strlcpy
        - Src:             'misc.c:2212,7'
          Dst:             stat
        - Src:             'misc.c:2213,9'
          Dst:             platform_sys_dir_uid
        - Src:             'misc.c:2215,4'
          Dst:             snprintf
        - Src:             'misc.c:2221,22'
          Dst:             strcmp
        - Src:             'misc.c:2228,8'
          Dst:             strcmp
        - Src:             'misc.c:2228,35'
          Dst:             strcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    pipe
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fork
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    child_set_env
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2262
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'char ***'
        - 'int *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         31
      ICount:          248
      EdgeCount:       39
      CyclomaticComplexity: 10
      functionsReached:
        - sshfatal
        - sshlog
        - strchr
        - strlen
        - strncmp
        - xmalloc
        - xreallocarray
      functionUses:    5
      BranchProfiles:
        - Branch String:   'misc.c:2267,6'
          Branch Sides:
            - BranchSide:      'misc.c:2268,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'misc.c:2276,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - sshfatal
                - free
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xmalloc
                - sshfatal
        - Branch String:   'misc.c:2276,6'
          Branch Sides:
            - BranchSide:      'misc.c:2277,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:2278,7'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - sshfatal
                - free
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xmalloc
        - Branch String:   'misc.c:2278,20'
          Branch Sides:
            - BranchSide:      'misc.c:2278,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - sshfatal
                - free
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xmalloc
            - BranchSide:      'misc.c:2289,9'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - sshfatal
                - free
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2278,6'
          Branch Sides:
            - BranchSide:      'misc.c:2279,11'
              BranchSideFuncs:
                - xmalloc
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - sshfatal
                - free
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2289,9'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp4
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - sshfatal
                - free
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2291,2'
          Branch Sides:
            - BranchSide:      'misc.c:2292,15'
              BranchSideFuncs:
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - sshfatal
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2294,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - sshfatal
                - free
        - Branch String:   'misc.c:2292,43'
          Branch Sides:
            - BranchSide:      'misc.c:2292,46'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - sshfatal
                - free
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2292,65'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - sshfatal
                - free
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2292,7'
          Branch Sides:
            - BranchSide:      'misc.c:2292,65'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - sshfatal
                - free
            - BranchSide:      'misc.c:2293,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - sshfatal
                - free
        - Branch String:   'misc.c:2294,6'
          Branch Sides:
            - BranchSide:      'misc.c:2296,8'
              BranchSideFuncs:
                - free
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
            - BranchSide:      'misc.c:2299,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - sshfatal
        - Branch String:   'misc.c:2300,7'
          Branch Sides:
            - BranchSide:      'misc.c:2301,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
                - sshfatal
            - BranchSide:      'misc.c:2308,3'
              BranchSideFuncs:
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
        - Branch String:   'misc.c:2301,8'
          Branch Sides:
            - BranchSide:      'misc.c:2302,5'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:2303,12'
              BranchSideFuncs:
                - xreallocarray
                - strlen
                - strlen
                - xmalloc
                - strlen
                - strlen
                - snprintf
      Callsites:
        - Src:             'misc.c:2267,6'
          Dst:             strchr
        - Src:             'misc.c:2268,3'
          Dst:             sshlog
        - Src:             'misc.c:2277,3'
          Dst:             sshfatal
        - Src:             'misc.c:2279,11'
          Dst:             xmalloc
        - Src:             'misc.c:2290,12'
          Dst:             strlen
        - Src:             'misc.c:2292,7'
          Dst:             strncmp
        - Src:             'misc.c:2302,5'
          Dst:             sshfatal
        - Src:             'misc.c:2304,20'
          Dst:             xreallocarray
        - Src:             'misc.c:2313,19'
          Dst:             strlen
        - Src:             'misc.c:2313,38'
          Dst:             strlen
        - Src:             'misc.c:2313,11'
          Dst:             xmalloc
        - Src:             'misc.c:2314,19'
          Dst:             strlen
        - Src:             'misc.c:2314,38'
          Dst:             strlen
        - Src:             'misc.c:2314,2'
          Dst:             snprintf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_signal
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2583
      functionDepth:   0
      returnType:      'func_type *'
      argCount:        2
      argTypes:
        - 'int '
        - 'func_type *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          69
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - memset
        - sigaction
        - sigfillset
        - sshlog
        - strsignal
      functionUses:    2
      BranchProfiles:
        - Branch String:   'misc.c:2591,6'
          Branch Sides:
            - BranchSide:      'misc.c:2592,6'
              BranchSideFuncs:
                - sigaction
                - __sanitizer_cov_trace_const_cmp4
                - strsignal
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:2594,16'
              BranchSideFuncs:
                - sigaction
                - __sanitizer_cov_trace_const_cmp4
                - strsignal
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'misc.c:2594,6'
          Branch Sides:
            - BranchSide:      'misc.c:2595,3'
              BranchSideFuncs:
                - strsignal
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:2598,13'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:2587,2'
          Dst:             memset
        - Src:             'misc.c:2589,2'
          Dst:             sigfillset
        - Src:             'misc.c:2594,6'
          Dst:             sigaction
        - Src:             'misc.c:2595,3'
          Dst:             strsignal
        - Src:             'misc.c:2595,3'
          Dst:             __errno_location
        - Src:             'misc.c:2595,3'
          Dst:             strerror
        - Src:             'misc.c:2595,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _exit
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    10
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dup2
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    geteuid
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    initgroups
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setresgid
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setresuid
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    execve
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char **'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    execv
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fdopen
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct._IO_FILE *'
      argCount:        2
      argTypes:
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kill
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    waitpid
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sigfillset
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.__sigset_t *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sigaction
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'struct.sigaction *'
        - 'struct.sigaction *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strsignal
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    realpath
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dirname
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    stdfd_devnull
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2603
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         25
      ICount:          127
      EdgeCount:       33
      CyclomaticComplexity: 10
      functionsReached:
        - __errno_location
        - close
        - dup2
        - open
        - sshlog
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2606,6'
          Branch Sides:
            - BranchSide:      'misc.c:2607,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:2611,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2611,16'
          Branch Sides:
            - BranchSide:      'misc.c:2611,24'
              BranchSideFuncs:
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - dup2
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2612,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - dup2
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2611,54'
          Branch Sides:
            - BranchSide:      'misc.c:2612,7'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
            - BranchSide:      'misc.c:2614,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
        - Branch String:   'misc.c:2612,17'
          Branch Sides:
            - BranchSide:      'misc.c:2612,25'
              BranchSideFuncs:
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:2613,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'misc.c:2612,56'
          Branch Sides:
            - BranchSide:      'misc.c:2613,7'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
            - BranchSide:      'misc.c:2614,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
        - Branch String:   'misc.c:2613,17'
          Branch Sides:
            - BranchSide:      'misc.c:2613,25'
              BranchSideFuncs:
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:2617,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - close
        - Branch String:   'misc.c:2611,6'
          Branch Sides:
            - BranchSide:      'misc.c:2614,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - close
            - BranchSide:      'misc.c:2617,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - close
        - Branch String:   'misc.c:2617,6'
          Branch Sides:
            - BranchSide:      'misc.c:2618,9'
              BranchSideFuncs:
                - close
            - BranchSide:      'misc.c:2619,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:2606,17'
          Dst:             open
        - Src:             'misc.c:2607,3'
          Dst:             __errno_location
        - Src:             'misc.c:2607,3'
          Dst:             strerror
        - Src:             'misc.c:2607,3'
          Dst:             sshlog
        - Src:             'misc.c:2611,19'
          Dst:             dup2
        - Src:             'misc.c:2612,20'
          Dst:             dup2
        - Src:             'misc.c:2613,20'
          Dst:             dup2
        - Src:             'misc.c:2614,3'
          Dst:             __errno_location
        - Src:             'misc.c:2614,3'
          Dst:             strerror
        - Src:             'misc.c:2614,3'
          Dst:             sshlog
        - Src:             'misc.c:2618,3'
          Dst:             close
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    opt_array_append
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2577
      functionDepth:   0
      returnType:      'N/A'
      argCount:        6
      argTypes:
        - 'char *'
        - 'int '
        - 'char *'
        - 'char ***'
        - 'int *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          36
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - opt_array_append2
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'misc.c:2578,2'
          Dst:             opt_array_append2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    opt_array_append2
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2558
      functionDepth:   0
      returnType:      'N/A'
      argCount:        8
      argTypes:
        - 'char *'
        - 'int '
        - 'char *'
        - 'char ***'
        - 'int **'
        - 'int *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          108
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached:
        - sshfatal
        - xrecallocarray
        - xstrdup
      functionUses:    1
      BranchProfiles:
        - Branch String:   'misc.c:2560,6'
          Branch Sides:
            - BranchSide:      'misc.c:2561,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:2563,6'
              BranchSideFuncs:
                - xrecallocarray
                - xstrdup
                - xrecallocarray
        - Branch String:   'misc.c:2563,6'
          Branch Sides:
            - BranchSide:      'misc.c:2563,6'
              BranchSideFuncs:
                - xrecallocarray
                - xrecallocarray
                - xstrdup
            - BranchSide:      'misc.c:2564,29'
              BranchSideFuncs:
                - xrecallocarray
                - xrecallocarray
                - xstrdup
      Callsites:
        - Src:             'misc.c:2561,3'
          Dst:             sshfatal
        - Src:             'misc.c:2564,13'
          Dst:             xrecallocarray
        - Src:             'misc.c:2569,11'
          Dst:             xrecallocarray
        - Src:             'misc.c:2570,18'
          Dst:             xstrdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    opt_match
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2546
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char **'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          60
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - strlen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2547,52'
          Branch Sides:
            - BranchSide:      'misc.c:2548,8'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_const_cmp4
                - strlen
            - BranchSide:      'misc.c:2552,2'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2547,6'
          Branch Sides:
            - BranchSide:      'misc.c:2549,19'
              BranchSideFuncs:
                - strlen
            - BranchSide:      'misc.c:2552,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:2547,33'
          Dst:             strlen
        - Src:             'misc.c:2547,6'
          Dst:             strncasecmp
        - Src:             'misc.c:2548,14'
          Dst:             strlen
        - Src:             'misc.c:2549,12'
          Dst:             strlen
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strncasecmp
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    opt_dequote
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2513
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char **'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         21
      ICount:          154
      EdgeCount:       28
      CyclomaticComplexity: 9
      functionsReached:
        - strlen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2519,6'
          Branch Sides:
            - BranchSide:      'misc.c:2520,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2523,3'
              BranchSideFuncs:
                - strlen
                - malloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2524,6'
          Branch Sides:
            - BranchSide:      'misc.c:2525,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2528,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2528,25'
          Branch Sides:
            - BranchSide:      'misc.c:2528,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2528,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2528,2'
          Branch Sides:
            - BranchSide:      'misc.c:2529,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2533,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'misc.c:2529,20'
          Branch Sides:
            - BranchSide:      'misc.c:2529,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2531,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2529,7'
          Branch Sides:
            - BranchSide:      'misc.c:2530,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2531,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2533,6'
          Branch Sides:
            - BranchSide:      'misc.c:2534,4'
              BranchSideFuncs:
                - free
            - BranchSide:      'misc.c:2538,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:2524,20'
          Dst:             strlen
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    opt_flag
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2495
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'int '
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          87
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - strlen
        - strncasecmp
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2500,19'
          Branch Sides:
            - BranchSide:      'misc.c:2500,34'
              BranchSideFuncs:
                - strncasecmp
                - __sanitizer_cov_trace_const_cmp4
                - strncasecmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2504,18'
              BranchSideFuncs:
                - strncasecmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2500,6'
          Branch Sides:
            - BranchSide:      'misc.c:2501,8'
              BranchSideFuncs:
                - strncasecmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2504,18'
              BranchSideFuncs:
                - strncasecmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2504,6'
          Branch Sides:
            - BranchSide:      'misc.c:2505,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2508,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:2496,19'
          Dst:             strlen
        - Src:             'misc.c:2500,22'
          Dst:             strncasecmp
        - Src:             'misc.c:2504,6'
          Dst:             strncasecmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    skip_space
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2476
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         8
      ICount:          48
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2479,29'
          Branch Sides:
            - BranchSide:      'misc.c:2479,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2479,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2479,2'
          Branch Sides:
            - BranchSide:      'misc.c:2479,47'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2481,9'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    format_absolute_time
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2459
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'size_t '
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          43
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - localtime_r
        - strftime
      functionUses:    2
      BranchProfiles:
        - Branch String:   'misc.c:2460,14'
          Branch Sides:
            - BranchSide:      'misc.c:2460,14'
              BranchSideFuncs:
                - localtime_r
                - strftime
            - BranchSide:      'misc.c:2460,52'
              BranchSideFuncs:
                - localtime_r
                - strftime
      Callsites:
        - Src:             'misc.c:2463,2'
          Dst:             localtime_r
        - Src:             'misc.c:2464,2'
          Dst:             strftime
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    localtime_r
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.tm *'
      argCount:        2
      argTypes:
        - 'size_t *'
        - 'struct.tm *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strftime
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        4
      argTypes:
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'struct.tm *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    parse_absolute_time
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2400
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         32
      ICount:          211
      EdgeCount:       40
      CyclomaticComplexity: 10
      functionsReached:
        - memset
        - mktime
        - snprintf
        - strcasecmp
        - strlen
        - strptime
        - timegm
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2411,12'
          Branch Sides:
            - BranchSide:      'misc.c:2411,26'
              BranchSideFuncs:
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - snprintf
                - memset
                - strptime
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - mktime
                - __sanitizer_cov_trace_const_cmp8
                - timegm
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - snprintf
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2414,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - snprintf
                - memset
                - strptime
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - mktime
                - __sanitizer_cov_trace_const_cmp8
                - timegm
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - snprintf
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2411,6'
          Branch Sides:
            - BranchSide:      'misc.c:2412,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - snprintf
                - memset
                - strptime
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - mktime
                - __sanitizer_cov_trace_const_cmp8
                - timegm
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - snprintf
            - BranchSide:      'misc.c:2414,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - snprintf
                - memset
                - strptime
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - mktime
                - __sanitizer_cov_trace_const_cmp8
                - timegm
                - __sanitizer_cov_trace_const_cmp8
                - snprintf
                - snprintf
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2423,2'
          Branch Sides:
            - BranchSide:      'misc.c:2425,7'
              BranchSideFuncs:
                - snprintf
                - memset
                - strptime
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - mktime
                - __sanitizer_cov_trace_const_cmp8
                - timegm
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:2429,7'
              BranchSideFuncs:
                - snprintf
                - memset
                - strptime
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - mktime
                - __sanitizer_cov_trace_const_cmp8
                - timegm
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:2434,7'
              BranchSideFuncs:
                - snprintf
                - memset
                - strptime
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - mktime
                - __sanitizer_cov_trace_const_cmp8
                - timegm
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:2439,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2443,45'
          Branch Sides:
            - BranchSide:      'misc.c:2443,49'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2444,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2443,6'
          Branch Sides:
            - BranchSide:      'misc.c:2444,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2445,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - mktime
                - __sanitizer_cov_trace_const_cmp8
                - timegm
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'misc.c:2445,6'
          Branch Sides:
            - BranchSide:      'misc.c:2446,13'
              BranchSideFuncs:
                - timegm
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:2449,13'
              BranchSideFuncs:
                - mktime
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'misc.c:2446,7'
          Branch Sides:
            - BranchSide:      'misc.c:2447,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2448,2'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2449,7'
          Branch Sides:
            - BranchSide:      'misc.c:0,0'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2450,4'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:2410,6'
          Dst:             strlen
        - Src:             'misc.c:2411,15'
          Dst:             strcasecmp
        - Src:             'misc.c:2414,22'
          Dst:             strcasecmp
        - Src:             'misc.c:2426,3'
          Dst:             snprintf
        - Src:             'misc.c:2430,3'
          Dst:             snprintf
        - Src:             'misc.c:2435,3'
          Dst:             snprintf
        - Src:             'misc.c:2442,2'
          Dst:             memset
        - Src:             'misc.c:2443,12'
          Dst:             strptime
        - Src:             'misc.c:2446,13'
          Dst:             timegm
        - Src:             'misc.c:2449,13'
          Dst:             mktime
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strptime
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'struct.tm *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    timegm
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'struct.tm *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mktime
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'struct.tm *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    atoi_err
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2386
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         12
      ICount:          64
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - strtonum
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2390,19'
          Branch Sides:
            - BranchSide:      'misc.c:2390,23'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2391,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2390,6'
          Branch Sides:
            - BranchSide:      'misc.c:2391,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2392,17'
              BranchSideFuncs:
                - strtonum
        - Branch String:   'misc.c:2393,6'
          Branch Sides:
            - BranchSide:      'misc.c:2394,15'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2395,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:2392,8'
          Dst:             strtonum
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    valid_env_name
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2372
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         15
      ICount:          84
      EdgeCount:       19
      CyclomaticComplexity: 6
      functionsReached:
        - __ctype_b_loc
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2375,6'
          Branch Sides:
            - BranchSide:      'misc.c:2376,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2377,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2377,2'
          Branch Sides:
            - BranchSide:      'misc.c:2378,8'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2381,2'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2378,29'
          Branch Sides:
            - BranchSide:      'misc.c:2378,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2380,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2378,7'
          Branch Sides:
            - BranchSide:      'misc.c:2379,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2380,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'misc.c:2378,8'
          Dst:             __ctype_b_loc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    safe_path_fd
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2243
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'int '
        - 'char *'
        - 'struct.passwd *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          62
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - __errno_location
        - fstat
        - safe_path
        - snprintf
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2247,6'
          Branch Sides:
            - BranchSide:      'misc.c:2248,12'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - snprintf
            - BranchSide:      'misc.c:2252,19'
              BranchSideFuncs:
                - safe_path
      Callsites:
        - Src:             'misc.c:2247,6'
          Dst:             fstat
        - Src:             'misc.c:2249,22'
          Dst:             __errno_location
        - Src:             'misc.c:2249,13'
          Dst:             strerror
        - Src:             'misc.c:2248,3'
          Dst:             snprintf
        - Src:             'misc.c:2252,9'
          Dst:             safe_path
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fstat
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'struct.stat *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    exited_cleanly
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2143
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'int '
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         14
      ICount:          98
      EdgeCount:       18
      CyclomaticComplexity: 6
      functionsReached:
        - __errno_location
        - sshlog
        - waitpid
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2146,2'
          Branch Sides:
            - BranchSide:      'misc.c:2147,7'
              BranchSideFuncs:
                - __errno_location
                - waitpid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:2152,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
        - Branch String:   'misc.c:2147,7'
          Branch Sides:
            - BranchSide:      'misc.c:2146,2'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:2148,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'misc.c:2152,6'
          Branch Sides:
            - BranchSide:      'misc.c:2153,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'misc.c:2155,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
      Callsites:
        - Src:             'misc.c:2146,9'
          Dst:             waitpid
        - Src:             'misc.c:2147,7'
          Dst:             __errno_location
        - Src:             'misc.c:2148,4'
          Dst:             __errno_location
        - Src:             'misc.c:2148,4'
          Dst:             strerror
        - Src:             'misc.c:2148,4'
          Dst:             sshlog
        - Src:             'misc.c:2153,3'
          Dst:             sshlog
        - Src:             'misc.c:2156,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    argv_free
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2130
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char **'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         10
      ICount:          54
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2133,6'
          Branch Sides:
            - BranchSide:      'misc.c:2134,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2135,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - free
                - free
        - Branch String:   'misc.c:2135,2'
          Branch Sides:
            - BranchSide:      'misc.c:2136,8'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_cmp4
                - free
            - BranchSide:      'misc.c:2137,7'
              BranchSideFuncs:
                - free
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    argv_consume
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2124
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          9
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    argv_next
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2112
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'int *'
        - 'char ***'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          46
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2115,17'
          Branch Sides:
            - BranchSide:      'misc.c:2115,20'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2115,17'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2115,6'
          Branch Sides:
            - BranchSide:      'misc.c:2115,6'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2116,5'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    argv_assemble
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2062
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'int '
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         50
      ICount:          280
      EdgeCount:       59
      CyclomaticComplexity: 11
      functionsReached:
        - ssh_err
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put_u8
        - sshbuf_putb
        - sshbuf_reset
        - sshfatal
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:2067,35'
          Branch Sides:
            - BranchSide:      'misc.c:2067,45'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:2068,3'
              BranchSideFuncs:
                - sshfatal
        - Branch String:   'misc.c:2067,6'
          Branch Sides:
            - BranchSide:      'misc.c:2068,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:2070,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
        - Branch String:   'misc.c:2070,2'
          Branch Sides:
            - BranchSide:      'misc.c:2071,6'
              BranchSideFuncs:
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
            - BranchSide:      'misc.c:2101,31'
              BranchSideFuncs:
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
        - Branch String:   'misc.c:2073,3'
          Branch Sides:
            - BranchSide:      'misc.c:2074,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
            - BranchSide:      'misc.c:2095,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2076,4'
          Branch Sides:
            - BranchSide:      'misc.c:2079,8'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:2079,8'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:2085,28'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:2085,28'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:2085,28'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:2089,23'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - ssh_err
                - sshfatal
        - Branch String:   'misc.c:2085,9'
          Branch Sides:
            - BranchSide:      'misc.c:2085,43'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - sshbuf_put_u8
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:2086,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - sshbuf_put_u8
                - ssh_err
                - sshfatal
        - Branch String:   'misc.c:2092,8'
          Branch Sides:
            - BranchSide:      'misc.c:2093,5'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:2094,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
        - Branch String:   'misc.c:2095,15'
          Branch Sides:
            - BranchSide:      'misc.c:2095,37'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2096,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2095,54'
          Branch Sides:
            - BranchSide:      'misc.c:2096,8'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:2099,4'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
        - Branch String:   'misc.c:2096,16'
          Branch Sides:
            - BranchSide:      'misc.c:2096,38'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2097,24'
              BranchSideFuncs:
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2096,55'
          Branch Sides:
            - BranchSide:      'misc.c:2097,24'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:2099,4'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
        - Branch String:   'misc.c:2097,40'
          Branch Sides:
            - BranchSide:      'misc.c:2098,8'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:2099,4'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
        - Branch String:   'misc.c:2098,16'
          Branch Sides:
            - BranchSide:      'misc.c:2098,38'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
            - BranchSide:      'misc.c:2100,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
        - Branch String:   'misc.c:2095,7'
          Branch Sides:
            - BranchSide:      'misc.c:2099,4'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:2100,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshbuf_len
                - malloc
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
                - sshfatal
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshbuf_put_u8
        - Branch String:   'misc.c:2101,6'
          Branch Sides:
            - BranchSide:      'misc.c:2102,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:2103,9'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_len
                - sshbuf_free
                - sshbuf_free
      Callsites:
        - Src:             'misc.c:2067,13'
          Dst:             sshbuf_new
        - Src:             'misc.c:2067,45'
          Dst:             sshbuf_new
        - Src:             'misc.c:2068,3'
          Dst:             sshfatal
        - Src:             'misc.c:2072,3'
          Dst:             sshbuf_reset
        - Src:             'misc.c:2080,9'
          Dst:             sshbuf_put_u8
        - Src:             'misc.c:2085,14'
          Dst:             sshbuf_put_u8
        - Src:             'misc.c:2089,9'
          Dst:             sshbuf_put_u8
        - Src:             'misc.c:2093,5'
          Dst:             ssh_err
        - Src:             'misc.c:2093,5'
          Dst:             sshfatal
        - Src:             'misc.c:2095,23'
          Dst:             sshbuf_put_u8
        - Src:             'misc.c:2096,24'
          Dst:             sshbuf_put_u8
        - Src:             'misc.c:2097,12'
          Dst:             sshbuf_putb
        - Src:             'misc.c:2098,24'
          Dst:             sshbuf_put_u8
        - Src:             'misc.c:2099,4'
          Dst:             ssh_err
        - Src:             'misc.c:2099,4'
          Dst:             sshfatal
        - Src:             'misc.c:2101,20'
          Dst:             sshbuf_len
        - Src:             'misc.c:2102,3'
          Dst:             sshfatal
        - Src:             'misc.c:2103,14'
          Dst:             sshbuf_ptr
        - Src:             'misc.c:2103,31'
          Dst:             sshbuf_len
        - Src:             'misc.c:2104,6'
          Dst:             sshbuf_len
        - Src:             'misc.c:2105,2'
          Dst:             sshbuf_free
        - Src:             'misc.c:2106,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    argv_split
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1989
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'int *'
        - 'char ***'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         77
      ICount:          488
      EdgeCount:       102
      CyclomaticComplexity: 27
      functionsReached:
        - strlen
        - xcalloc
        - xreallocarray
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1997,2'
          Branch Sides:
            - BranchSide:      'misc.c:1999,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2042,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
        - Branch String:   'misc.c:1999,19'
          Branch Sides:
            - BranchSide:      'misc.c:1999,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2000,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1999,7'
          Branch Sides:
            - BranchSide:      'misc.c:2000,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2001,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2001,28'
          Branch Sides:
            - BranchSide:      'misc.c:2001,31'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2004,9'
              BranchSideFuncs:
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2001,7'
          Branch Sides:
            - BranchSide:      'misc.c:2002,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
            - BranchSide:      'misc.c:2004,9'
              BranchSideFuncs:
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2011,3'
          Branch Sides:
            - BranchSide:      'misc.c:2012,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2032,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2012,8'
          Branch Sides:
            - BranchSide:      'misc.c:2013,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2023,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2013,26'
          Branch Sides:
            - BranchSide:      'misc.c:2014,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2017,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2014,26'
          Branch Sides:
            - BranchSide:      'misc.c:2015,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2017,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2015,26'
          Branch Sides:
            - BranchSide:      'misc.c:2016,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2017,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2016,21'
          Branch Sides:
            - BranchSide:      'misc.c:2016,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2021,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2013,9'
          Branch Sides:
            - BranchSide:      'misc.c:2017,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2021,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2023,26'
          Branch Sides:
            - BranchSide:      'misc.c:2023,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2025,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2023,42'
          Branch Sides:
            - BranchSide:      'misc.c:2023,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2024,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2023,15'
          Branch Sides:
            - BranchSide:      'misc.c:2024,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2025,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2025,24'
          Branch Sides:
            - BranchSide:      'misc.c:2025,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'misc.c:2027,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'misc.c:2025,41'
          Branch Sides:
            - BranchSide:      'misc.c:2025,44'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2026,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2025,13'
          Branch Sides:
            - BranchSide:      'misc.c:2026,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2027,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'misc.c:2027,24'
          Branch Sides:
            - BranchSide:      'misc.c:2027,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2030,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2027,13'
          Branch Sides:
            - BranchSide:      'misc.c:2028,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:2030,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2032,7'
          Branch Sides:
            - BranchSide:      'misc.c:2033,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
            - BranchSide:      'misc.c:2040,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xreallocarray
                - strlen
                - xcalloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2033,8'
          Branch Sides:
            - BranchSide:      'misc.c:2035,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
            - BranchSide:      'misc.c:2038,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
        - Branch String:   'misc.c:2048,16'
          Branch Sides:
            - BranchSide:      'misc.c:2048,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - free
                - free
            - BranchSide:      'misc.c:2048,16'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2048,6'
          Branch Sides:
            - BranchSide:      'misc.c:2048,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - free
                - free
            - BranchSide:      'misc.c:2049,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - free
                - free
        - Branch String:   'misc.c:2049,3'
          Branch Sides:
            - BranchSide:      'misc.c:2050,9'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_cmp4
                - free
            - BranchSide:      'misc.c:2051,8'
              BranchSideFuncs:
                - free
      Callsites:
        - Src:             'misc.c:1992,22'
          Dst:             xcalloc
        - Src:             'misc.c:2006,10'
          Dst:             xreallocarray
        - Src:             'misc.c:2007,35'
          Dst:             strlen
        - Src:             'misc.c:2007,24'
          Dst:             xcalloc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    daemonized
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1967
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         10
      ICount:          52
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - close
        - getppid
        - getsid
        - open
        - sshlog
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1968,6'
          Branch Sides:
            - BranchSide:      'misc.c:1970,12'
              BranchSideFuncs:
                - open
                - __sanitizer_cov_trace_const_cmp4
                - getppid
                - __sanitizer_cov_trace_const_cmp4
                - getsid
                - getpid
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - close
            - BranchSide:      'misc.c:1970,12'
              BranchSideFuncs:
                - open
                - __sanitizer_cov_trace_const_cmp4
                - getppid
                - __sanitizer_cov_trace_const_cmp4
                - getsid
                - getpid
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - close
        - Branch String:   'misc.c:1970,6'
          Branch Sides:
            - BranchSide:      'misc.c:1971,9'
              BranchSideFuncs:
                - close
            - BranchSide:      'misc.c:1974,6'
              BranchSideFuncs:
                - getppid
                - __sanitizer_cov_trace_const_cmp4
                - getsid
                - getpid
                - __sanitizer_cov_trace_cmp4
                - sshlog
        - Branch String:   'misc.c:1974,6'
          Branch Sides:
            - BranchSide:      'misc.c:1975,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1976,6'
              BranchSideFuncs:
                - getsid
                - getpid
                - __sanitizer_cov_trace_cmp4
                - sshlog
        - Branch String:   'misc.c:1976,6'
          Branch Sides:
            - BranchSide:      'misc.c:1977,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1978,2'
              BranchSideFuncs:
                - sshlog
      Callsites:
        - Src:             'misc.c:1970,12'
          Dst:             open
        - Src:             'misc.c:1971,3'
          Dst:             close
        - Src:             'misc.c:1974,6'
          Dst:             getppid
        - Src:             'misc.c:1976,6'
          Dst:             getsid
        - Src:             'misc.c:1976,19'
          Dst:             getpid
        - Src:             'misc.c:1978,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getppid
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getsid
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strcmp_maybe_null
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1933
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         20
      ICount:          81
      EdgeCount:       26
      CyclomaticComplexity: 8
      functionsReached:
        - strcmp
      functionUses:    4
      BranchProfiles:
        - Branch String:   'misc.c:1934,17'
          Branch Sides:
            - BranchSide:      'misc.c:1934,20'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:1934,35'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1934,31'
          Branch Sides:
            - BranchSide:      'misc.c:1934,35'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1935,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:1934,45'
          Branch Sides:
            - BranchSide:      'misc.c:1934,48'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:1936,6'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1934,6'
          Branch Sides:
            - BranchSide:      'misc.c:1935,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1936,6'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1936,16'
          Branch Sides:
            - BranchSide:      'misc.c:1936,26'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:1938,2'
              BranchSideFuncs: []
        - Branch String:   'misc.c:1936,6'
          Branch Sides:
            - BranchSide:      'misc.c:1937,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1938,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:1936,19'
          Dst:             strcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    forward_equals
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1947
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.Forward *'
        - 'struct.Forward *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         16
      ICount:          112
      EdgeCount:       22
      CyclomaticComplexity: 8
      functionsReached:
        - strcmp_maybe_null
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1948,6'
          Branch Sides:
            - BranchSide:      'misc.c:1949,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1950,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - strcmp_maybe_null
                - __sanitizer_cov_trace_const_cmp4
                - strcmp_maybe_null
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - strcmp_maybe_null
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1950,6'
          Branch Sides:
            - BranchSide:      'misc.c:1951,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1952,24'
              BranchSideFuncs:
                - strcmp_maybe_null
                - __sanitizer_cov_trace_const_cmp4
                - strcmp_maybe_null
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - strcmp_maybe_null
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1952,6'
          Branch Sides:
            - BranchSide:      'misc.c:1953,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1954,24'
              BranchSideFuncs:
                - strcmp_maybe_null
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - strcmp_maybe_null
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1954,6'
          Branch Sides:
            - BranchSide:      'misc.c:1955,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1956,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - strcmp_maybe_null
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1956,6'
          Branch Sides:
            - BranchSide:      'misc.c:1957,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1958,24'
              BranchSideFuncs:
                - strcmp_maybe_null
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1958,6'
          Branch Sides:
            - BranchSide:      'misc.c:1959,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1961,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:1948,6'
          Dst:             strcmp_maybe_null
        - Src:             'misc.c:1952,6'
          Dst:             strcmp_maybe_null
        - Src:             'misc.c:1954,6'
          Dst:             strcmp_maybe_null
        - Src:             'misc.c:1958,6'
          Dst:             strcmp_maybe_null
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sock_set_v6only
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1917
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          37
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - __errno_location
        - setsockopt
        - sshlog
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1922,6'
          Branch Sides:
            - BranchSide:      'misc.c:1922,6'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:1923,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
      Callsites:
        - Src:             'misc.c:1921,2'
          Dst:             sshlog
        - Src:             'misc.c:1922,6'
          Dst:             setsockopt
        - Src:             'misc.c:1923,3'
          Dst:             __errno_location
        - Src:             'misc.c:1923,3'
          Dst:             strerror
        - Src:             'misc.c:1923,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setsockopt
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'int '
        - 'int '
        - 'int '
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    unix_listener
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1873
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         20
      ICount:          166
      EdgeCount:       27
      CyclomaticComplexity: 9
      functionsReached:
        - __errno_location
        - bind
        - close
        - listen
        - memset
        - socket
        - sshlog
        - strlcpy
        - unlink
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1879,6'
          Branch Sides:
            - BranchSide:      'misc.c:1881,3'
              BranchSideFuncs:
                - sshlog
                - __errno_location
            - BranchSide:      'misc.c:1886,9'
              BranchSideFuncs:
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - bind
                - __sanitizer_cov_trace_const_cmp4
                - listen
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - unlink
                - __errno_location
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - __errno_location
                - unlink
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
        - Branch String:   'misc.c:1887,6'
          Branch Sides:
            - BranchSide:      'misc.c:1888,17'
              BranchSideFuncs:
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
            - BranchSide:      'misc.c:1893,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - bind
                - __sanitizer_cov_trace_const_cmp4
                - listen
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - unlink
                - __errno_location
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - __errno_location
                - unlink
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'misc.c:1893,6'
          Branch Sides:
            - BranchSide:      'misc.c:1894,14'
              BranchSideFuncs:
                - unlink
                - __sanitizer_cov_trace_const_cmp4
                - bind
                - __sanitizer_cov_trace_const_cmp4
                - listen
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - unlink
                - __errno_location
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:1897,11'
              BranchSideFuncs:
                - bind
                - __sanitizer_cov_trace_const_cmp4
                - listen
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - unlink
                - __errno_location
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - __errno_location
        - Branch String:   'misc.c:1894,25'
          Branch Sides:
            - BranchSide:      'misc.c:1894,28'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - bind
                - __sanitizer_cov_trace_const_cmp4
                - listen
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - unlink
                - __errno_location
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:1896,2'
              BranchSideFuncs:
                - bind
                - __sanitizer_cov_trace_const_cmp4
                - listen
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - unlink
                - __errno_location
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - __errno_location
        - Branch String:   'misc.c:1894,7'
          Branch Sides:
            - BranchSide:      'misc.c:1895,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - bind
                - __sanitizer_cov_trace_const_cmp4
                - listen
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - unlink
                - __errno_location
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - __errno_location
            - BranchSide:      'misc.c:1896,2'
              BranchSideFuncs:
                - bind
                - __sanitizer_cov_trace_const_cmp4
                - listen
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - unlink
                - __errno_location
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - __errno_location
        - Branch String:   'misc.c:1897,6'
          Branch Sides:
            - BranchSide:      'misc.c:1898,17'
              BranchSideFuncs:
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - __errno_location
            - BranchSide:      'misc.c:1904,13'
              BranchSideFuncs:
                - listen
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - unlink
                - __errno_location
        - Branch String:   'misc.c:1904,6'
          Branch Sides:
            - BranchSide:      'misc.c:1905,17'
              BranchSideFuncs:
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - close
                - unlink
                - __errno_location
            - BranchSide:      'misc.c:1912,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:1877,2'
          Dst:             memset
        - Src:             'misc.c:1879,6'
          Dst:             strlcpy
        - Src:             'misc.c:1881,3'
          Dst:             sshlog
        - Src:             'misc.c:1882,3'
          Dst:             __errno_location
        - Src:             'misc.c:1886,9'
          Dst:             socket
        - Src:             'misc.c:1888,17'
          Dst:             __errno_location
        - Src:             'misc.c:1889,3'
          Dst:             __errno_location
        - Src:             'misc.c:1889,3'
          Dst:             strerror
        - Src:             'misc.c:1889,3'
          Dst:             sshlog
        - Src:             'misc.c:1890,3'
          Dst:             __errno_location
        - Src:             'misc.c:1894,7'
          Dst:             unlink
        - Src:             'misc.c:1894,28'
          Dst:             __errno_location
        - Src:             'misc.c:1895,4'
          Dst:             __errno_location
        - Src:             'misc.c:1895,4'
          Dst:             strerror
        - Src:             'misc.c:1895,4'
          Dst:             sshlog
        - Src:             'misc.c:1897,6'
          Dst:             bind
        - Src:             'misc.c:1898,17'
          Dst:             __errno_location
        - Src:             'misc.c:1899,3'
          Dst:             __errno_location
        - Src:             'misc.c:1899,3'
          Dst:             strerror
        - Src:             'misc.c:1899,3'
          Dst:             sshlog
        - Src:             'misc.c:1900,3'
          Dst:             close
        - Src:             'misc.c:1901,3'
          Dst:             __errno_location
        - Src:             'misc.c:1904,6'
          Dst:             listen
        - Src:             'misc.c:1905,17'
          Dst:             __errno_location
        - Src:             'misc.c:1906,3'
          Dst:             __errno_location
        - Src:             'misc.c:1906,3'
          Dst:             strerror
        - Src:             'misc.c:1906,3'
          Dst:             sshlog
        - Src:             'misc.c:1907,3'
          Dst:             close
        - Src:             'misc.c:1908,3'
          Dst:             unlink
        - Src:             'misc.c:1909,3'
          Dst:             __errno_location
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    socket
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    bind
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'struct.sockaddr *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    listen
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    lowercase
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1866
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         7
      ICount:          38
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - tolower
      functionUses:    1
      BranchProfiles:
        - Branch String:   'misc.c:1867,2'
          Branch Sides:
            - BranchSide:      'misc.c:1868,25'
              BranchSideFuncs:
                - tolower
                - __sanitizer_cov_trace_const_cmp1
            - BranchSide:      'misc.c:1869,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:1868,8'
          Dst:             tolower
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    iptos2str
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1852
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          61
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - snprintf
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1856,2'
          Branch Sides:
            - BranchSide:      'misc.c:1857,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - snprintf
            - BranchSide:      'misc.c:1860,50'
              BranchSideFuncs:
                - snprintf
        - Branch String:   'misc.c:1857,7'
          Branch Sides:
            - BranchSide:      'misc.c:1858,17'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1859,2'
              BranchSideFuncs:
                - snprintf
                - __sanitizer_cov_trace_cmp4
      Callsites:
        - Src:             'misc.c:1860,2'
          Dst:             snprintf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    parse_ipqos
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1832
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         21
      ICount:          115
      EdgeCount:       28
      CyclomaticComplexity: 9
      functionsReached:
        - strcasecmp
        - strtol
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1837,6'
          Branch Sides:
            - BranchSide:      'misc.c:1838,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1839,9'
              BranchSideFuncs:
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1839,2'
          Branch Sides:
            - BranchSide:      'misc.c:1840,18'
              BranchSideFuncs:
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:1844,15'
              BranchSideFuncs:
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'misc.c:1840,7'
          Branch Sides:
            - BranchSide:      'misc.c:1841,17'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1842,2'
              BranchSideFuncs:
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1845,18'
          Branch Sides:
            - BranchSide:      'misc.c:1845,22'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1846,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:1845,33'
          Branch Sides:
            - BranchSide:      'misc.c:1845,36'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1846,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:1845,44'
          Branch Sides:
            - BranchSide:      'misc.c:1845,47'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1846,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:1845,6'
          Branch Sides:
            - BranchSide:      'misc.c:1846,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1847,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:1840,7'
          Dst:             strcasecmp
        - Src:             'misc.c:1844,8'
          Dst:             strtol
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strtol
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char **'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mktemp_proto
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1783
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         17
      ICount:          85
      EdgeCount:       21
      CyclomaticComplexity: 6
      functionsReached:
        - getenv
        - snprintf
        - sshfatal
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1787,6'
          Branch Sides:
            - BranchSide:      'misc.c:1788,16'
              BranchSideFuncs:
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshfatal
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'misc.c:1792,15'
              BranchSideFuncs:
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshfatal
        - Branch String:   'misc.c:1789,13'
          Branch Sides:
            - BranchSide:      'misc.c:1789,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshfatal
            - BranchSide:      'misc.c:1791,2'
              BranchSideFuncs:
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshfatal
        - Branch String:   'misc.c:1789,7'
          Branch Sides:
            - BranchSide:      'misc.c:1790,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1791,2'
              BranchSideFuncs:
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshfatal
        - Branch String:   'misc.c:1793,12'
          Branch Sides:
            - BranchSide:      'misc.c:1793,23'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1794,3'
              BranchSideFuncs:
                - sshfatal
        - Branch String:   'misc.c:1793,6'
          Branch Sides:
            - BranchSide:      'misc.c:1793,6'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1794,3'
              BranchSideFuncs:
                - sshfatal
      Callsites:
        - Src:             'misc.c:1787,16'
          Dst:             getenv
        - Src:             'misc.c:1788,7'
          Dst:             snprintf
        - Src:             'misc.c:1792,6'
          Dst:             snprintf
        - Src:             'misc.c:1794,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    bandwidth_limit
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1731
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.bwlimit *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         52
      ICount:          414
      EdgeCount:       68
      CyclomaticComplexity: 18
      functionsReached:
        - __errno_location
        - monotime_tv
        - nanosleep
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1736,7'
          Branch Sides:
            - BranchSide:      'misc.c:1736,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'misc.c:1740,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'misc.c:1736,6'
          Branch Sides:
            - BranchSide:      'misc.c:1737,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'misc.c:1740,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'misc.c:1740,6'
          Branch Sides:
            - BranchSide:      'misc.c:1741,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1743,15'
              BranchSideFuncs:
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'misc.c:1744,2'
          Branch Sides:
            - BranchSide:      'misc.c:1744,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'misc.c:1745,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'misc.c:1745,7'
          Branch Sides:
            - BranchSide:      'misc.c:1745,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'misc.c:1748,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'misc.c:1745,6'
          Branch Sides:
            - BranchSide:      'misc.c:1746,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'misc.c:1748,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'misc.c:1754,6'
          Branch Sides:
            - BranchSide:      'misc.c:1754,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'misc.c:1754,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - monotime_tv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'misc.c:1754,6'
          Branch Sides:
            - BranchSide:      'misc.c:1755,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - monotime_tv
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'misc.c:1776,2'
              BranchSideFuncs:
                - monotime_tv
        - Branch String:   'misc.c:1754,6'
          Branch Sides:
            - BranchSide:      'misc.c:1755,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - monotime_tv
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'misc.c:1776,2'
              BranchSideFuncs:
                - monotime_tv
        - Branch String:   'misc.c:1755,3'
          Branch Sides:
            - BranchSide:      'misc.c:1755,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - monotime_tv
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'misc.c:1758,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - monotime_tv
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'misc.c:1758,7'
          Branch Sides:
            - BranchSide:      'misc.c:1759,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - monotime_tv
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'misc.c:1762,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - monotime_tv
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'misc.c:1760,8'
          Branch Sides:
            - BranchSide:      'misc.c:1761,18'
              BranchSideFuncs:
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - monotime_tv
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'misc.c:1762,3'
              BranchSideFuncs:
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - monotime_tv
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'misc.c:1764,8'
          Branch Sides:
            - BranchSide:      'misc.c:1765,18'
              BranchSideFuncs:
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - monotime_tv
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'misc.c:1766,3'
              BranchSideFuncs:
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - monotime_tv
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'misc.c:1769,3'
          Branch Sides:
            - BranchSide:      'misc.c:1770,8'
              BranchSideFuncs:
                - __errno_location
                - llvm.memcpy.p0i8.p0i8.i64
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - monotime_tv
            - BranchSide:      'misc.c:1774,2'
              BranchSideFuncs:
                - monotime_tv
        - Branch String:   'misc.c:1770,8'
          Branch Sides:
            - BranchSide:      'misc.c:1771,5'
              BranchSideFuncs:
                - monotime_tv
            - BranchSide:      'misc.c:1772,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - nanosleep
                - __sanitizer_cov_trace_const_cmp4
                - monotime_tv
                - __errno_location
      Callsites:
        - Src:             'misc.c:1737,3'
          Dst:             monotime_tv
        - Src:             'misc.c:1743,2'
          Dst:             monotime_tv
        - Src:             'misc.c:1769,10'
          Dst:             nanosleep
        - Src:             'misc.c:1770,8'
          Dst:             __errno_location
        - Src:             'misc.c:1777,2'
          Dst:             monotime_tv
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    monotime_tv
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1691
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.timeval *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - monotime_ts
      functionUses:    7
      BranchProfiles:  []
      Callsites:
        - Src:             'misc.c:1694,2'
          Dst:             monotime_ts
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nanosleep
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.timeval *'
        - 'struct.timeval *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    bandwidth_limit_init
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1719
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.bwlimit *'
        - 'size_t '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          44
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    monotime_double
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1710
      functionDepth:   0
      returnType:      'N/A'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         3
      ICount:          22
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - monotime_ts
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1711,18'
          Branch Sides:
            - BranchSide:      'misc.c:1711,18'
              BranchSideFuncs:
                - monotime_ts
            - BranchSide:      'misc.c:1713,2'
              BranchSideFuncs:
                - monotime_ts
      Callsites:
        - Src:             'misc.c:1713,2'
          Dst:             monotime_ts
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    monotime
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1701
      functionDepth:   0
      returnType:      'size_t '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         3
      ICount:          16
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - monotime_ts
      functionUses:    4
      BranchProfiles:
        - Branch String:   'misc.c:1702,18'
          Branch Sides:
            - BranchSide:      'misc.c:1702,18'
              BranchSideFuncs:
                - monotime_ts
            - BranchSide:      'misc.c:1704,2'
              BranchSideFuncs:
                - monotime_ts
      Callsites:
        - Src:             'misc.c:1704,2'
          Dst:             monotime_ts
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ms_to_timespec
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1651
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.timeval *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         4
      ICount:          37
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'misc.c:1652,6'
          Branch Sides:
            - BranchSide:      'misc.c:1652,6'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1653,6'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ms_subtract_diff
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1641
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.timeval *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          77
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached:
        - monotime_tv
      functionUses:    3
      BranchProfiles:
        - Branch String:   'misc.c:1645,2'
          Branch Sides:
            - BranchSide:      'misc.c:1645,2'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1645,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:1644,2'
          Dst:             monotime_tv
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    put_u16
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1632
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          32
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    put_u32_le
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1621
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          49
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    put_u32
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1610
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          49
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    9
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    put_u64
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1595
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          85
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_u16
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1583
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          32
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_u32_le
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1569
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          43
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    16
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_u32
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1555
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          43
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    6
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_u64
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1537
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          75
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    xextendf
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1515
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char **'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          87
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - xasprintf
        - xvasprintf
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1523,18'
          Branch Sides:
            - BranchSide:      'misc.c:1523,23'
              BranchSideFuncs:
                - free
            - BranchSide:      'misc.c:1524,9'
              BranchSideFuncs:
                - free
        - Branch String:   'misc.c:1523,6'
          Branch Sides:
            - BranchSide:      'misc.c:1524,9'
              BranchSideFuncs:
                - free
            - BranchSide:      'misc.c:1528,30'
              BranchSideFuncs:
                - xasprintf
                - free
                - free
        - Branch String:   'misc.c:1528,34'
          Branch Sides:
            - BranchSide:      'misc.c:1528,58'
              BranchSideFuncs:
                - xasprintf
                - free
                - free
            - BranchSide:      'misc.c:1528,53'
              BranchSideFuncs:
                - xasprintf
                - free
                - free
      Callsites:
        - Src:             'misc.c:1520,2'
          Dst:             xvasprintf
        - Src:             'misc.c:1528,2'
          Dst:             xasprintf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    tohex
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1491
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         10
      ICount:          80
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - snprintf
        - strlcat
        - xcalloc
        - xstrdup
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1496,6'
          Branch Sides:
            - BranchSide:      'misc.c:1497,10'
              BranchSideFuncs:
                - xstrdup
            - BranchSide:      'misc.c:1499,7'
              BranchSideFuncs:
                - xcalloc
                - __sanitizer_cov_trace_cmp8
                - snprintf
                - strlcat
        - Branch String:   'misc.c:1501,2'
          Branch Sides:
            - BranchSide:      'misc.c:1502,12'
              BranchSideFuncs:
                - snprintf
                - strlcat
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'misc.c:1505,10'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:1497,10'
          Dst:             xstrdup
        - Src:             'misc.c:1500,6'
          Dst:             xcalloc
        - Src:             'misc.c:1502,3'
          Dst:             snprintf
        - Src:             'misc.c:1503,3'
          Dst:             strlcat
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sanitise_stdfd
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1468
      functionDepth:   0
      returnType:      'N/A'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         18
      ICount:          91
      EdgeCount:       22
      CyclomaticComplexity: 6
      functionsReached:
        - __errno_location
        - close
        - dup2
        - exit
        - fcntl
        - fprintf
        - open
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1469,6'
          Branch Sides:
            - BranchSide:      'misc.c:1471,24'
              BranchSideFuncs:
                - open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - fprintf
                - exit
                - __errno_location
                - strerror
                - fprintf
                - exit
            - BranchSide:      'misc.c:1471,24'
              BranchSideFuncs:
                - open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - fprintf
                - exit
                - __errno_location
                - strerror
                - fprintf
                - exit
        - Branch String:   'misc.c:1471,6'
          Branch Sides:
            - BranchSide:      'misc.c:1472,11'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - fprintf
                - exit
            - BranchSide:      'misc.c:1476,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - fprintf
                - exit
        - Branch String:   'misc.c:1476,2'
          Branch Sides:
            - BranchSide:      'misc.c:1478,13'
              BranchSideFuncs:
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - fprintf
                - exit
            - BranchSide:      'misc.c:1485,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - close
        - Branch String:   'misc.c:1478,35'
          Branch Sides:
            - BranchSide:      'misc.c:1476,2'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - fprintf
                - exit
            - BranchSide:      'misc.c:1478,38'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - fprintf
                - exit
        - Branch String:   'misc.c:1478,7'
          Branch Sides:
            - BranchSide:      'misc.c:1476,2'
              BranchSideFuncs:
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - fprintf
                - exit
            - BranchSide:      'misc.c:1479,13'
              BranchSideFuncs:
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - fprintf
                - exit
        - Branch String:   'misc.c:1479,8'
          Branch Sides:
            - BranchSide:      'misc.c:1480,13'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - fprintf
                - exit
            - BranchSide:      'misc.c:1483,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - fprintf
                - exit
        - Branch String:   'misc.c:1485,6'
          Branch Sides:
            - BranchSide:      'misc.c:1485,6'
              BranchSideFuncs:
                - close
            - BranchSide:      'misc.c:1486,9'
              BranchSideFuncs:
                - close
      Callsites:
        - Src:             'misc.c:1471,24'
          Dst:             open
        - Src:             'misc.c:1473,16'
          Dst:             __errno_location
        - Src:             'misc.c:1473,7'
          Dst:             strerror
        - Src:             'misc.c:1472,3'
          Dst:             fprintf
        - Src:             'misc.c:1474,3'
          Dst:             exit
        - Src:             'misc.c:1478,7'
          Dst:             fcntl
        - Src:             'misc.c:1478,38'
          Dst:             __errno_location
        - Src:             'misc.c:1479,8'
          Dst:             dup2
        - Src:             'misc.c:1480,44'
          Dst:             __errno_location
        - Src:             'misc.c:1480,35'
          Dst:             strerror
        - Src:             'misc.c:1480,5'
          Dst:             fprintf
        - Src:             'misc.c:1481,5'
          Dst:             exit
        - Src:             'misc.c:1486,3'
          Dst:             close
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fcntl
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    tun_open
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1390
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sys_tun_open
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'misc.c:1392,10'
          Dst:             sys_tun_open
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    percent_dollar_expand
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1375
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         5
      ICount:          43
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached:
        - sshfatal
        - vdollar_percent_expand
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1383,6'
          Branch Sides:
            - BranchSide:      'misc.c:1384,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1385,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:1381,8'
          Dst:             vdollar_percent_expand
        - Src:             'misc.c:1384,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    vdollar_percent_expand
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1222
      functionDepth:   0
      returnType:      'char *'
      argCount:        5
      argTypes:
        - 'int *'
        - 'int '
        - 'int '
        - 'char *'
        - 'struct.__va_list_tag *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         87
      ICount:          550
      EdgeCount:       110
      CyclomaticComplexity: 25
      functionsReached:
        - getenv
        - ssh_err
        - sshbuf_dup_string
        - sshbuf_free
        - sshbuf_new
        - sshbuf_put
        - sshbuf_put_u8
        - sshfatal
        - sshlog
        - strchr
        - strlcpy
        - strlen
        - xmalloc
      functionUses:    3
      BranchProfiles:
        - Branch String:   'misc.c:1234,6'
          Branch Sides:
            - BranchSide:      'misc.c:1235,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1236,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - sshfatal
        - Branch String:   'misc.c:1236,6'
          Branch Sides:
            - BranchSide:      'misc.c:1237,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1238,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
        - Branch String:   'misc.c:1241,6'
          Branch Sides:
            - BranchSide:      'misc.c:1242,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
            - BranchSide:      'misc.c:1259,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'misc.c:1242,3'
          Branch Sides:
            - BranchSide:      'misc.c:1243,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - sshfatal
            - BranchSide:      'misc.c:1252,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
        - Branch String:   'misc.c:1243,25'
          Branch Sides:
            - BranchSide:      'misc.c:1243,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
            - BranchSide:      'misc.c:1243,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
        - Branch String:   'misc.c:1244,8'
          Branch Sides:
            - BranchSide:      'misc.c:1245,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
            - BranchSide:      'misc.c:1246,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
        - Branch String:   'misc.c:1246,26'
          Branch Sides:
            - BranchSide:      'misc.c:1246,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
            - BranchSide:      'misc.c:1246,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
        - Branch String:   'misc.c:1247,8'
          Branch Sides:
            - BranchSide:      'misc.c:1248,5'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1251,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
        - Branch String:   'misc.c:1252,35'
          Branch Sides:
            - BranchSide:      'misc.c:1252,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
                - sshfatal
            - BranchSide:      'misc.c:1254,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
        - Branch String:   'misc.c:1252,38'
          Branch Sides:
            - BranchSide:      'misc.c:1252,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
                - sshfatal
            - BranchSide:      'misc.c:1252,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
                - sshfatal
        - Branch String:   'misc.c:1252,7'
          Branch Sides:
            - BranchSide:      'misc.c:1253,4'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1254,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshfatal
        - Branch String:   'misc.c:1254,7'
          Branch Sides:
            - BranchSide:      'misc.c:1255,4'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1256,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'misc.c:1259,2'
          Branch Sides:
            - BranchSide:      'misc.c:1261,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
            - BranchSide:      'misc.c:1320,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
        - Branch String:   'misc.c:1261,14'
          Branch Sides:
            - BranchSide:      'misc.c:1261,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
            - BranchSide:      'misc.c:1293,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
        - Branch String:   'misc.c:1261,34'
          Branch Sides:
            - BranchSide:      'misc.c:1261,37'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
            - BranchSide:      'misc.c:1293,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
        - Branch String:   'misc.c:1261,7'
          Branch Sides:
            - BranchSide:      'misc.c:1262,11'
              BranchSideFuncs:
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
            - BranchSide:      'misc.c:1293,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
        - Branch String:   'misc.c:1263,8'
          Branch Sides:
            - BranchSide:      'misc.c:1264,5'
              BranchSideFuncs:
                - sshlog
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:1268,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - sshlog
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
        - Branch String:   'misc.c:1269,8'
          Branch Sides:
            - BranchSide:      'misc.c:1270,5'
              BranchSideFuncs:
                - sshlog
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:1273,18'
              BranchSideFuncs:
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - sshlog
                - ssh_err
                - sshfatal
                - sshlog
        - Branch String:   'misc.c:1275,8'
          Branch Sides:
            - BranchSide:      'misc.c:1276,5'
              BranchSideFuncs:
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
            - BranchSide:      'misc.c:1279,5'
              BranchSideFuncs:
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - sshlog
                - sshlog
                - ssh_err
                - sshfatal
        - Branch String:   'misc.c:1280,9'
          Branch Sides:
            - BranchSide:      'misc.c:0,0'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:1281,6'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
        - Branch String:   'misc.c:1293,22'
          Branch Sides:
            - BranchSide:      'misc.c:1293,35'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:1293,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
        - Branch String:   'misc.c:1293,7'
          Branch Sides:
            - BranchSide:      'misc.c:1293,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
            - BranchSide:      'misc.c:1299,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
        - Branch String:   'misc.c:1295,8'
          Branch Sides:
            - BranchSide:      'misc.c:1296,5'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:1297,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'misc.c:1301,7'
          Branch Sides:
            - BranchSide:      'misc.c:1302,4'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:1303,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
        - Branch String:   'misc.c:1303,7'
          Branch Sides:
            - BranchSide:      'misc.c:1304,4'
              BranchSideFuncs:
                - sshlog
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:1307,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
        - Branch String:   'misc.c:1307,3'
          Branch Sides:
            - BranchSide:      'misc.c:1308,20'
              BranchSideFuncs:
                - strchr
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:1315,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'misc.c:1308,8'
          Branch Sides:
            - BranchSide:      'misc.c:1309,25'
              BranchSideFuncs:
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - strchr
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:1314,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
        - Branch String:   'misc.c:1309,9'
          Branch Sides:
            - BranchSide:      'misc.c:1311,6'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'misc.c:1312,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'misc.c:1315,7'
          Branch Sides:
            - BranchSide:      'misc.c:1316,4'
              BranchSideFuncs:
                - sshlog
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:1319,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshlog
                - strchr
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - xmalloc
                - strlcpy
                - getenv
                - sshlog
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshfatal
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'misc.c:1320,18'
          Branch Sides:
            - BranchSide:      'misc.c:1320,46'
              BranchSideFuncs:
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:1322,3'
              BranchSideFuncs:
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1320,6'
          Branch Sides:
            - BranchSide:      'misc.c:1321,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1322,3'
              BranchSideFuncs:
                - sshbuf_free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1325,9'
          Branch Sides:
            - BranchSide:      'misc.c:1325,9'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1325,30'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:1234,13'
          Dst:             sshbuf_new
        - Src:             'misc.c:1235,3'
          Dst:             sshfatal
        - Src:             'misc.c:1237,3'
          Dst:             sshfatal
        - Src:             'misc.c:1248,5'
          Dst:             sshfatal
        - Src:             'misc.c:1253,4'
          Dst:             sshfatal
        - Src:             'misc.c:1255,4'
          Dst:             sshfatal
        - Src:             'misc.c:1263,18'
          Dst:             strchr
        - Src:             'misc.c:1264,5'
          Dst:             sshlog
        - Src:             'misc.c:1270,5'
          Dst:             sshlog
        - Src:             'misc.c:1273,10'
          Dst:             xmalloc
        - Src:             'misc.c:1274,10'
          Dst:             strlcpy
        - Src:             'misc.c:1275,15'
          Dst:             getenv
        - Src:             'misc.c:1276,5'
          Dst:             sshlog
        - Src:             'misc.c:1279,5'
          Dst:             sshlog
        - Src:             'misc.c:1280,35'
          Dst:             strlen
        - Src:             'misc.c:1280,14'
          Dst:             sshbuf_put
        - Src:             'misc.c:1281,6'
          Dst:             ssh_err
        - Src:             'misc.c:1281,6'
          Dst:             sshfatal
        - Src:             'misc.c:1295,13'
          Dst:             sshbuf_put_u8
        - Src:             'misc.c:1296,5'
          Dst:             ssh_err
        - Src:             'misc.c:1296,5'
          Dst:             sshfatal
        - Src:             'misc.c:1304,4'
          Dst:             sshlog
        - Src:             'misc.c:1308,8'
          Dst:             strchr
        - Src:             'misc.c:1310,9'
          Dst:             strlen
        - Src:             'misc.c:1309,14'
          Dst:             sshbuf_put
        - Src:             'misc.c:1311,6'
          Dst:             ssh_err
        - Src:             'misc.c:1311,6'
          Dst:             sshfatal
        - Src:             'misc.c:1316,4'
          Dst:             sshlog
        - Src:             'misc.c:1320,28'
          Dst:             sshbuf_dup_string
        - Src:             'misc.c:1321,3'
          Dst:             sshfatal
        - Src:             'misc.c:1324,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    percent_expand
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1356
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         5
      ICount:          43
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached:
        - sshfatal
        - vdollar_percent_expand
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1364,6'
          Branch Sides:
            - BranchSide:      'misc.c:1365,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1366,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:1362,8'
          Dst:             vdollar_percent_expand
        - Src:             'misc.c:1365,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dollar_expand
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1337
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'int *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          48
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - vdollar_percent_expand
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1345,6'
          Branch Sides:
            - BranchSide:      'misc.c:1345,6'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1346,15'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:1343,8'
          Dst:             vdollar_percent_expand
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    tilde_expand_filename
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1204
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         5
      ICount:          34
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached:
        - cleanup_exit
        - tilde_expand
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1207,6'
          Branch Sides:
            - BranchSide:      'misc.c:1208,3'
              BranchSideFuncs:
                - cleanup_exit
            - BranchSide:      'misc.c:1209,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:1207,6'
          Dst:             tilde_expand
        - Src:             'misc.c:1208,3'
          Dst:             cleanup_exit
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    tilde_expand
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1136
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'int '
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         39
      ICount:          274
      EdgeCount:       52
      CyclomaticComplexity: 15
      functionsReached:
        - getpwnam
        - getpwuid
        - sshlog
        - strchr
        - strlen
        - strspn
        - xasprintf
        - xstrdup
      functionUses:    1
      BranchProfiles:
        - Branch String:   'misc.c:1144,6'
          Branch Sides:
            - BranchSide:      'misc.c:1145,19'
              BranchSideFuncs:
                - xstrdup
            - BranchSide:      'misc.c:1148,25'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - getpwuid
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
                - sshlog
                - getpwnam
                - sshlog
                - strspn
                - __sanitizer_cov_trace_const_cmp4
                - strspn
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1150,6'
          Branch Sides:
            - BranchSide:      'misc.c:1151,8'
              BranchSideFuncs:
                - getpwuid
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
                - sshlog
                - getpwnam
                - sshlog
            - BranchSide:      'misc.c:1152,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - getpwuid
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
                - sshlog
                - getpwnam
                - sshlog
                - strspn
                - __sanitizer_cov_trace_const_cmp4
                - strspn
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1152,11'
          Branch Sides:
            - BranchSide:      'misc.c:1153,18'
              BranchSideFuncs:
                - strspn
                - __sanitizer_cov_trace_const_cmp4
                - getpwuid
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
                - sshlog
                - getpwnam
                - sshlog
            - BranchSide:      'misc.c:1159,10'
              BranchSideFuncs:
                - strchr
                - getpwuid
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
                - sshlog
                - getpwnam
                - sshlog
                - strspn
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1154,7'
          Branch Sides:
            - BranchSide:      'misc.c:1155,9'
              BranchSideFuncs:
                - getpwuid
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
                - sshlog
                - getpwnam
                - sshlog
            - BranchSide:      'misc.c:1157,11'
              BranchSideFuncs:
                - getpwuid
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
                - sshlog
                - getpwnam
                - sshlog
        - Branch String:   'misc.c:1164,8'
          Branch Sides:
            - BranchSide:      'misc.c:1165,10'
              BranchSideFuncs:
                - getpwuid
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
                - sshlog
                - getpwnam
                - sshlog
            - BranchSide:      'misc.c:1167,3'
              BranchSideFuncs:
                - getpwuid
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
                - sshlog
                - getpwnam
                - sshlog
        - Branch String:   'misc.c:1170,6'
          Branch Sides:
            - BranchSide:      'misc.c:1171,22'
              BranchSideFuncs:
                - getpwnam
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
                - sshlog
            - BranchSide:      'misc.c:1175,28'
              BranchSideFuncs:
                - getpwuid
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'misc.c:1171,7'
          Branch Sides:
            - BranchSide:      'misc.c:1172,4'
              BranchSideFuncs:
                - sshlog
                - free
                - free
            - BranchSide:      'misc.c:1175,2'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
        - Branch String:   'misc.c:1175,13'
          Branch Sides:
            - BranchSide:      'misc.c:0,0'
              BranchSideFuncs:
                - sshlog
                - free
                - free
            - BranchSide:      'misc.c:1176,3'
              BranchSideFuncs:
                - sshlog
                - free
                - free
        - Branch String:   'misc.c:1181,42'
          Branch Sides:
            - BranchSide:      'misc.c:1181,42'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
            - BranchSide:      'misc.c:1181,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
        - Branch String:   'misc.c:1184,24'
          Branch Sides:
            - BranchSide:      'misc.c:1183,11'
              BranchSideFuncs:
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
            - BranchSide:      'misc.c:1184,39'
              BranchSideFuncs:
                - xasprintf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
                - sshlog
        - Branch String:   'misc.c:1183,6'
          Branch Sides:
            - BranchSide:      'misc.c:1185,3'
              BranchSideFuncs:
                - sshlog
                - free
                - free
            - BranchSide:      'misc.c:1188,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - sshlog
        - Branch String:   'misc.c:1188,6'
          Branch Sides:
            - BranchSide:      'misc.c:1189,3'
              BranchSideFuncs:
                - sshlog
                - free
                - free
            - BranchSide:      'misc.c:1193,6'
              BranchSideFuncs:
                - free
                - free
      Callsites:
        - Src:             'misc.c:1145,11'
          Dst:             xstrdup
        - Src:             'misc.c:1148,17'
          Dst:             xstrdup
        - Src:             'misc.c:1153,11'
          Dst:             strspn
        - Src:             'misc.c:1160,15'
          Dst:             strchr
        - Src:             'misc.c:1163,12'
          Dst:             strspn
        - Src:             'misc.c:1171,13'
          Dst:             getpwnam
        - Src:             'misc.c:1172,4'
          Dst:             sshlog
        - Src:             'misc.c:1175,19'
          Dst:             getpwuid
        - Src:             'misc.c:1176,3'
          Dst:             sshlog
        - Src:             'misc.c:1181,17'
          Dst:             strlen
        - Src:             'misc.c:1183,11'
          Dst:             xasprintf
        - Src:             'misc.c:1185,3'
          Dst:             sshlog
        - Src:             'misc.c:1189,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getpwnam
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.passwd *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    freeargs
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1116
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.arglist *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         15
      ICount:          89
      EdgeCount:       19
      CyclomaticComplexity: 6
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1119,6'
          Branch Sides:
            - BranchSide:      'misc.c:1120,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:1121,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
        - Branch String:   'misc.c:1121,25'
          Branch Sides:
            - BranchSide:      'misc.c:1121,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - free
            - BranchSide:      'misc.c:1126,17'
              BranchSideFuncs: []
        - Branch String:   'misc.c:1121,6'
          Branch Sides:
            - BranchSide:      'misc.c:1122,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - free
                - free
            - BranchSide:      'misc.c:1126,17'
              BranchSideFuncs: []
        - Branch String:   'misc.c:1122,3'
          Branch Sides:
            - BranchSide:      'misc.c:1123,9'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_cmp4
                - free
            - BranchSide:      'misc.c:1124,8'
              BranchSideFuncs:
                - free
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    replacearg
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1094
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.arglist *'
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          104
      EdgeCount:       13
      CyclomaticComplexity: 3
      functionsReached:
        - sshfatal
        - vasprintf
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1102,6'
          Branch Sides:
            - BranchSide:      'misc.c:1103,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1104,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - sshfatal
                - sshfatal
        - Branch String:   'misc.c:1104,25'
          Branch Sides:
            - BranchSide:      'misc.c:1104,28'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1105,3'
              BranchSideFuncs:
                - sshfatal
        - Branch String:   'misc.c:1104,6'
          Branch Sides:
            - BranchSide:      'misc.c:1105,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1107,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - free
                - sshfatal
        - Branch String:   'misc.c:1107,6'
          Branch Sides:
            - BranchSide:      'misc.c:1108,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1110,7'
              BranchSideFuncs:
                - free
      Callsites:
        - Src:             'misc.c:1100,6'
          Dst:             vasprintf
        - Src:             'misc.c:1103,3'
          Dst:             sshfatal
        - Src:             'misc.c:1105,3'
          Dst:             sshfatal
        - Src:             'misc.c:1108,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addargs
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1062
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.arglist *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         17
      ICount:          151
      EdgeCount:       19
      CyclomaticComplexity: 4
      functionsReached:
        - sshfatal
        - vasprintf
        - xrecallocarray
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:1071,6'
          Branch Sides:
            - BranchSide:      'misc.c:1072,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1074,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - xrecallocarray
                - sshfatal
                - sshfatal
        - Branch String:   'misc.c:1075,6'
          Branch Sides:
            - BranchSide:      'misc.c:1076,10'
              BranchSideFuncs:
                - xrecallocarray
            - BranchSide:      'misc.c:1078,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - xrecallocarray
                - sshfatal
                - sshfatal
        - Branch String:   'misc.c:1078,13'
          Branch Sides:
            - BranchSide:      'misc.c:1079,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1080,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - xrecallocarray
                - sshfatal
        - Branch String:   'misc.c:1080,11'
          Branch Sides:
            - BranchSide:      'misc.c:1081,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'misc.c:1082,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - xrecallocarray
      Callsites:
        - Src:             'misc.c:1069,6'
          Dst:             vasprintf
        - Src:             'misc.c:1072,3'
          Dst:             sshfatal
        - Src:             'misc.c:1079,3'
          Dst:             sshfatal
        - Src:             'misc.c:1081,3'
          Dst:             sshfatal
        - Src:             'misc.c:1085,15'
          Dst:             xrecallocarray
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    valid_domain
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 2323
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'int '
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         42
      ICount:          253
      EdgeCount:       56
      CyclomaticComplexity: 16
      functionsReached:
        - __ctype_b_loc
        - snprintf
        - strlcpy
        - strlen
        - tolower
      functionUses:    1
      BranchProfiles:
        - Branch String:   'misc.c:2328,6'
          Branch Sides:
            - BranchSide:      'misc.c:2329,3'
              BranchSideFuncs:
                - strlcpy
            - BranchSide:      'misc.c:2332,7'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
        - Branch String:   'misc.c:2332,32'
          Branch Sides:
            - BranchSide:      'misc.c:2332,36'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
            - BranchSide:      'misc.c:2337,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
        - Branch String:   'misc.c:2332,6'
          Branch Sides:
            - BranchSide:      'misc.c:2334,40'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
            - BranchSide:      'misc.c:2337,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
        - Branch String:   'misc.c:2337,2'
          Branch Sides:
            - BranchSide:      'misc.c:2338,23'
              BranchSideFuncs:
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
            - BranchSide:      'misc.c:2354,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:2339,7'
          Branch Sides:
            - BranchSide:      'misc.c:2340,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
            - BranchSide:      'misc.c:2341,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
        - Branch String:   'misc.c:2341,19'
          Branch Sides:
            - BranchSide:      'misc.c:2341,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
            - BranchSide:      'misc.c:2346,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
        - Branch String:   'misc.c:2341,7'
          Branch Sides:
            - BranchSide:      'misc.c:2343,54'
              BranchSideFuncs:
                - snprintf
            - BranchSide:      'misc.c:2346,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
        - Branch String:   'misc.c:2346,16'
          Branch Sides:
            - BranchSide:      'misc.c:2346,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
            - BranchSide:      'misc.c:2352,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
        - Branch String:   'misc.c:2346,28'
          Branch Sides:
            - BranchSide:      'misc.c:2346,32'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
            - BranchSide:      'misc.c:2352,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
        - Branch String:   'misc.c:2346,43'
          Branch Sides:
            - BranchSide:      'misc.c:2347,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
            - BranchSide:      'misc.c:2352,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
        - Branch String:   'misc.c:2346,7'
          Branch Sides:
            - BranchSide:      'misc.c:2349,50'
              BranchSideFuncs:
                - snprintf
            - BranchSide:      'misc.c:2352,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - tolower
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
        - Branch String:   'misc.c:2354,6'
          Branch Sides:
            - BranchSide:      'misc.c:2355,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2356,6'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2356,6'
          Branch Sides:
            - BranchSide:      'misc.c:2357,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2358,2'
              BranchSideFuncs: []
        - Branch String:   'misc.c:2360,6'
          Branch Sides:
            - BranchSide:      'misc.c:2361,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:2362,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:2324,16'
          Dst:             strlen
        - Src:             'misc.c:2329,3'
          Dst:             strlcpy
        - Src:             'misc.c:2332,7'
          Dst:             __ctype_b_loc
        - Src:             'misc.c:2332,36'
          Dst:             __ctype_b_loc
        - Src:             'misc.c:2333,3'
          Dst:             snprintf
        - Src:             'misc.c:2338,7'
          Dst:             tolower
        - Src:             'misc.c:2342,4'
          Dst:             snprintf
        - Src:             'misc.c:2346,32'
          Dst:             __ctype_b_loc
        - Src:             'misc.c:2348,4'
          Dst:             snprintf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    urldecode
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 926
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         19
      ICount:          140
      EdgeCount:       22
      CyclomaticComplexity: 5
      functionsReached:
        - __ctype_b_loc
        - hexchar
        - strlen
        - xmalloc
      functionUses:    2
      BranchProfiles:
        - Branch String:   'misc.c:931,2'
          Branch Sides:
            - BranchSide:      'misc.c:932,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - hexchar
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:951,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:932,3'
          Branch Sides:
            - BranchSide:      'misc.c:934,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - hexchar
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:937,9'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - hexchar
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
            - BranchSide:      'misc.c:947,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - hexchar
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:937,41'
          Branch Sides:
            - BranchSide:      'misc.c:938,9'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - free
                - hexchar
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:940,10'
              BranchSideFuncs:
                - free
        - Branch String:   'misc.c:938,41'
          Branch Sides:
            - BranchSide:      'misc.c:939,22'
              BranchSideFuncs:
                - hexchar
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:940,10'
              BranchSideFuncs:
                - free
        - Branch String:   'misc.c:937,8'
          Branch Sides:
            - BranchSide:      'misc.c:940,10'
              BranchSideFuncs:
                - free
            - BranchSide:      'misc.c:943,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - hexchar
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'misc.c:930,16'
          Dst:             strlen
        - Src:             'misc.c:930,8'
          Dst:             xmalloc
        - Src:             'misc.c:937,9'
          Dst:             __ctype_b_loc
        - Src:             'misc.c:938,9'
          Dst:             __ctype_b_loc
        - Src:             'misc.c:939,14'
          Dst:             hexchar
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    parse_uri
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 971
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'char *'
        - 'char *'
        - 'char **'
        - 'char **'
        - 'int *'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         74
      ICount:          401
      EdgeCount:       100
      CyclomaticComplexity: 28
      functionsReached:
        - a2port
        - cleanhostname
        - hpdelim2
        - strchr
        - strlen
        - strncmp
        - urldecode
        - valid_domain
        - xstrdup
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:978,37'
          Branch Sides:
            - BranchSide:      'misc.c:978,48'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:979,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:978,6'
          Branch Sides:
            - BranchSide:      'misc.c:979,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:980,9'
              BranchSideFuncs:
                - xstrdup
                - strchr
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
        - Branch String:   'misc.c:982,6'
          Branch Sides:
            - BranchSide:      'misc.c:983,4'
              BranchSideFuncs:
                - xstrdup
                - strchr
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
            - BranchSide:      'misc.c:984,6'
              BranchSideFuncs:
                - xstrdup
                - strchr
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
        - Branch String:   'misc.c:984,6'
          Branch Sides:
            - BranchSide:      'misc.c:985,4'
              BranchSideFuncs:
                - xstrdup
                - strchr
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
            - BranchSide:      'misc.c:986,6'
              BranchSideFuncs:
                - xstrdup
                - strchr
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
        - Branch String:   'misc.c:986,6'
          Branch Sides:
            - BranchSide:      'misc.c:987,4'
              BranchSideFuncs:
                - xstrdup
                - strchr
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
            - BranchSide:      'misc.c:988,6'
              BranchSideFuncs:
                - xstrdup
                - strchr
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
        - Branch String:   'misc.c:988,6'
          Branch Sides:
            - BranchSide:      'misc.c:989,4'
              BranchSideFuncs:
                - xstrdup
                - strchr
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
            - BranchSide:      'misc.c:991,25'
              BranchSideFuncs:
                - xstrdup
                - strchr
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
        - Branch String:   'misc.c:994,6'
          Branch Sides:
            - BranchSide:      'misc.c:997,4'
              BranchSideFuncs:
                - strchr
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:1013,12'
              BranchSideFuncs:
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:999,7'
          Branch Sides:
            - BranchSide:      'misc.c:1001,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:1003,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1003,7'
          Branch Sides:
            - BranchSide:      'misc.c:1005,4'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:1007,25'
              BranchSideFuncs:
                - urldecode
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1007,7'
          Branch Sides:
            - BranchSide:      'misc.c:1008,4'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:1009,9'
              BranchSideFuncs:
                - hpdelim2
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1013,41'
          Branch Sides:
            - BranchSide:      'misc.c:1013,45'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:1014,3'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   'misc.c:1013,6'
          Branch Sides:
            - BranchSide:      'misc.c:1014,3'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:1015,31'
              BranchSideFuncs:
                - cleanhostname
                - xstrdup
                - valid_domain
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1016,6'
          Branch Sides:
            - BranchSide:      'misc.c:1017,3'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:1019,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:1019,18'
          Branch Sides:
            - BranchSide:      'misc.c:1019,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:1036,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   'misc.c:1019,6'
          Branch Sides:
            - BranchSide:      'misc.c:1020,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:1036,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   'misc.c:1020,7'
          Branch Sides:
            - BranchSide:      'misc.c:1022,21'
              BranchSideFuncs:
                - strchr
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
            - BranchSide:      'misc.c:1028,7'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
        - Branch String:   'misc.c:1022,8'
          Branch Sides:
            - BranchSide:      'misc.c:1023,6'
              BranchSideFuncs:
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
            - BranchSide:      'misc.c:1024,23'
              BranchSideFuncs:
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
        - Branch String:   'misc.c:1024,8'
          Branch Sides:
            - BranchSide:      'misc.c:1025,5'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:1026,10'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
        - Branch String:   'misc.c:1026,10'
          Branch Sides:
            - BranchSide:      'misc.c:1026,15'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
            - BranchSide:      'misc.c:1026,8'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - urldecode
        - Branch String:   'misc.c:1028,19'
          Branch Sides:
            - BranchSide:      'misc.c:1028,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - urldecode
            - BranchSide:      'misc.c:1033,2'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   'misc.c:1028,7'
          Branch Sides:
            - BranchSide:      'misc.c:1030,26'
              BranchSideFuncs:
                - urldecode
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:1033,2'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   'misc.c:1030,8'
          Branch Sides:
            - BranchSide:      'misc.c:1031,5'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:1032,3'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   'misc.c:1036,6'
          Branch Sides:
            - BranchSide:      'misc.c:1037,12'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:1040,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   'misc.c:1040,6'
          Branch Sides:
            - BranchSide:      'misc.c:1041,12'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:1044,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   'misc.c:1044,6'
          Branch Sides:
            - BranchSide:      'misc.c:1045,12'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:1046,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   'misc.c:1046,6'
          Branch Sides:
            - BranchSide:      'misc.c:1047,12'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:1050,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
      Callsites:
        - Src:             'misc.c:977,8'
          Dst:             strlen
        - Src:             'misc.c:978,6'
          Dst:             strncmp
        - Src:             'misc.c:978,40'
          Dst:             strncmp
        - Src:             'misc.c:991,17'
          Dst:             xstrdup
        - Src:             'misc.c:994,12'
          Dst:             strchr
        - Src:             'misc.c:999,16'
          Dst:             strchr
        - Src:             'misc.c:1007,15'
          Dst:             urldecode
        - Src:             'misc.c:1013,12'
          Dst:             hpdelim2
        - Src:             'misc.c:1015,17'
          Dst:             cleanhostname
        - Src:             'misc.c:1015,9'
          Dst:             xstrdup
        - Src:             'misc.c:1016,7'
          Dst:             valid_domain
        - Src:             'misc.c:1022,14'
          Dst:             strchr
        - Src:             'misc.c:1024,16'
          Dst:             a2port
        - Src:             'misc.c:1030,16'
          Dst:             urldecode
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    hpdelim2
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 687
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char **'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         27
      ICount:          139
      EdgeCount:       32
      CyclomaticComplexity: 7
      functionsReached:
        - strchr
        - strlen
        - strpbrk
      functionUses:    2
      BranchProfiles:
        - Branch String:   'misc.c:690,17'
          Branch Sides:
            - BranchSide:      'misc.c:690,21'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:691,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:690,6'
          Branch Sides:
            - BranchSide:      'misc.c:691,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:693,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strpbrk
                - __sanitizer_cov_trace_switch
                - strlen
                - strchr
        - Branch String:   'misc.c:694,6'
          Branch Sides:
            - BranchSide:      'misc.c:695,19'
              BranchSideFuncs:
                - strchr
                - __sanitizer_cov_trace_switch
            - BranchSide:      'misc.c:699,26'
              BranchSideFuncs:
                - strpbrk
                - __sanitizer_cov_trace_switch
                - strlen
        - Branch String:   'misc.c:695,7'
          Branch Sides:
            - BranchSide:      'misc.c:696,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:698,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
        - Branch String:   'misc.c:702,2'
          Branch Sides:
            - BranchSide:      'misc.c:704,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:709,7'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:709,7'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:716,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:709,7'
          Branch Sides:
            - BranchSide:      'misc.c:710,14'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:711,4'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:695,12'
          Dst:             strchr
        - Src:             'misc.c:699,18'
          Dst:             strpbrk
        - Src:             'misc.c:700,13'
          Dst:             strlen
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cleanhostname
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 736
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          56
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - strlen
      functionUses:    4
      BranchProfiles:
        - Branch String:   'misc.c:737,19'
          Branch Sides:
            - BranchSide:      'misc.c:737,22'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_const_cmp4
                - strlen
            - BranchSide:      'misc.c:741,10'
              BranchSideFuncs: []
        - Branch String:   'misc.c:737,6'
          Branch Sides:
            - BranchSide:      'misc.c:738,3'
              BranchSideFuncs:
                - strlen
            - BranchSide:      'misc.c:741,10'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:737,27'
          Dst:             strlen
        - Src:             'misc.c:738,8'
          Dst:             strlen
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    a2port
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 490
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         8
      ICount:          56
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - getservbyname
        - ntohs
        - strtonum
      functionUses:    2
      BranchProfiles:
        - Branch String:   'misc.c:496,6'
          Branch Sides:
            - BranchSide:      'misc.c:497,15'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:498,26'
              BranchSideFuncs:
                - getservbyname
                - ntohs
        - Branch String:   'misc.c:498,6'
          Branch Sides:
            - BranchSide:      'misc.c:499,16'
              BranchSideFuncs:
                - ntohs
            - BranchSide:      'misc.c:500,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:495,9'
          Dst:             strtonum
        - Src:             'misc.c:498,12'
          Dst:             getservbyname
        - Src:             'misc.c:499,10'
          Dst:             ntohs
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getservbyname
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.servent *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ntohs
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strpbrk
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    parse_user_host_port
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 846
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'char **'
        - 'char **'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         44
      ICount:          240
      EdgeCount:       59
      CyclomaticComplexity: 17
      functionsReached:
        - a2port
        - cleanhostname
        - hpdelim
        - strdup
        - strrchr
        - xstrdup
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:851,6'
          Branch Sides:
            - BranchSide:      'misc.c:852,4'
              BranchSideFuncs:
                - strdup
                - strrchr
                - hpdelim
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
            - BranchSide:      'misc.c:853,6'
              BranchSideFuncs:
                - strdup
                - strrchr
                - hpdelim
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
        - Branch String:   'misc.c:853,6'
          Branch Sides:
            - BranchSide:      'misc.c:854,4'
              BranchSideFuncs:
                - strdup
                - strrchr
                - hpdelim
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
            - BranchSide:      'misc.c:855,6'
              BranchSideFuncs:
                - strdup
                - strrchr
                - hpdelim
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
        - Branch String:   'misc.c:855,6'
          Branch Sides:
            - BranchSide:      'misc.c:856,4'
              BranchSideFuncs:
                - strdup
                - strrchr
                - hpdelim
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
            - BranchSide:      'misc.c:858,27'
              BranchSideFuncs:
                - strdup
                - strrchr
                - hpdelim
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
        - Branch String:   'misc.c:858,6'
          Branch Sides:
            - BranchSide:      'misc.c:859,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:861,20'
              BranchSideFuncs:
                - strrchr
                - hpdelim
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
        - Branch String:   'misc.c:861,6'
          Branch Sides:
            - BranchSide:      'misc.c:862,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - hpdelim
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - a2port
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:870,12'
              BranchSideFuncs:
                - hpdelim
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - a2port
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:863,7'
          Branch Sides:
            - BranchSide:      'misc.c:864,4'
              BranchSideFuncs:
                - free
                - free
                - free
            - BranchSide:      'misc.c:865,22'
              BranchSideFuncs:
                - strdup
                - hpdelim
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - a2port
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:865,7'
          Branch Sides:
            - BranchSide:      'misc.c:866,4'
              BranchSideFuncs:
                - free
                - free
                - free
            - BranchSide:      'misc.c:867,9'
              BranchSideFuncs:
                - hpdelim
                - __sanitizer_cov_trace_const_cmp4
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - a2port
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:870,35'
          Branch Sides:
            - BranchSide:      'misc.c:870,39'
              BranchSideFuncs:
                - free
                - free
                - free
            - BranchSide:      'misc.c:871,3'
              BranchSideFuncs:
                - free
                - free
                - free
        - Branch String:   'misc.c:870,6'
          Branch Sides:
            - BranchSide:      'misc.c:871,3'
              BranchSideFuncs:
                - free
                - free
                - free
            - BranchSide:      'misc.c:872,31'
              BranchSideFuncs:
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - a2port
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:874,18'
          Branch Sides:
            - BranchSide:      'misc.c:874,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - a2port
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:879,6'
              BranchSideFuncs:
                - free
                - free
                - free
        - Branch String:   'misc.c:874,6'
          Branch Sides:
            - BranchSide:      'misc.c:875,22'
              BranchSideFuncs:
                - a2port
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
            - BranchSide:      'misc.c:879,6'
              BranchSideFuncs:
                - free
                - free
                - free
        - Branch String:   'misc.c:875,7'
          Branch Sides:
            - BranchSide:      'misc.c:876,4'
              BranchSideFuncs:
                - free
                - free
                - free
            - BranchSide:      'misc.c:877,2'
              BranchSideFuncs:
                - free
                - free
                - free
        - Branch String:   'misc.c:879,6'
          Branch Sides:
            - BranchSide:      'misc.c:880,12'
              BranchSideFuncs:
                - free
                - free
                - free
            - BranchSide:      'misc.c:883,6'
              BranchSideFuncs:
                - free
                - free
                - free
        - Branch String:   'misc.c:883,6'
          Branch Sides:
            - BranchSide:      'misc.c:884,12'
              BranchSideFuncs:
                - free
                - free
                - free
            - BranchSide:      'misc.c:887,6'
              BranchSideFuncs:
                - free
                - free
                - free
        - Branch String:   'misc.c:887,6'
          Branch Sides:
            - BranchSide:      'misc.c:888,12'
              BranchSideFuncs:
                - free
                - free
                - free
            - BranchSide:      'misc.c:889,6'
              BranchSideFuncs:
                - free
                - free
                - free
      Callsites:
        - Src:             'misc.c:858,20'
          Dst:             strdup
        - Src:             'misc.c:861,12'
          Dst:             strrchr
        - Src:             'misc.c:865,15'
          Dst:             strdup
        - Src:             'misc.c:870,12'
          Dst:             hpdelim
        - Src:             'misc.c:872,17'
          Dst:             cleanhostname
        - Src:             'misc.c:872,9'
          Dst:             xstrdup
        - Src:             'misc.c:875,15'
          Dst:             a2port
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    hpdelim
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 725
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          40
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - hpdelim2
      functionUses:    1
      BranchProfiles:
        - Branch String:   'misc.c:729,6'
          Branch Sides:
            - BranchSide:      'misc.c:730,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:731,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:728,7'
          Dst:             hpdelim2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    parse_user_host_path
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 778
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'char **'
        - 'char **'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         33
      ICount:          210
      EdgeCount:       43
      CyclomaticComplexity: 12
      functionsReached:
        - cleanhostname
        - colon
        - strrchr
        - xstrdup
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:783,6'
          Branch Sides:
            - BranchSide:      'misc.c:784,4'
              BranchSideFuncs:
                - xstrdup
                - colon
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - strrchr
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - free
                - cleanhostname
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
            - BranchSide:      'misc.c:785,6'
              BranchSideFuncs:
                - xstrdup
                - colon
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - strrchr
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - free
                - cleanhostname
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
        - Branch String:   'misc.c:785,6'
          Branch Sides:
            - BranchSide:      'misc.c:786,4'
              BranchSideFuncs:
                - xstrdup
                - colon
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - strrchr
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - free
                - cleanhostname
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
            - BranchSide:      'misc.c:787,6'
              BranchSideFuncs:
                - xstrdup
                - colon
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - strrchr
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - free
                - cleanhostname
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
        - Branch String:   'misc.c:787,6'
          Branch Sides:
            - BranchSide:      'misc.c:788,4'
              BranchSideFuncs:
                - xstrdup
                - colon
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - strrchr
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - free
                - cleanhostname
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
            - BranchSide:      'misc.c:790,17'
              BranchSideFuncs:
                - xstrdup
                - colon
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - strrchr
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - free
                - cleanhostname
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
        - Branch String:   'misc.c:793,6'
          Branch Sides:
            - BranchSide:      'misc.c:794,3'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:797,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - strrchr
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - free
                - cleanhostname
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
        - Branch String:   'misc.c:798,6'
          Branch Sides:
            - BranchSide:      'misc.c:799,7'
              BranchSideFuncs:
                - xstrdup
                - strrchr
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - free
                - cleanhostname
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
            - BranchSide:      'misc.c:800,17'
              BranchSideFuncs:
                - xstrdup
                - strrchr
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - free
                - cleanhostname
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
        - Branch String:   'misc.c:804,6'
          Branch Sides:
            - BranchSide:      'misc.c:805,7'
              BranchSideFuncs:
                - cleanhostname
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - xstrdup
            - BranchSide:      'misc.c:810,32'
              BranchSideFuncs:
                - cleanhostname
                - xstrdup
                - free
                - free
                - free
                - free
        - Branch String:   'misc.c:807,7'
          Branch Sides:
            - BranchSide:      'misc.c:808,19'
              BranchSideFuncs:
                - xstrdup
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:809,2'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   'misc.c:815,6'
          Branch Sides:
            - BranchSide:      'misc.c:816,12'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:819,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   'misc.c:819,6'
          Branch Sides:
            - BranchSide:      'misc.c:820,12'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:823,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   'misc.c:823,6'
          Branch Sides:
            - BranchSide:      'misc.c:824,12'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'misc.c:827,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
      Callsites:
        - Src:             'misc.c:790,9'
          Dst:             xstrdup
        - Src:             'misc.c:793,13'
          Dst:             colon
        - Src:             'misc.c:800,9'
          Dst:             xstrdup
        - Src:             'misc.c:803,8'
          Dst:             strrchr
        - Src:             'misc.c:806,18'
          Dst:             cleanhostname
        - Src:             'misc.c:806,10'
          Dst:             xstrdup
        - Src:             'misc.c:808,11'
          Dst:             xstrdup
        - Src:             'misc.c:810,18'
          Dst:             cleanhostname
        - Src:             'misc.c:810,10'
          Dst:             xstrdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    colon
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 746
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         30
      ICount:          154
      EdgeCount:       40
      CyclomaticComplexity: 12
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'misc.c:749,6'
          Branch Sides:
            - BranchSide:      'misc.c:750,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:751,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:751,6'
          Branch Sides:
            - BranchSide:      'misc.c:752,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:754,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:754,2'
          Branch Sides:
            - BranchSide:      'misc.c:755,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:764,2'
              BranchSideFuncs: []
        - Branch String:   'misc.c:755,18'
          Branch Sides:
            - BranchSide:      'misc.c:755,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:757,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:755,7'
          Branch Sides:
            - BranchSide:      'misc.c:756,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:757,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:757,18'
          Branch Sides:
            - BranchSide:      'misc.c:757,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:759,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:757,36'
          Branch Sides:
            - BranchSide:      'misc.c:757,39'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:759,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:757,7'
          Branch Sides:
            - BranchSide:      'misc.c:758,12'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:759,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:759,18'
          Branch Sides:
            - BranchSide:      'misc.c:759,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:761,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:759,7'
          Branch Sides:
            - BranchSide:      'misc.c:760,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:761,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:761,7'
          Branch Sides:
            - BranchSide:      'misc.c:762,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:763,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    put_host_port
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 666
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          66
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - __errno_location
        - asprintf
        - sshfatal
        - sshlog
        - xstrdup
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:669,16'
          Branch Sides:
            - BranchSide:      'misc.c:669,19'
              BranchSideFuncs:
                - xstrdup
            - BranchSide:      'misc.c:670,18'
              BranchSideFuncs:
                - xstrdup
        - Branch String:   'misc.c:669,6'
          Branch Sides:
            - BranchSide:      'misc.c:670,18'
              BranchSideFuncs:
                - xstrdup
            - BranchSide:      'misc.c:671,36'
              BranchSideFuncs:
                - asprintf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - strerror
                - sshfatal
        - Branch String:   'misc.c:671,6'
          Branch Sides:
            - BranchSide:      'misc.c:672,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshfatal
            - BranchSide:      'misc.c:673,2'
              BranchSideFuncs:
                - sshlog
      Callsites:
        - Src:             'misc.c:670,10'
          Dst:             xstrdup
        - Src:             'misc.c:671,6'
          Dst:             asprintf
        - Src:             'misc.c:672,3'
          Dst:             __errno_location
        - Src:             'misc.c:672,3'
          Dst:             strerror
        - Src:             'misc.c:672,3'
          Dst:             sshfatal
        - Src:             'misc.c:673,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fmt_timeframe
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 628
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         12
      ICount:          113
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - snprintf
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:636,6'
          Branch Sides:
            - BranchSide:      'misc.c:637,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
                - snprintf
            - BranchSide:      'misc.c:639,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
                - snprintf
        - Branch String:   'misc.c:650,6'
          Branch Sides:
            - BranchSide:      'misc.c:651,12'
              BranchSideFuncs:
                - snprintf
            - BranchSide:      'misc.c:652,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - snprintf
        - Branch String:   'misc.c:652,11'
          Branch Sides:
            - BranchSide:      'misc.c:653,12'
              BranchSideFuncs:
                - snprintf
            - BranchSide:      'misc.c:655,12'
              BranchSideFuncs:
                - snprintf
      Callsites:
        - Src:             'misc.c:651,3'
          Dst:             snprintf
        - Src:             'misc.c:653,3'
          Dst:             snprintf
        - Src:             'misc.c:655,3'
          Dst:             snprintf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    convtime
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 563
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         48
      ICount:          227
      EdgeCount:       58
      CyclomaticComplexity: 12
      functionsReached:
        - __errno_location
        - strtol
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:572,16'
          Branch Sides:
            - BranchSide:      'misc.c:572,20'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:573,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:572,6'
          Branch Sides:
            - BranchSide:      'misc.c:573,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:575,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'misc.c:575,2'
          Branch Sides:
            - BranchSide:      'misc.c:576,17'
              BranchSideFuncs:
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:620,9'
              BranchSideFuncs: []
        - Branch String:   'misc.c:577,17'
          Branch Sides:
            - BranchSide:      'misc.c:578,8'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:580,4'
              BranchSideFuncs: []
        - Branch String:   'misc.c:578,24'
          Branch Sides:
            - BranchSide:      'misc.c:578,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:579,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'misc.c:578,44'
          Branch Sides:
            - BranchSide:      'misc.c:578,47'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:580,4'
              BranchSideFuncs: []
        - Branch String:   'misc.c:578,65'
          Branch Sides:
            - BranchSide:      'misc.c:579,7'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:580,4'
              BranchSideFuncs: []
        - Branch String:   'misc.c:577,7'
          Branch Sides:
            - BranchSide:      'misc.c:580,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:582,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'misc.c:583,3'
          Branch Sides:
            - BranchSide:      'misc.c:585,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:589,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:589,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:592,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:592,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:596,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:596,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:600,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:600,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:604,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:604,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:607,4'
              BranchSideFuncs: []
        - Branch String:   'misc.c:609,7'
          Branch Sides:
            - BranchSide:      'misc.c:610,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:611,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'misc.c:612,8'
          Branch Sides:
            - BranchSide:      'misc.c:613,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:614,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'misc.c:615,7'
          Branch Sides:
            - BranchSide:      'misc.c:616,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:617,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - strtol
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
      Callsites:
        - Src:             'misc.c:568,2'
          Dst:             __errno_location
        - Src:             'misc.c:576,10'
          Dst:             strtol
        - Src:             'misc.c:578,8'
          Dst:             __errno_location
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    a2tun
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 505
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         15
      ICount:          112
      EdgeCount:       20
      CyclomaticComplexity: 7
      functionsReached:
        - a2tun
        - strcasecmp
        - strchr
        - strtonum
        - xstrdup
      functionUses:    3
      BranchProfiles:
        - Branch String:   'misc.c:510,6'
          Branch Sides:
            - BranchSide:      'misc.c:511,4'
              BranchSideFuncs:
                - xstrdup
                - strchr
                - a2tun
                - a2tun
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - a2tun
            - BranchSide:      'misc.c:524,17'
              BranchSideFuncs:
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
        - Branch String:   'misc.c:513,7'
          Branch Sides:
            - BranchSide:      'misc.c:514,9'
              BranchSideFuncs:
                - free
                - a2tun
            - BranchSide:      'misc.c:517,3'
              BranchSideFuncs:
                - a2tun
                - a2tun
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:521,11'
          Branch Sides:
            - BranchSide:      'misc.c:521,39'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:521,48'
              BranchSideFuncs: []
        - Branch String:   'misc.c:524,6'
          Branch Sides:
            - BranchSide:      'misc.c:525,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:527,17'
              BranchSideFuncs:
                - strtonum
        - Branch String:   'misc.c:528,6'
          Branch Sides:
            - BranchSide:      'misc.c:529,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:531,10'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:512,8'
          Dst:             xstrdup
        - Src:             'misc.c:513,13'
          Dst:             strchr
        - Src:             'misc.c:515,12'
          Dst:             a2tun
        - Src:             'misc.c:518,13'
          Dst:             a2tun
        - Src:             'misc.c:519,9'
          Dst:             a2tun
        - Src:             'misc.c:524,6'
          Dst:             strcasecmp
        - Src:             'misc.c:527,8'
          Dst:             strtonum
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    pwcopy
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 459
      functionDepth:   0
      returnType:      'struct.passwd *'
      argCount:        1
      argTypes:
        - 'struct.passwd *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          81
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - xcalloc
        - xstrdup
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:463,28'
          Branch Sides:
            - BranchSide:      'misc.c:463,28'
              BranchSideFuncs:
                - xstrdup
                - xstrdup
                - xstrdup
                - xstrdup
            - BranchSide:      'misc.c:463,58'
              BranchSideFuncs:
                - xstrdup
                - xstrdup
                - xstrdup
                - xstrdup
      Callsites:
        - Src:             'misc.c:460,24'
          Dst:             xcalloc
        - Src:             'misc.c:462,18'
          Dst:             xstrdup
        - Src:             'misc.c:463,20'
          Dst:             xstrdup
        - Src:             'misc.c:465,19'
          Dst:             xstrdup
        - Src:             'misc.c:478,17'
          Dst:             xstrdup
        - Src:             'misc.c:479,19'
          Dst:             xstrdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strdelimw
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 453
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          16
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - strdelim_internal
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'misc.c:454,9'
          Dst:             strdelim_internal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strdelim_internal
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 399
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char **'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         24
      ICount:          186
      EdgeCount:       33
      CyclomaticComplexity: 11
      functionsReached:
        - strlen
        - strpbrk
        - strspn
      functionUses:    2
      BranchProfiles:
        - Branch String:   'misc.c:403,6'
          Branch Sides:
            - BranchSide:      'misc.c:404,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:406,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strpbrk
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strspn
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strspn
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - llvm.memmove.p0i8.p0i8.i64
                - strpbrk
                - strspn
        - Branch String:   'misc.c:410,6'
          Branch Sides:
            - BranchSide:      'misc.c:411,11'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:413,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strspn
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strspn
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - llvm.memmove.p0i8.p0i8.i64
                - strpbrk
                - strspn
        - Branch String:   'misc.c:413,6'
          Branch Sides:
            - BranchSide:      'misc.c:414,12'
              BranchSideFuncs:
                - strlen
                - llvm.memmove.p0i8.p0i8.i64
                - strpbrk
                - strspn
            - BranchSide:      'misc.c:426,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strspn
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strspn
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:416,7'
          Branch Sides:
            - BranchSide:      'misc.c:417,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:419,5'
              BranchSideFuncs:
                - strspn
        - Branch String:   'misc.c:426,19'
          Branch Sides:
            - BranchSide:      'misc.c:426,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strspn
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strspn
            - BranchSide:      'misc.c:428,3'
              BranchSideFuncs:
                - strspn
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strspn
        - Branch String:   'misc.c:426,6'
          Branch Sides:
            - BranchSide:      'misc.c:427,10'
              BranchSideFuncs:
                - strspn
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strspn
            - BranchSide:      'misc.c:428,3'
              BranchSideFuncs:
                - strspn
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strspn
        - Branch String:   'misc.c:432,19'
          Branch Sides:
            - BranchSide:      'misc.c:432,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strspn
            - BranchSide:      'misc.c:435,10'
              BranchSideFuncs: []
        - Branch String:   'misc.c:432,35'
          Branch Sides:
            - BranchSide:      'misc.c:432,39'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strspn
            - BranchSide:      'misc.c:435,10'
              BranchSideFuncs: []
        - Branch String:   'misc.c:432,6'
          Branch Sides:
            - BranchSide:      'misc.c:433,17'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:435,10'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:408,7'
          Dst:             strpbrk
        - Src:             'misc.c:414,23'
          Dst:             strlen
        - Src:             'misc.c:416,13'
          Dst:             strpbrk
        - Src:             'misc.c:420,10'
          Dst:             strspn
        - Src:             'misc.c:431,8'
          Dst:             strspn
        - Src:             'misc.c:433,9'
          Dst:             strspn
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strdelim
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 444
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          16
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - strdelim_internal
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'misc.c:445,9'
          Dst:             strdelim_internal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    timeout_connect
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 355
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'int '
        - 'struct.sockaddr *'
        - 'int '
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         25
      ICount:          146
      EdgeCount:       33
      CyclomaticComplexity: 10
      functionsReached:
        - __errno_location
        - connect
        - getsockopt
        - set_nonblock
        - sshlog
        - unset_nonblock
        - waitfd
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:360,23'
          Branch Sides:
            - BranchSide:      'misc.c:360,27'
              BranchSideFuncs:
                - connect
            - BranchSide:      'misc.c:361,18'
              BranchSideFuncs:
                - connect
        - Branch String:   'misc.c:360,6'
          Branch Sides:
            - BranchSide:      'misc.c:361,18'
              BranchSideFuncs:
                - connect
            - BranchSide:      'misc.c:363,15'
              BranchSideFuncs:
                - set_nonblock
                - connect
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - waitfd
                - __sanitizer_cov_trace_const_cmp4
                - getsockopt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - unset_nonblock
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - unset_nonblock
        - Branch String:   'misc.c:365,7'
          Branch Sides:
            - BranchSide:      'misc.c:367,19'
              BranchSideFuncs:
                - unset_nonblock
            - BranchSide:      'misc.c:369,14'
              BranchSideFuncs:
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - waitfd
                - __sanitizer_cov_trace_const_cmp4
                - getsockopt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - unset_nonblock
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - connect
                - __sanitizer_cov_trace_const_cmp4
                - unset_nonblock
        - Branch String:   'misc.c:369,14'
          Branch Sides:
            - BranchSide:      'misc.c:370,4'
              BranchSideFuncs:
                - connect
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - waitfd
                - __sanitizer_cov_trace_const_cmp4
                - getsockopt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - unset_nonblock
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - unset_nonblock
            - BranchSide:      'misc.c:371,12'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - waitfd
                - __sanitizer_cov_trace_const_cmp4
                - getsockopt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - unset_nonblock
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'misc.c:376,6'
          Branch Sides:
            - BranchSide:      'misc.c:377,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:380,17'
              BranchSideFuncs:
                - getsockopt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - unset_nonblock
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'misc.c:380,6'
          Branch Sides:
            - BranchSide:      'misc.c:381,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:384,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - unset_nonblock
                - __errno_location
        - Branch String:   'misc.c:384,6'
          Branch Sides:
            - BranchSide:      'misc.c:385,11'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'misc.c:388,17'
              BranchSideFuncs:
                - unset_nonblock
      Callsites:
        - Src:             'misc.c:361,10'
          Dst:             connect
        - Src:             'misc.c:363,2'
          Dst:             set_nonblock
        - Src:             'misc.c:365,7'
          Dst:             connect
        - Src:             'misc.c:367,4'
          Dst:             unset_nonblock
        - Src:             'misc.c:369,14'
          Dst:             __errno_location
        - Src:             'misc.c:371,12'
          Dst:             __errno_location
        - Src:             'misc.c:376,6'
          Dst:             waitfd
        - Src:             'misc.c:380,6'
          Dst:             getsockopt
        - Src:             'misc.c:381,3'
          Dst:             __errno_location
        - Src:             'misc.c:381,3'
          Dst:             strerror
        - Src:             'misc.c:381,3'
          Dst:             sshlog
        - Src:             'misc.c:385,3'
          Dst:             __errno_location
        - Src:             'misc.c:388,2'
          Dst:             unset_nonblock
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    connect
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'struct.sockaddr *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    set_nonblock
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 106
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          73
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - __errno_location
        - fcntl
        - sshlog
      functionUses:    3
      BranchProfiles:
        - Branch String:   'misc.c:110,6'
          Branch Sides:
            - BranchSide:      'misc.c:111,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:114,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - sshlog
        - Branch String:   'misc.c:114,6'
          Branch Sides:
            - BranchSide:      'misc.c:115,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'misc.c:118,2'
              BranchSideFuncs:
                - sshlog
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'misc.c:120,6'
          Branch Sides:
            - BranchSide:      'misc.c:121,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:125,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:109,8'
          Dst:             fcntl
        - Src:             'misc.c:111,3'
          Dst:             __errno_location
        - Src:             'misc.c:111,3'
          Dst:             strerror
        - Src:             'misc.c:111,3'
          Dst:             sshlog
        - Src:             'misc.c:115,3'
          Dst:             sshlog
        - Src:             'misc.c:118,2'
          Dst:             sshlog
        - Src:             'misc.c:120,6'
          Dst:             fcntl
        - Src:             'misc.c:121,3'
          Dst:             __errno_location
        - Src:             'misc.c:121,3'
          Dst:             strerror
        - Src:             'misc.c:121,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    unset_nonblock
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 130
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          73
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - __errno_location
        - fcntl
        - sshlog
      functionUses:    2
      BranchProfiles:
        - Branch String:   'misc.c:134,6'
          Branch Sides:
            - BranchSide:      'misc.c:135,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:138,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'misc.c:138,6'
          Branch Sides:
            - BranchSide:      'misc.c:139,3'
              BranchSideFuncs:
                - sshlog
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:142,2'
              BranchSideFuncs:
                - sshlog
                - fcntl
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'misc.c:144,6'
          Branch Sides:
            - BranchSide:      'misc.c:145,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:149,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:133,8'
          Dst:             fcntl
        - Src:             'misc.c:135,3'
          Dst:             __errno_location
        - Src:             'misc.c:135,3'
          Dst:             strerror
        - Src:             'misc.c:135,3'
          Dst:             sshlog
        - Src:             'misc.c:139,3'
          Dst:             sshlog
        - Src:             'misc.c:142,2'
          Dst:             sshlog
        - Src:             'misc.c:144,6'
          Dst:             fcntl
        - Src:             'misc.c:145,3'
          Dst:             __errno_location
        - Src:             'misc.c:145,3'
          Dst:             strerror
        - Src:             'misc.c:145,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    waitfd
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 310
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         21
      ICount:          117
      EdgeCount:       27
      CyclomaticComplexity: 8
      functionsReached:
        - __errno_location
        - monotime_tv
        - ms_subtract_diff
        - poll
      functionUses:    2
      BranchProfiles:
        - Branch String:   'misc.c:317,2'
          Branch Sides:
            - BranchSide:      'misc.c:318,3'
              BranchSideFuncs:
                - monotime_tv
                - poll
                - __errno_location
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:331,2'
              BranchSideFuncs:
                - __errno_location
        - Branch String:   'misc.c:323,7'
          Branch Sides:
            - BranchSide:      'misc.c:324,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:325,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - monotime_tv
                - poll
                - __errno_location
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:325,20'
          Branch Sides:
            - BranchSide:      'misc.c:325,23'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - monotime_tv
                - poll
                - __errno_location
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:327,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - monotime_tv
                - poll
                - __errno_location
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:325,39'
          Branch Sides:
            - BranchSide:      'misc.c:325,42'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - monotime_tv
                - poll
                - __errno_location
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:327,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - monotime_tv
                - poll
                - __errno_location
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:325,12'
          Branch Sides:
            - BranchSide:      'misc.c:326,4'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:327,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - monotime_tv
                - poll
                - __errno_location
                - ms_subtract_diff
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'misc.c:318,3'
          Dst:             monotime_tv
        - Src:             'misc.c:319,7'
          Dst:             poll
        - Src:             'misc.c:320,12'
          Dst:             __errno_location
        - Src:             'misc.c:321,3'
          Dst:             ms_subtract_diff
        - Src:             'misc.c:322,3'
          Dst:             __errno_location
        - Src:             'misc.c:325,23'
          Dst:             __errno_location
        - Src:             'misc.c:325,42'
          Dst:             __errno_location
        - Src:             'misc.c:331,2'
          Dst:             __errno_location
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getsockopt
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'int '
        - 'int '
        - 'int '
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    waitrfd
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 341
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - waitfd
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'misc.c:342,9'
          Dst:             waitfd
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    set_sock_tos
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 268
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         14
      ICount:          83
      EdgeCount:       15
      CyclomaticComplexity: 3
      functionsReached:
        - __errno_location
        - get_sock_af
        - setsockopt
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'misc.c:272,2'
          Branch Sides:
            - BranchSide:      'misc.c:275,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:278,3'
              BranchSideFuncs:
                - sshlog
                - setsockopt
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:288,3'
              BranchSideFuncs:
                - sshlog
                - setsockopt
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:297,3'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'misc.c:279,7'
          Branch Sides:
            - BranchSide:      'misc.c:281,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:285,3'
              BranchSideFuncs: []
        - Branch String:   'misc.c:289,7'
          Branch Sides:
            - BranchSide:      'misc.c:291,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:295,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:272,16'
          Dst:             get_sock_af
        - Src:             'misc.c:278,3'
          Dst:             sshlog
        - Src:             'misc.c:279,7'
          Dst:             setsockopt
        - Src:             'misc.c:281,4'
          Dst:             __errno_location
        - Src:             'misc.c:281,4'
          Dst:             strerror
        - Src:             'misc.c:281,4'
          Dst:             sshlog
        - Src:             'misc.c:288,3'
          Dst:             sshlog
        - Src:             'misc.c:289,7'
          Dst:             setsockopt
        - Src:             'misc.c:291,4'
          Dst:             __errno_location
        - Src:             'misc.c:291,4'
          Dst:             strerror
        - Src:             'misc.c:291,4'
          Dst:             sshlog
        - Src:             'misc.c:297,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_sock_af
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 251
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         16
      ICount:          112
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - getsockname
        - htonl
        - memset
      functionUses:    2
      BranchProfiles:
        - Branch String:   'misc.c:256,6'
          Branch Sides:
            - BranchSide:      'misc.c:257,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:259,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - htonl
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'misc.c:259,31'
          Branch Sides:
            - BranchSide:      'misc.c:260,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - htonl
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'misc.c:263,12'
              BranchSideFuncs: []
        - Branch String:   'misc.c:260,6'
          Branch Sides:
            - BranchSide:      'misc.c:260,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - htonl
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'misc.c:260,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:260,6'
          Branch Sides:
            - BranchSide:      'misc.c:260,6'
              BranchSideFuncs:
                - htonl
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:260,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:259,6'
          Branch Sides:
            - BranchSide:      'misc.c:261,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:263,12'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:255,2'
          Dst:             memset
        - Src:             'misc.c:256,6'
          Dst:             getsockname
        - Src:             'misc.c:260,6'
          Dst:             htonl
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getsockname
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'struct.sockaddr *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    htonl
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    6
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    set_rdomain
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 220
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sys_set_rdomain
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'misc.c:222,9'
          Dst:             sys_set_rdomain
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_rdomain
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 198
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          16
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sys_get_rdomain
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'misc.c:200,9'
          Dst:             sys_get_rdomain
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    set_reuseaddr
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 185
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          40
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - __errno_location
        - setsockopt
        - sshlog
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:188,6'
          Branch Sides:
            - BranchSide:      'misc.c:189,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:192,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'misc.c:188,6'
          Dst:             setsockopt
        - Src:             'misc.c:189,3'
          Dst:             __errno_location
        - Src:             'misc.c:189,3'
          Dst:             strerror
        - Src:             'misc.c:189,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    set_nodelay
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 163
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          64
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - __errno_location
        - getsockopt
        - setsockopt
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'misc.c:168,6'
          Branch Sides:
            - BranchSide:      'misc.c:169,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:172,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - setsockopt
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - sshlog
        - Branch String:   'misc.c:172,6'
          Branch Sides:
            - BranchSide:      'misc.c:173,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'misc.c:176,6'
              BranchSideFuncs:
                - sshlog
                - setsockopt
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'misc.c:178,6'
          Branch Sides:
            - BranchSide:      'misc.c:178,6'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'misc.c:179,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
      Callsites:
        - Src:             'misc.c:168,6'
          Dst:             getsockopt
        - Src:             'misc.c:169,3'
          Dst:             __errno_location
        - Src:             'misc.c:169,3'
          Dst:             strerror
        - Src:             'misc.c:169,3'
          Dst:             sshlog
        - Src:             'misc.c:173,3'
          Dst:             sshlog
        - Src:             'misc.c:177,2'
          Dst:             sshlog
        - Src:             'misc.c:178,6'
          Dst:             setsockopt
        - Src:             'misc.c:179,3'
          Dst:             __errno_location
        - Src:             'misc.c:179,3'
          Dst:             strerror
        - Src:             'misc.c:179,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_gai_strerror
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 154
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          45
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - __errno_location
        - gai_strerror
      functionUses:    2
      BranchProfiles:
        - Branch String:   'misc.c:155,27'
          Branch Sides:
            - BranchSide:      'misc.c:155,30'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - gai_strerror
                - __errno_location
                - strerror
            - BranchSide:      'misc.c:157,22'
              BranchSideFuncs:
                - gai_strerror
        - Branch String:   'misc.c:155,6'
          Branch Sides:
            - BranchSide:      'misc.c:156,19'
              BranchSideFuncs:
                - __errno_location
                - strerror
            - BranchSide:      'misc.c:157,22'
              BranchSideFuncs:
                - gai_strerror
      Callsites:
        - Src:             'misc.c:155,30'
          Dst:             __errno_location
        - Src:             'misc.c:156,19'
          Dst:             __errno_location
        - Src:             'misc.c:156,10'
          Dst:             strerror
        - Src:             'misc.c:157,9'
          Dst:             gai_strerror
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    gai_strerror
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    rtrim
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 92
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         13
      ICount:          73
      EdgeCount:       16
      CyclomaticComplexity: 5
      functionsReached:
        - __ctype_b_loc
        - strlen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:95,6'
          Branch Sides:
            - BranchSide:      'misc.c:96,3'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:97,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'misc.c:97,2'
          Branch Sides:
            - BranchSide:      'misc.c:97,2'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'misc.c:98,7'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'misc.c:98,7'
          Branch Sides:
            - BranchSide:      'misc.c:99,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'misc.c:100,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'misc.c:95,11'
          Dst:             strlen
        - Src:             'misc.c:98,7'
          Dst:             __ctype_b_loc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    chop
      functionSourceFile: '/src/openssh/misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 76
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          56
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'misc.c:78,2'
          Branch Sides:
            - BranchSide:      'misc.c:79,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
            - BranchSide:      'misc.c:85,9'
              BranchSideFuncs: []
        - Branch String:   'misc.c:79,18'
          Branch Sides:
            - BranchSide:      'misc.c:79,22'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:80,5'
              BranchSideFuncs: []
        - Branch String:   'misc.c:79,7'
          Branch Sides:
            - BranchSide:      'misc.c:80,5'
              BranchSideFuncs: []
            - BranchSide:      'misc.c:83,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dss_verify
      functionSourceFile: '/src/openssh/ssh-dss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 333
      functionDepth:   0
      returnType:      'int '
      argCount:        8
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'int '
        - 'struct.sshkey_sig_details **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         54
      ICount:          309
      EdgeCount:       73
      CyclomaticComplexity: 21
      functionsReached:
        - BN_bin2bn
        - BN_clear_free
        - BN_new
        - DSA_SIG_free
        - DSA_SIG_new
        - DSA_SIG_set0
        - DSA_do_verify
        - explicit_bzero
        - freezero
        - ssh_digest_bytes
        - ssh_digest_memory
        - sshbuf_free
        - sshbuf_from
        - sshbuf_get_cstring
        - sshbuf_get_string
        - sshbuf_len
        - sshkey_type_plain
        - strcmp
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-dss.c:342,18'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:342,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:345,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:342,38'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:343,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:345,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:343,46'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:344,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:345,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:344,18'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:344,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:345,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:342,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:345,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:346,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - DSA_SIG_new
                - BN_new
                - BN_new
                - BN_bin2bn
                - BN_bin2bn
                - DSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-dss.c:346,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:347,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:350,23'
              BranchSideFuncs:
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - DSA_SIG_new
                - BN_new
                - BN_new
                - BN_bin2bn
                - BN_bin2bn
                - DSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-dss.c:350,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:351,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:352,25'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - DSA_SIG_new
                - BN_new
                - BN_new
                - BN_bin2bn
                - BN_bin2bn
                - DSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-dss.c:352,47'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:353,24'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:354,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-dss.c:352,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:354,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:357,24'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - DSA_SIG_new
                - BN_new
                - BN_new
                - BN_bin2bn
                - BN_bin2bn
                - DSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-dss.c:357,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:358,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:361,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - DSA_SIG_new
                - BN_new
                - BN_new
                - BN_bin2bn
                - BN_bin2bn
                - DSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-dss.c:361,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:362,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:366,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - DSA_SIG_new
                - BN_new
                - BN_new
                - BN_bin2bn
                - BN_bin2bn
                - DSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-dss.c:366,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:367,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:372,14'
              BranchSideFuncs:
                - DSA_SIG_new
                - BN_new
                - BN_new
                - BN_bin2bn
                - BN_bin2bn
                - DSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-dss.c:372,37'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:373,15'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:375,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-dss.c:373,33'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:374,15'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:375,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-dss.c:372,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:375,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:378,17'
              BranchSideFuncs:
                - BN_bin2bn
                - BN_bin2bn
                - DSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-dss.c:378,55'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:379,17'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:380,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-dss.c:378,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:380,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:383,20'
              BranchSideFuncs:
                - DSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-dss.c:383,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:384,7'
              BranchSideFuncs:
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:387,16'
              BranchSideFuncs:
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-dss.c:390,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:392,3'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:394,24'
              BranchSideFuncs:
                - DSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-dss.c:394,2'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:396,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:399,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-dss.c:402,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-dss.c:413,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:414,12'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-dss.c:415,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-dss.c:337,21'
          Dst:             ssh_digest_bytes
        - Src:             'ssh-dss.c:343,6'
          Dst:             sshkey_type_plain
        - Src:             'ssh-dss.c:350,11'
          Dst:             sshbuf_from
        - Src:             'ssh-dss.c:352,6'
          Dst:             sshbuf_get_cstring
        - Src:             'ssh-dss.c:353,6'
          Dst:             sshbuf_get_string
        - Src:             'ssh-dss.c:357,6'
          Dst:             strcmp
        - Src:             'ssh-dss.c:361,6'
          Dst:             sshbuf_len
        - Src:             'ssh-dss.c:372,14'
          Dst:             DSA_SIG_new
        - Src:             'ssh-dss.c:373,15'
          Dst:             BN_new
        - Src:             'ssh-dss.c:374,15'
          Dst:             BN_new
        - Src:             'ssh-dss.c:378,7'
          Dst:             BN_bin2bn
        - Src:             'ssh-dss.c:379,7'
          Dst:             BN_bin2bn
        - Src:             'ssh-dss.c:383,7'
          Dst:             DSA_SIG_set0
        - Src:             'ssh-dss.c:390,13'
          Dst:             ssh_digest_memory
        - Src:             'ssh-dss.c:394,10'
          Dst:             DSA_do_verify
        - Src:             'ssh-dss.c:407,2'
          Dst:             explicit_bzero
        - Src:             'ssh-dss.c:408,2'
          Dst:             DSA_SIG_free
        - Src:             'ssh-dss.c:409,2'
          Dst:             BN_clear_free
        - Src:             'ssh-dss.c:410,2'
          Dst:             BN_clear_free
        - Src:             'ssh-dss.c:411,2'
          Dst:             sshbuf_free
        - Src:             'ssh-dss.c:414,3'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_SIG_new
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.DSA_SIG_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_bin2bn
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.bignum_st *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'int '
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_SIG_set0
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.DSA_SIG_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_do_verify
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'int '
        - 'struct.DSA_SIG_st *'
        - 'struct.dsa_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_SIG_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.DSA_SIG_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dss_sign
      functionSourceFile: '/src/openssh/ssh-dss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 263
      functionDepth:   0
      returnType:      'int '
      argCount:        9
      argTypes:
        - 'struct.sshkey *'
        - 'char **'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         44
      ICount:          295
      EdgeCount:       60
      CyclomaticComplexity: 18
      functionsReached:
        - BN_bn2bin
        - BN_num_bits
        - DSA_SIG_free
        - DSA_SIG_get0
        - DSA_do_sign
        - explicit_bzero
        - ssh_digest_bytes
        - ssh_digest_memory
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put_cstring
        - sshbuf_put_string
        - sshkey_type_plain
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-dss.c:271,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:272,4'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_sign
                - DSA_SIG_get0
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - explicit_bzero
                - BN_bn2bin
                - BN_bn2bin
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'ssh-dss.c:273,6'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_sign
                - DSA_SIG_get0
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - explicit_bzero
                - BN_bn2bin
                - BN_bn2bin
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-dss.c:273,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:274,4'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_sign
                - DSA_SIG_get0
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - explicit_bzero
                - BN_bn2bin
                - BN_bn2bin
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'ssh-dss.c:276,6'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_sign
                - DSA_SIG_get0
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - explicit_bzero
                - BN_bn2bin
                - BN_bn2bin
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-dss.c:276,18'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:276,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:278,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:276,38'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:277,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:278,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:276,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:278,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:279,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_sign
                - DSA_SIG_get0
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - explicit_bzero
                - BN_bn2bin
                - BN_bn2bin
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-dss.c:279,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:280,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:282,48'
              BranchSideFuncs:
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - DSA_do_sign
                - DSA_SIG_get0
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - explicit_bzero
                - BN_bn2bin
                - BN_bn2bin
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-dss.c:282,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:284,3'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
            - BranchSide:      'ssh-dss.c:286,25'
              BranchSideFuncs:
                - DSA_do_sign
                - DSA_SIG_get0
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - explicit_bzero
                - BN_bn2bin
                - BN_bn2bin
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-dss.c:286,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:287,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
            - BranchSide:      'ssh-dss.c:291,15'
              BranchSideFuncs:
                - DSA_SIG_get0
                - BN_num_bits
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - explicit_bzero
                - BN_bn2bin
                - BN_bn2bin
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-dss.c:294,25'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:294,28'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
            - BranchSide:      'ssh-dss.c:295,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
        - Branch String:   'ssh-dss.c:294,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:295,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
            - BranchSide:      'ssh-dss.c:298,17'
              BranchSideFuncs:
                - explicit_bzero
                - BN_bn2bin
                - BN_bn2bin
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-dss.c:302,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:303,7'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
            - BranchSide:      'ssh-dss.c:306,32'
              BranchSideFuncs:
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-dss.c:306,52'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:307,31'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
            - BranchSide:      'ssh-dss.c:308,3'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
        - Branch String:   'ssh-dss.c:306,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:308,3'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
            - BranchSide:      'ssh-dss.c:310,19'
              BranchSideFuncs:
                - sshbuf_len
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-dss.c:311,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:312,23'
              BranchSideFuncs:
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
            - BranchSide:      'ssh-dss.c:318,6'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
        - Branch String:   'ssh-dss.c:312,7'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:313,8'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
            - BranchSide:      'ssh-dss.c:316,11'
              BranchSideFuncs:
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
        - Branch String:   'ssh-dss.c:318,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:319,11'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
            - BranchSide:      'ssh-dss.c:320,6'
              BranchSideFuncs:
                - explicit_bzero
                - DSA_SIG_free
                - sshbuf_free
      Callsites:
        - Src:             'ssh-dss.c:267,33'
          Dst:             ssh_digest_bytes
        - Src:             'ssh-dss.c:277,6'
          Dst:             sshkey_type_plain
        - Src:             'ssh-dss.c:282,13'
          Dst:             ssh_digest_memory
        - Src:             'ssh-dss.c:286,13'
          Dst:             DSA_do_sign
        - Src:             'ssh-dss.c:291,2'
          Dst:             DSA_SIG_get0
        - Src:             'ssh-dss.c:292,9'
          Dst:             BN_num_bits
        - Src:             'ssh-dss.c:293,9'
          Dst:             BN_num_bits
        - Src:             'ssh-dss.c:298,2'
          Dst:             explicit_bzero
        - Src:             'ssh-dss.c:299,2'
          Dst:             BN_bn2bin
        - Src:             'ssh-dss.c:300,2'
          Dst:             BN_bn2bin
        - Src:             'ssh-dss.c:302,11'
          Dst:             sshbuf_new
        - Src:             'ssh-dss.c:306,13'
          Dst:             sshbuf_put_cstring
        - Src:             'ssh-dss.c:307,13'
          Dst:             sshbuf_put_string
        - Src:             'ssh-dss.c:310,8'
          Dst:             sshbuf_len
        - Src:             'ssh-dss.c:316,17'
          Dst:             sshbuf_ptr
        - Src:             'ssh-dss.c:322,2'
          Dst:             explicit_bzero
        - Src:             'ssh-dss.c:323,2'
          Dst:             DSA_SIG_free
        - Src:             'ssh-dss.c:324,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_do_sign
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.DSA_SIG_st *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'int '
        - 'struct.dsa_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_SIG_get0
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.DSA_SIG_st *'
        - 'struct.bignum_st **'
        - 'struct.bignum_st **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_bn2bin
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.bignum_st *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dss_copy_public
      functionSourceFile: '/src/openssh/ssh-dss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 165
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         17
      ICount:          133
      EdgeCount:       23
      CyclomaticComplexity: 8
      functionsReached:
        - BN_clear_free
        - BN_dup
        - DSA_get0_key
        - DSA_get0_pqg
        - DSA_set0_key
        - DSA_set0_pqg
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-dss.c:173,42'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:174,26'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-dss.c:177,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-dss.c:174,42'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:175,26'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-dss.c:177,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-dss.c:175,42'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:176,32'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-dss.c:177,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-dss.c:173,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:177,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-dss.c:180,20'
              BranchSideFuncs:
                - DSA_set0_pqg
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - DSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-dss.c:180,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:181,5'
              BranchSideFuncs:
                - DSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-dss.c:184,36'
              BranchSideFuncs:
                - DSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-dss.c:185,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:186,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-dss.c:189,18'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
      Callsites:
        - Src:             'ssh-dss.c:171,2'
          Dst:             DSA_get0_pqg
        - Src:             'ssh-dss.c:172,2'
          Dst:             DSA_get0_key
        - Src:             'ssh-dss.c:173,19'
          Dst:             BN_dup
        - Src:             'ssh-dss.c:174,19'
          Dst:             BN_dup
        - Src:             'ssh-dss.c:175,19'
          Dst:             BN_dup
        - Src:             'ssh-dss.c:176,25'
          Dst:             BN_dup
        - Src:             'ssh-dss.c:180,7'
          Dst:             DSA_set0_pqg
        - Src:             'ssh-dss.c:185,7'
          Dst:             DSA_set0_key
        - Src:             'ssh-dss.c:193,2'
          Dst:             BN_clear_free
        - Src:             'ssh-dss.c:194,2'
          Dst:             BN_clear_free
        - Src:             'ssh-dss.c:195,2'
          Dst:             BN_clear_free
        - Src:             'ssh-dss.c:196,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_get0_pqg
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'struct.dsa_st *'
        - 'struct.bignum_st **'
        - 'struct.bignum_st **'
        - 'struct.bignum_st **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_get0_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.dsa_st *'
        - 'struct.bignum_st **'
        - 'struct.bignum_st **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_dup
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.bignum_st *'
      argCount:        1
      argTypes:
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    8
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_set0_pqg
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.dsa_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_set0_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.dsa_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dss_generate
      functionSourceFile: '/src/openssh/ssh-dss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 147
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         13
      ICount:          71
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - DSA_free
        - DSA_generate_key
        - DSA_generate_parameters_ex
        - DSA_new
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-dss.c:150,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:151,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:152,17'
              BranchSideFuncs:
                - DSA_new
                - DSA_generate_parameters_ex
                - __sanitizer_cov_trace_const_cmp4
                - DSA_free
                - DSA_generate_key
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-dss.c:152,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:153,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:154,34'
              BranchSideFuncs:
                - DSA_generate_parameters_ex
                - __sanitizer_cov_trace_const_cmp4
                - DSA_free
                - DSA_generate_key
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-dss.c:155,18'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:155,39'
              BranchSideFuncs:
                - DSA_generate_key
                - __sanitizer_cov_trace_const_cmp4
                - DSA_free
            - BranchSide:      'ssh-dss.c:156,12'
              BranchSideFuncs:
                - DSA_free
        - Branch String:   'ssh-dss.c:154,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:156,12'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:159,11'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-dss.c:152,17'
          Dst:             DSA_new
        - Src:             'ssh-dss.c:154,7'
          Dst:             DSA_generate_parameters_ex
        - Src:             'ssh-dss.c:155,22'
          Dst:             DSA_generate_key
        - Src:             'ssh-dss.c:156,3'
          Dst:             DSA_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_new
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.dsa_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_generate_parameters_ex
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'struct.dsa_st *'
        - 'int '
        - 'char *'
        - 'int '
        - 'int *'
        - 'size_t *'
        - 'struct.bn_gencb_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_generate_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.dsa_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DSA_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.dsa_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dss_deserialize_private
      functionSourceFile: '/src/openssh/ssh-dss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 240
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         13
      ICount:          86
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - BN_clear_free
        - DSA_set0_key
        - ssh_dss_deserialize_public
        - sshbuf_get_bignum2
        - sshkey_is_cert
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-dss.c:244,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:245,39'
              BranchSideFuncs:
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - DSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
            - BranchSide:      'ssh-dss.c:249,30'
              BranchSideFuncs:
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - DSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
        - Branch String:   'ssh-dss.c:245,7'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:246,11'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:247,2'
              BranchSideFuncs:
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - DSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
        - Branch String:   'ssh-dss.c:249,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:250,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:251,20'
              BranchSideFuncs:
                - DSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
        - Branch String:   'ssh-dss.c:251,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:252,17'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:255,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-dss.c:244,7'
          Dst:             sshkey_is_cert
        - Src:             'ssh-dss.c:245,12'
          Dst:             ssh_dss_deserialize_public
        - Src:             'ssh-dss.c:249,11'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-dss.c:251,7'
          Dst:             DSA_set0_key
        - Src:             'ssh-dss.c:252,3'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dss_deserialize_public
      functionSourceFile: '/src/openssh/ssh-dss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 203
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         17
      ICount:          120
      EdgeCount:       23
      CyclomaticComplexity: 8
      functionsReached:
        - BN_clear_free
        - DSA_set0_key
        - DSA_set0_pqg
        - sshbuf_get_bignum2
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh-dss.c:207,41'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:208,25'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-dss.c:211,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-dss.c:208,41'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:209,25'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-dss.c:211,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-dss.c:209,41'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:210,25'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-dss.c:211,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-dss.c:207,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:211,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-dss.c:214,20'
              BranchSideFuncs:
                - DSA_set0_pqg
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - DSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-dss.c:214,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:215,7'
              BranchSideFuncs:
                - DSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-dss.c:218,24'
              BranchSideFuncs:
                - DSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-dss.c:219,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:220,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-dss.c:223,14'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
      Callsites:
        - Src:             'ssh-dss.c:207,6'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-dss.c:208,6'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-dss.c:209,6'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-dss.c:210,6'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-dss.c:214,7'
          Dst:             DSA_set0_pqg
        - Src:             'ssh-dss.c:219,7'
          Dst:             DSA_set0_key
        - Src:             'ssh-dss.c:230,2'
          Dst:             BN_clear_free
        - Src:             'ssh-dss.c:231,2'
          Dst:             BN_clear_free
        - Src:             'ssh-dss.c:232,2'
          Dst:             BN_clear_free
        - Src:             'ssh-dss.c:233,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dss_serialize_private
      functionSourceFile: '/src/openssh/ssh-dss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 130
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          75
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - DSA_get0_key
        - ssh_dss_serialize_public
        - sshbuf_put_bignum2
        - sshkey_is_cert
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-dss.c:135,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:136,37'
              BranchSideFuncs:
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-dss.c:139,30'
              BranchSideFuncs:
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-dss.c:136,7'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:137,11'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:138,2'
              BranchSideFuncs:
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-dss.c:139,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:140,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:142,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-dss.c:134,2'
          Dst:             DSA_get0_key
        - Src:             'ssh-dss.c:135,7'
          Dst:             sshkey_is_cert
        - Src:             'ssh-dss.c:136,12'
          Dst:             ssh_dss_serialize_public
        - Src:             'ssh-dss.c:139,11'
          Dst:             sshbuf_put_bignum2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dss_serialize_public
      functionSourceFile: '/src/openssh/ssh-dss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 107
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         24
      ICount:          132
      EdgeCount:       33
      CyclomaticComplexity: 11
      functionsReached:
        - DSA_get0_key
        - DSA_get0_pqg
        - sshbuf_put_bignum2
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh-dss.c:111,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:112,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:113,15'
              BranchSideFuncs:
                - DSA_get0_pqg
                - DSA_get0_key
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-dss.c:115,20'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:115,23'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:117,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:115,37'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:116,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:117,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:116,20'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:116,23'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:117,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:115,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:117,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:118,30'
              BranchSideFuncs:
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-dss.c:118,46'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:119,30'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:122,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:119,46'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:120,30'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:122,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:120,46'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:121,30'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:122,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:118,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:122,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:124,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-dss.c:113,2'
          Dst:             DSA_get0_pqg
        - Src:             'ssh-dss.c:114,2'
          Dst:             DSA_get0_key
        - Src:             'ssh-dss.c:118,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'ssh-dss.c:119,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'ssh-dss.c:120,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'ssh-dss.c:121,11'
          Dst:             sshbuf_put_bignum2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dss_equal
      functionSourceFile: '/src/openssh/ssh-dss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 78
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         34
      ICount:          178
      EdgeCount:       48
      CyclomaticComplexity: 16
      functionsReached:
        - BN_cmp
        - DSA_get0_key
        - DSA_get0_pqg
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-dss.c:82,21'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:82,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:83,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:82,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:83,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:84,15'
              BranchSideFuncs:
                - DSA_get0_pqg
                - DSA_get0_pqg
                - DSA_get0_key
                - DSA_get0_key
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-dss.c:88,22'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:88,25'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:92,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:88,41'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:89,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:92,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:89,22'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:89,25'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:92,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:89,41'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:90,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:92,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:90,22'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:90,25'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:92,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:90,41'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:91,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:92,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:91,28'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:91,31'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:92,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-dss.c:88,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:92,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:93,13'
              BranchSideFuncs:
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-dss.c:93,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:94,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:95,13'
              BranchSideFuncs:
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-dss.c:95,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:96,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:97,13'
              BranchSideFuncs:
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-dss.c:97,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:98,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:99,13'
              BranchSideFuncs:
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-dss.c:99,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:100,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:101,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-dss.c:84,2'
          Dst:             DSA_get0_pqg
        - Src:             'ssh-dss.c:85,2'
          Dst:             DSA_get0_pqg
        - Src:             'ssh-dss.c:86,2'
          Dst:             DSA_get0_key
        - Src:             'ssh-dss.c:87,2'
          Dst:             DSA_get0_key
        - Src:             'ssh-dss.c:93,6'
          Dst:             BN_cmp
        - Src:             'ssh-dss.c:95,6'
          Dst:             BN_cmp
        - Src:             'ssh-dss.c:97,6'
          Dst:             BN_cmp
        - Src:             'ssh-dss.c:99,6'
          Dst:             BN_cmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dss_cleanup
      functionSourceFile: '/src/openssh/ssh-dss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 71
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          21
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - DSA_free
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh-dss.c:72,2'
          Dst:             DSA_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dss_alloc
      functionSourceFile: '/src/openssh/ssh-dss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 63
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          32
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - DSA_new
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-dss.c:64,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:65,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:66,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-dss.c:64,16'
          Dst:             DSA_new
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dss_size
      functionSourceFile: '/src/openssh/ssh-dss.c'
      linkageType:     InternalLinkage
      functionLinenumber: 52
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          39
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - BN_num_bits
        - DSA_get0_pqg
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-dss.c:55,6'
          Branch Sides:
            - BranchSide:      'ssh-dss.c:56,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-dss.c:57,15'
              BranchSideFuncs:
                - DSA_get0_pqg
                - BN_num_bits
      Callsites:
        - Src:             'ssh-dss.c:57,2'
          Dst:             DSA_get0_pqg
        - Src:             'ssh-dss.c:58,9'
          Dst:             BN_num_bits
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_verify
      functionSourceFile: '/src/openssh/ssh-ecdsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 295
      functionDepth:   0
      returnType:      'int '
      argCount:        8
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'int '
        - 'struct.sshkey_sig_details **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         49
      ICount:          296
      EdgeCount:       66
      CyclomaticComplexity: 19
      functionsReached:
        - BN_clear_free
        - ECDSA_SIG_free
        - ECDSA_SIG_new
        - ECDSA_SIG_set0
        - ECDSA_do_verify
        - explicit_bzero
        - ssh_digest_bytes
        - ssh_digest_memory
        - sshbuf_free
        - sshbuf_from
        - sshbuf_froms
        - sshbuf_get_bignum2
        - sshbuf_get_cstring
        - sshbuf_len
        - sshkey_ec_nid_to_hash_alg
        - sshkey_ssh_name_plain
        - sshkey_type_plain
        - strcmp
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa.c:305,18'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:305,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:308,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa.c:305,40'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:306,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:308,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa.c:306,48'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:307,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:308,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa.c:307,18'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:307,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:308,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa.c:305,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:308,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:310,44'
              BranchSideFuncs:
                - sshkey_ec_nid_to_hash_alg
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-ecdsa.c:310,67'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:311,31'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:312,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa.c:310,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:312,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:315,23'
              BranchSideFuncs:
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-ecdsa.c:315,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:316,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:317,25'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-ecdsa.c:317,47'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:318,19'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa.c:319,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa.c:317,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:319,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa.c:322,35'
              BranchSideFuncs:
                - sshkey_ssh_name_plain
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-ecdsa.c:322,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:323,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa.c:326,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-ecdsa.c:326,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:327,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa.c:332,25'
              BranchSideFuncs:
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-ecdsa.c:332,46'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:333,25'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa.c:334,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa.c:332,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:334,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa.c:337,14'
              BranchSideFuncs:
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-ecdsa.c:337,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:338,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa.c:341,22'
              BranchSideFuncs:
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
        - Branch String:   'ssh-ecdsa.c:341,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:342,7'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa.c:345,16'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa.c:347,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:348,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa.c:351,31'
              BranchSideFuncs:
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa.c:351,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:353,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa.c:355,26'
              BranchSideFuncs:
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa.c:355,2'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:357,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa.c:360,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa.c:363,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
      Callsites:
        - Src:             'ssh-ecdsa.c:306,6'
          Dst:             sshkey_type_plain
        - Src:             'ssh-ecdsa.c:310,18'
          Dst:             sshkey_ec_nid_to_hash_alg
        - Src:             'ssh-ecdsa.c:311,14'
          Dst:             ssh_digest_bytes
        - Src:             'ssh-ecdsa.c:315,11'
          Dst:             sshbuf_from
        - Src:             'ssh-ecdsa.c:317,6'
          Dst:             sshbuf_get_cstring
        - Src:             'ssh-ecdsa.c:318,6'
          Dst:             sshbuf_froms
        - Src:             'ssh-ecdsa.c:322,13'
          Dst:             sshkey_ssh_name_plain
        - Src:             'ssh-ecdsa.c:322,6'
          Dst:             strcmp
        - Src:             'ssh-ecdsa.c:326,6'
          Dst:             sshbuf_len
        - Src:             'ssh-ecdsa.c:332,6'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-ecdsa.c:333,6'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-ecdsa.c:337,14'
          Dst:             ECDSA_SIG_new
        - Src:             'ssh-ecdsa.c:341,7'
          Dst:             ECDSA_SIG_set0
        - Src:             'ssh-ecdsa.c:347,6'
          Dst:             sshbuf_len
        - Src:             'ssh-ecdsa.c:351,13'
          Dst:             ssh_digest_memory
        - Src:             'ssh-ecdsa.c:355,10'
          Dst:             ECDSA_do_verify
        - Src:             'ssh-ecdsa.c:368,2'
          Dst:             explicit_bzero
        - Src:             'ssh-ecdsa.c:369,2'
          Dst:             sshbuf_free
        - Src:             'ssh-ecdsa.c:370,2'
          Dst:             sshbuf_free
        - Src:             'ssh-ecdsa.c:371,2'
          Dst:             ECDSA_SIG_free
        - Src:             'ssh-ecdsa.c:372,2'
          Dst:             BN_clear_free
        - Src:             'ssh-ecdsa.c:373,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ECDSA_SIG_new
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.ECDSA_SIG_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ECDSA_SIG_set0
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ECDSA_SIG_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ECDSA_do_verify
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'int '
        - 'struct.ECDSA_SIG_st *'
        - 'struct.ec_key_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ECDSA_SIG_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ECDSA_SIG_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_sign
      functionSourceFile: '/src/openssh/ssh-ecdsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 230
      functionDepth:   0
      returnType:      'int '
      argCount:        9
      argTypes:
        - 'struct.sshkey *'
        - 'char **'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         50
      ICount:          297
      EdgeCount:       68
      CyclomaticComplexity: 20
      functionsReached:
        - ECDSA_SIG_free
        - ECDSA_SIG_get0
        - ECDSA_do_sign
        - explicit_bzero
        - ssh_digest_bytes
        - ssh_digest_memory
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put_bignum2
        - sshbuf_put_cstring
        - sshbuf_put_stringb
        - sshkey_ec_nid_to_hash_alg
        - sshkey_ssh_name_plain
        - sshkey_type_plain
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa.c:239,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:240,4'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_nid_to_hash_alg
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_sign
                - sshbuf_new
                - sshbuf_new
                - ECDSA_SIG_get0
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'ssh-ecdsa.c:241,6'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_nid_to_hash_alg
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_sign
                - sshbuf_new
                - sshbuf_new
                - ECDSA_SIG_get0
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ecdsa.c:241,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:242,4'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_nid_to_hash_alg
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_sign
                - sshbuf_new
                - sshbuf_new
                - ECDSA_SIG_get0
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'ssh-ecdsa.c:244,6'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_nid_to_hash_alg
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_sign
                - sshbuf_new
                - sshbuf_new
                - ECDSA_SIG_get0
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ecdsa.c:244,18'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:244,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:246,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa.c:244,40'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:245,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:246,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa.c:244,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:246,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:248,44'
              BranchSideFuncs:
                - sshkey_ec_nid_to_hash_alg
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_sign
                - sshbuf_new
                - sshbuf_new
                - ECDSA_SIG_get0
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ecdsa.c:248,67'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:249,31'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:250,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa.c:248,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:250,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:251,31'
              BranchSideFuncs:
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_sign
                - sshbuf_new
                - sshbuf_new
                - ECDSA_SIG_get0
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ecdsa.c:251,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:253,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
            - BranchSide:      'ssh-ecdsa.c:255,28'
              BranchSideFuncs:
                - ECDSA_do_sign
                - sshbuf_new
                - sshbuf_new
                - ECDSA_SIG_get0
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ecdsa.c:255,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:256,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
            - BranchSide:      'ssh-ecdsa.c:260,12'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_new
                - ECDSA_SIG_get0
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ecdsa.c:260,34'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:260,42'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
            - BranchSide:      'ssh-ecdsa.c:261,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
        - Branch String:   'ssh-ecdsa.c:260,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:261,7'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
            - BranchSide:      'ssh-ecdsa.c:264,17'
              BranchSideFuncs:
                - ECDSA_SIG_get0
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ecdsa.c:265,49'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:266,32'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
            - BranchSide:      'ssh-ecdsa.c:267,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
        - Branch String:   'ssh-ecdsa.c:265,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:267,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
            - BranchSide:      'ssh-ecdsa.c:268,32'
              BranchSideFuncs:
                - sshkey_ssh_name_plain
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ecdsa.c:268,69'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:269,32'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
            - BranchSide:      'ssh-ecdsa.c:270,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
        - Branch String:   'ssh-ecdsa.c:268,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:270,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
            - BranchSide:      'ssh-ecdsa.c:271,19'
              BranchSideFuncs:
                - sshbuf_len
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ecdsa.c:272,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:273,23'
              BranchSideFuncs:
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
            - BranchSide:      'ssh-ecdsa.c:279,6'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
        - Branch String:   'ssh-ecdsa.c:273,7'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:274,8'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
            - BranchSide:      'ssh-ecdsa.c:277,11'
              BranchSideFuncs:
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
        - Branch String:   'ssh-ecdsa.c:279,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:280,11'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
            - BranchSide:      'ssh-ecdsa.c:281,6'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
      Callsites:
        - Src:             'ssh-ecdsa.c:245,6'
          Dst:             sshkey_type_plain
        - Src:             'ssh-ecdsa.c:248,18'
          Dst:             sshkey_ec_nid_to_hash_alg
        - Src:             'ssh-ecdsa.c:249,14'
          Dst:             ssh_digest_bytes
        - Src:             'ssh-ecdsa.c:251,13'
          Dst:             ssh_digest_memory
        - Src:             'ssh-ecdsa.c:255,14'
          Dst:             ECDSA_do_sign
        - Src:             'ssh-ecdsa.c:260,12'
          Dst:             sshbuf_new
        - Src:             'ssh-ecdsa.c:260,42'
          Dst:             sshbuf_new
        - Src:             'ssh-ecdsa.c:264,2'
          Dst:             ECDSA_SIG_get0
        - Src:             'ssh-ecdsa.c:265,13'
          Dst:             sshbuf_put_bignum2
        - Src:             'ssh-ecdsa.c:266,13'
          Dst:             sshbuf_put_bignum2
        - Src:             'ssh-ecdsa.c:268,35'
          Dst:             sshkey_ssh_name_plain
        - Src:             'ssh-ecdsa.c:268,13'
          Dst:             sshbuf_put_cstring
        - Src:             'ssh-ecdsa.c:269,13'
          Dst:             sshbuf_put_stringb
        - Src:             'ssh-ecdsa.c:271,8'
          Dst:             sshbuf_len
        - Src:             'ssh-ecdsa.c:277,17'
          Dst:             sshbuf_ptr
        - Src:             'ssh-ecdsa.c:283,2'
          Dst:             explicit_bzero
        - Src:             'ssh-ecdsa.c:284,2'
          Dst:             sshbuf_free
        - Src:             'ssh-ecdsa.c:285,2'
          Dst:             sshbuf_free
        - Src:             'ssh-ecdsa.c:286,2'
          Dst:             ECDSA_SIG_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ECDSA_do_sign
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.ECDSA_SIG_st *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'int '
        - 'struct.ec_key_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ECDSA_SIG_get0
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.ECDSA_SIG_st *'
        - 'struct.bignum_st **'
        - 'struct.bignum_st **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_copy_public
      functionSourceFile: '/src/openssh/ssh-ecdsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 146
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          60
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - EC_KEY_get0_public_key
        - EC_KEY_new_by_curve_name
        - EC_KEY_set_public_key
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa.c:148,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:149,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:150,28'
              BranchSideFuncs:
                - EC_KEY_get0_public_key
                - EC_KEY_set_public_key
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa.c:150,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:152,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:153,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ecdsa.c:148,19'
          Dst:             EC_KEY_new_by_curve_name
        - Src:             'ssh-ecdsa.c:151,6'
          Dst:             EC_KEY_get0_public_key
        - Src:             'ssh-ecdsa.c:150,6'
          Dst:             EC_KEY_set_public_key
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_KEY_new_by_curve_name
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.ec_key_st *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_KEY_set_public_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ec_key_st *'
        - 'struct.ec_point_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_generate
      functionSourceFile: '/src/openssh/ssh-ecdsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 128
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         10
      ICount:          69
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - EC_KEY_free
        - EC_KEY_generate_key
        - EC_KEY_new_by_curve_name
        - EC_KEY_set_asn1_flag
        - sshkey_ecdsa_bits_to_nid
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa.c:131,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:132,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:133,42'
              BranchSideFuncs:
                - EC_KEY_new_by_curve_name
                - EC_KEY_generate_key
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_set_asn1_flag
                - EC_KEY_free
        - Branch String:   'ssh-ecdsa.c:133,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:134,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:135,26'
              BranchSideFuncs:
                - EC_KEY_generate_key
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_set_asn1_flag
                - EC_KEY_free
        - Branch String:   'ssh-ecdsa.c:135,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:136,15'
              BranchSideFuncs:
                - EC_KEY_free
            - BranchSide:      'ssh-ecdsa.c:139,23'
              BranchSideFuncs:
                - EC_KEY_set_asn1_flag
      Callsites:
        - Src:             'ssh-ecdsa.c:131,22'
          Dst:             sshkey_ecdsa_bits_to_nid
        - Src:             'ssh-ecdsa.c:133,17'
          Dst:             EC_KEY_new_by_curve_name
        - Src:             'ssh-ecdsa.c:135,6'
          Dst:             EC_KEY_generate_key
        - Src:             'ssh-ecdsa.c:136,3'
          Dst:             EC_KEY_free
        - Src:             'ssh-ecdsa.c:139,2'
          Dst:             EC_KEY_set_asn1_flag
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_KEY_generate_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ec_key_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_KEY_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ec_key_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    8
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_KEY_set_asn1_flag
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ec_key_st *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_deserialize_private
      functionSourceFile: '/src/openssh/ssh-ecdsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 202
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         16
      ICount:          100
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - BN_clear_free
        - EC_KEY_set_private_key
        - ssh_ecdsa_deserialize_public
        - sshbuf_get_bignum2
        - sshkey_ec_validate_private
        - sshkey_is_cert
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa.c:206,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:207,41'
              BranchSideFuncs:
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_set_private_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
            - BranchSide:      'ssh-ecdsa.c:210,30'
              BranchSideFuncs:
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_set_private_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
        - Branch String:   'ssh-ecdsa.c:207,7'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:208,11'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:209,2'
              BranchSideFuncs:
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_set_private_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
        - Branch String:   'ssh-ecdsa.c:210,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:211,3'
              BranchSideFuncs:
                - BN_clear_free
            - BranchSide:      'ssh-ecdsa.c:212,29'
              BranchSideFuncs:
                - EC_KEY_set_private_key
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
        - Branch String:   'ssh-ecdsa.c:212,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:213,5'
              BranchSideFuncs:
                - BN_clear_free
            - BranchSide:      'ssh-ecdsa.c:216,38'
              BranchSideFuncs:
                - sshkey_ec_validate_private
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
        - Branch String:   'ssh-ecdsa.c:216,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:217,3'
              BranchSideFuncs:
                - BN_clear_free
            - BranchSide:      'ssh-ecdsa.c:219,4'
              BranchSideFuncs:
                - BN_clear_free
      Callsites:
        - Src:             'ssh-ecdsa.c:206,7'
          Dst:             sshkey_is_cert
        - Src:             'ssh-ecdsa.c:207,12'
          Dst:             ssh_ecdsa_deserialize_public
        - Src:             'ssh-ecdsa.c:210,11'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-ecdsa.c:212,6'
          Dst:             EC_KEY_set_private_key
        - Src:             'ssh-ecdsa.c:216,11'
          Dst:             sshkey_ec_validate_private
        - Src:             'ssh-ecdsa.c:221,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_deserialize_public
      functionSourceFile: '/src/openssh/ssh-ecdsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 159
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         20
      ICount:          144
      EdgeCount:       27
      CyclomaticComplexity: 9
      functionsReached:
        - EC_KEY_free
        - EC_KEY_get0_group
        - EC_KEY_get0_public_key
        - EC_KEY_new_by_curve_name
        - sshbuf_get_cstring
        - sshbuf_get_eckey
        - sshkey_curve_name_to_nid
        - sshkey_ec_validate_public
        - sshkey_ecdsa_nid_from_name
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh-ecdsa.c:163,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:164,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:165,30'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_curve_name_to_nid
                - __sanitizer_cov_trace_cmp4
                - EC_KEY_free
                - EC_KEY_new_by_curve_name
                - sshbuf_get_eckey
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
        - Branch String:   'ssh-ecdsa.c:165,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:166,3'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
            - BranchSide:      'ssh-ecdsa.c:167,6'
              BranchSideFuncs:
                - sshkey_curve_name_to_nid
                - __sanitizer_cov_trace_cmp4
                - EC_KEY_free
                - EC_KEY_new_by_curve_name
                - sshbuf_get_eckey
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
        - Branch String:   'ssh-ecdsa.c:167,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:168,5'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
            - BranchSide:      'ssh-ecdsa.c:171,14'
              BranchSideFuncs:
                - EC_KEY_free
                - EC_KEY_new_by_curve_name
                - sshbuf_get_eckey
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
        - Branch String:   'ssh-ecdsa.c:173,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:174,5'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
            - BranchSide:      'ssh-ecdsa.c:177,28'
              BranchSideFuncs:
                - sshbuf_get_eckey
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
        - Branch String:   'ssh-ecdsa.c:177,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:178,3'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
            - BranchSide:      'ssh-ecdsa.c:179,50'
              BranchSideFuncs:
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
        - Branch String:   'ssh-ecdsa.c:179,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:181,5'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
            - BranchSide:      'ssh-ecdsa.c:185,4'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
        - Branch String:   'ssh-ecdsa.c:192,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:193,15'
              BranchSideFuncs:
                - EC_KEY_free
            - BranchSide:      'ssh-ecdsa.c:196,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ecdsa.c:163,24'
          Dst:             sshkey_ecdsa_nid_from_name
        - Src:             'ssh-ecdsa.c:165,11'
          Dst:             sshbuf_get_cstring
        - Src:             'ssh-ecdsa.c:167,24'
          Dst:             sshkey_curve_name_to_nid
        - Src:             'ssh-ecdsa.c:171,2'
          Dst:             EC_KEY_free
        - Src:             'ssh-ecdsa.c:173,20'
          Dst:             EC_KEY_new_by_curve_name
        - Src:             'ssh-ecdsa.c:177,11'
          Dst:             sshbuf_get_eckey
        - Src:             'ssh-ecdsa.c:179,32'
          Dst:             EC_KEY_get0_group
        - Src:             'ssh-ecdsa.c:180,6'
          Dst:             EC_KEY_get0_public_key
        - Src:             'ssh-ecdsa.c:179,6'
          Dst:             sshkey_ec_validate_public
        - Src:             'ssh-ecdsa.c:193,3'
          Dst:             EC_KEY_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_KEY_set_private_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ec_key_st *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_serialize_private
      functionSourceFile: '/src/openssh/ssh-ecdsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 113
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          72
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - EC_KEY_get0_private_key
        - ssh_ecdsa_serialize_public
        - sshbuf_put_bignum2
        - sshkey_is_cert
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa.c:116,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:117,39'
              BranchSideFuncs:
                - EC_KEY_get0_private_key
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-ecdsa.c:120,30'
              BranchSideFuncs:
                - EC_KEY_get0_private_key
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa.c:117,7'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:118,11'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:119,2'
              BranchSideFuncs:
                - EC_KEY_get0_private_key
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa.c:120,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:122,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:123,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ecdsa.c:116,7'
          Dst:             sshkey_is_cert
        - Src:             'ssh-ecdsa.c:117,12'
          Dst:             ssh_ecdsa_serialize_public
        - Src:             'ssh-ecdsa.c:121,6'
          Dst:             EC_KEY_get0_private_key
        - Src:             'ssh-ecdsa.c:120,11'
          Dst:             sshbuf_put_bignum2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_serialize_public
      functionSourceFile: '/src/openssh/ssh-ecdsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 97
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          69
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - sshbuf_put_cstring
        - sshbuf_put_eckey
        - sshkey_curve_nid_to_name
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh-ecdsa.c:100,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:101,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:102,30'
              BranchSideFuncs:
                - sshkey_curve_nid_to_name
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_eckey
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa.c:103,54'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:104,28'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:105,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa.c:102,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:105,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:107,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ecdsa.c:103,6'
          Dst:             sshkey_curve_nid_to_name
        - Src:             'ssh-ecdsa.c:102,11'
          Dst:             sshbuf_put_cstring
        - Src:             'ssh-ecdsa.c:104,11'
          Dst:             sshbuf_put_eckey
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_equal
      functionSourceFile: '/src/openssh/ssh-ecdsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 74
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         23
      ICount:          123
      EdgeCount:       31
      CyclomaticComplexity: 10
      functionsReached:
        - EC_GROUP_cmp
        - EC_KEY_get0_group
        - EC_KEY_get0_public_key
        - EC_POINT_cmp
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa.c:78,23'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:78,26'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:79,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa.c:78,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:79,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:80,33'
              BranchSideFuncs:
                - EC_KEY_get0_group
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - EC_KEY_get0_public_key
                - EC_GROUP_cmp
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa.c:80,52'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:81,33'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:82,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa.c:80,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:82,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:83,38'
              BranchSideFuncs:
                - EC_KEY_get0_public_key
                - EC_KEY_get0_public_key
                - EC_GROUP_cmp
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa.c:83,57'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:84,38'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:85,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa.c:83,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:85,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:86,19'
              BranchSideFuncs:
                - EC_GROUP_cmp
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa.c:86,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:87,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:88,19'
              BranchSideFuncs:
                - EC_POINT_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa.c:88,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:89,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:91,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ecdsa.c:80,15'
          Dst:             EC_KEY_get0_group
        - Src:             'ssh-ecdsa.c:81,15'
          Dst:             EC_KEY_get0_group
        - Src:             'ssh-ecdsa.c:83,15'
          Dst:             EC_KEY_get0_public_key
        - Src:             'ssh-ecdsa.c:84,15'
          Dst:             EC_KEY_get0_public_key
        - Src:             'ssh-ecdsa.c:86,6'
          Dst:             EC_GROUP_cmp
        - Src:             'ssh-ecdsa.c:88,6'
          Dst:             EC_POINT_cmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_POINT_cmp
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.ec_group_st *'
        - 'struct.ec_point_st *'
        - 'struct.ec_point_st *'
        - 'struct.bignum_ctx *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_cleanup
      functionSourceFile: '/src/openssh/ssh-ecdsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 67
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          21
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - EC_KEY_free
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh-ecdsa.c:68,2'
          Dst:             EC_KEY_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_size
      functionSourceFile: '/src/openssh/ssh-ecdsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 50
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          35
      EdgeCount:       10
      CyclomaticComplexity: 6
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa.c:51,2'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa.c:53,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:55,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:58,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa.c:61,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    webauthn_check_prepare_hash
      functionSourceFile: '/src/openssh/ssh-ecdsa-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 174
      functionDepth:   0
      returnType:      'int '
      argCount:        8
      argTypes:
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'struct.sshbuf *'
        - 'char '
        - 'struct.sshbuf *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         31
      ICount:          194
      EdgeCount:       43
      CyclomaticComplexity: 14
      functionsReached:
        - ssh_digest_buffer
        - sshbuf_cmp
        - sshbuf_dtourlb64
        - sshbuf_free
        - sshbuf_from
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put
        - strchr
        - strlen
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh-ecdsa-sk.c:178,33'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:179,27'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'ssh-ecdsa-sk.c:180,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'ssh-ecdsa-sk.c:178,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:180,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'ssh-ecdsa-sk.c:187,13'
              BranchSideFuncs:
                - strchr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtourlb64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_cmp
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'ssh-ecdsa-sk.c:187,35'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:188,7'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'ssh-ecdsa-sk.c:190,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'ssh-ecdsa-sk.c:188,35'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:189,8'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'ssh-ecdsa-sk.c:190,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'ssh-ecdsa-sk.c:187,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:190,5'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'ssh-ecdsa-sk.c:203,22'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dtourlb64
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_cmp
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'ssh-ecdsa-sk.c:203,67'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:204,28'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'ssh-ecdsa-sk.c:208,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'ssh-ecdsa-sk.c:204,47'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:205,22'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'ssh-ecdsa-sk.c:208,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'ssh-ecdsa-sk.c:205,67'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:206,22'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'ssh-ecdsa-sk.c:208,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'ssh-ecdsa-sk.c:206,55'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:207,22'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'ssh-ecdsa-sk.c:208,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'ssh-ecdsa-sk.c:203,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:208,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'ssh-ecdsa-sk.c:217,22'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - sshbuf_cmp
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'ssh-ecdsa-sk.c:217,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:218,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'ssh-ecdsa-sk.c:221,48'
              BranchSideFuncs:
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'ssh-ecdsa-sk.c:221,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:223,3'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'ssh-ecdsa-sk.c:226,4'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
      Callsites:
        - Src:             'ssh-ecdsa-sk.c:178,11'
          Dst:             sshbuf_new
        - Src:             'ssh-ecdsa-sk.c:179,15'
          Dst:             sshbuf_from
        - Src:             'ssh-ecdsa-sk.c:187,6'
          Dst:             strchr
        - Src:             'ssh-ecdsa-sk.c:189,41'
          Dst:             sshbuf_len
        - Src:             'ssh-ecdsa-sk.c:203,11'
          Dst:             sshbuf_put
        - Src:             'ssh-ecdsa-sk.c:204,11'
          Dst:             sshbuf_dtourlb64
        - Src:             'ssh-ecdsa-sk.c:205,11'
          Dst:             sshbuf_put
        - Src:             'ssh-ecdsa-sk.c:206,33'
          Dst:             strlen
        - Src:             'ssh-ecdsa-sk.c:206,11'
          Dst:             sshbuf_put
        - Src:             'ssh-ecdsa-sk.c:207,11'
          Dst:             sshbuf_put
        - Src:             'ssh-ecdsa-sk.c:217,34'
          Dst:             sshbuf_ptr
        - Src:             'ssh-ecdsa-sk.c:217,49'
          Dst:             sshbuf_len
        - Src:             'ssh-ecdsa-sk.c:217,11'
          Dst:             sshbuf_cmp
        - Src:             'ssh-ecdsa-sk.c:221,11'
          Dst:             ssh_digest_buffer
        - Src:             'ssh-ecdsa-sk.c:228,2'
          Dst:             sshbuf_free
        - Src:             'ssh-ecdsa-sk.c:229,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_sk_verify
      functionSourceFile: '/src/openssh/ssh-ecdsa-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 238
      functionDepth:   0
      returnType:      'int '
      argCount:        8
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'int '
        - 'struct.sshkey_sig_details **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         93
      ICount:          555
      EdgeCount:       129
      CyclomaticComplexity: 38
      functionsReached:
        - BN_clear_free
        - ECDSA_SIG_free
        - ECDSA_SIG_new
        - ECDSA_SIG_set0
        - ECDSA_do_verify
        - calloc
        - explicit_bzero
        - ssh_digest_buffer
        - ssh_digest_memory
        - sshbuf_free
        - sshbuf_from
        - sshbuf_froms
        - sshbuf_get_bignum2
        - sshbuf_get_cstring
        - sshbuf_get_u32
        - sshbuf_get_u8
        - sshbuf_len
        - sshbuf_new
        - sshbuf_put
        - sshbuf_put_u32
        - sshbuf_put_u8
        - sshbuf_putb
        - sshkey_sig_details_free
        - sshkey_type_plain
        - strcmp
        - strlen
        - webauthn_check_prepare_hash
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa-sk.c:253,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:254,4'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_from
                - calloc
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-ecdsa-sk.c:255,6'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_from
                - calloc
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:255,18'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:255,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:258,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa-sk.c:255,40'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:256,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:258,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa-sk.c:256,51'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:257,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:258,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa-sk.c:257,18'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:257,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:258,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ecdsa-sk.c:255,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:258,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:260,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_from
                - calloc
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:260,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:261,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:264,23'
              BranchSideFuncs:
                - sshbuf_from
                - calloc
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:264,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:265,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:266,17'
              BranchSideFuncs:
                - calloc
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:266,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:267,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:270,25'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:270,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:271,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:274,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:274,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:275,15'
              BranchSideFuncs:
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-ecdsa-sk.c:276,18'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:276,11'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:0,0'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:277,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:280,36'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:281,20'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:283,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:281,40'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:282,21'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:283,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:280,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:283,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:286,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:286,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:287,26'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-ecdsa-sk.c:294,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:287,58'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:288,20'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:290,8'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:288,47'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:289,20'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:290,8'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:287,7'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:290,8'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:293,2'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:294,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:295,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:300,25'
              BranchSideFuncs:
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:300,46'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:301,25'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:302,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:300,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:302,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:305,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:305,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:306,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:326,14'
              BranchSideFuncs:
                - ECDSA_SIG_new
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:326,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:327,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:330,22'
              BranchSideFuncs:
                - ECDSA_SIG_set0
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:330,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:331,7'
              BranchSideFuncs:
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-ecdsa-sk.c:334,16'
              BranchSideFuncs:
                - sshbuf_new
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:337,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:338,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:341,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:341,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:342,42'
              BranchSideFuncs:
                - webauthn_check_prepare_hash
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:346,57'
              BranchSideFuncs:
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:342,7'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:345,4'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:346,2'
              BranchSideFuncs:
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:346,13'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:0,0'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:348,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:350,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:352,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:359,24'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:360,38'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:361,27'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:365,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:361,61'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:362,28'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:365,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:362,64'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:363,25'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:365,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:363,63'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:364,24'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:365,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:359,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:365,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:367,50'
              BranchSideFuncs:
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:367,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:369,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:370,24'
              BranchSideFuncs:
                - ECDSA_do_verify
                - __sanitizer_cov_trace_switch
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:380,2'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:382,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:385,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:388,7'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
        - Branch String:   'ssh-ecdsa-sk.c:392,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:392,18'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
            - BranchSide:      'ssh-ecdsa-sk.c:393,15'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - ECDSA_SIG_free
                - BN_clear_free
                - BN_clear_free
                - free
      Callsites:
        - Src:             'ssh-ecdsa-sk.c:256,6'
          Dst:             sshkey_type_plain
        - Src:             'ssh-ecdsa-sk.c:264,11'
          Dst:             sshbuf_from
        - Src:             'ssh-ecdsa-sk.c:266,17'
          Dst:             calloc
        - Src:             'ssh-ecdsa-sk.c:270,6'
          Dst:             sshbuf_get_cstring
        - Src:             'ssh-ecdsa-sk.c:274,6'
          Dst:             strcmp
        - Src:             'ssh-ecdsa-sk.c:276,11'
          Dst:             strcmp
        - Src:             'ssh-ecdsa-sk.c:280,6'
          Dst:             sshbuf_froms
        - Src:             'ssh-ecdsa-sk.c:281,6'
          Dst:             sshbuf_get_u8
        - Src:             'ssh-ecdsa-sk.c:282,6'
          Dst:             sshbuf_get_u32
        - Src:             'ssh-ecdsa-sk.c:287,7'
          Dst:             sshbuf_get_cstring
        - Src:             'ssh-ecdsa-sk.c:288,7'
          Dst:             sshbuf_froms
        - Src:             'ssh-ecdsa-sk.c:289,7'
          Dst:             sshbuf_froms
        - Src:             'ssh-ecdsa-sk.c:294,6'
          Dst:             sshbuf_len
        - Src:             'ssh-ecdsa-sk.c:300,6'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-ecdsa-sk.c:301,6'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-ecdsa-sk.c:305,6'
          Dst:             sshbuf_len
        - Src:             'ssh-ecdsa-sk.c:326,14'
          Dst:             ECDSA_SIG_new
        - Src:             'ssh-ecdsa-sk.c:330,7'
          Dst:             ECDSA_SIG_set0
        - Src:             'ssh-ecdsa-sk.c:337,25'
          Dst:             sshbuf_new
        - Src:             'ssh-ecdsa-sk.c:342,14'
          Dst:             webauthn_check_prepare_hash
        - Src:             'ssh-ecdsa-sk.c:346,20'
          Dst:             ssh_digest_memory
        - Src:             'ssh-ecdsa-sk.c:351,6'
          Dst:             strlen
        - Src:             'ssh-ecdsa-sk.c:350,13'
          Dst:             ssh_digest_memory
        - Src:             'ssh-ecdsa-sk.c:359,13'
          Dst:             sshbuf_put
        - Src:             'ssh-ecdsa-sk.c:361,13'
          Dst:             sshbuf_put_u8
        - Src:             'ssh-ecdsa-sk.c:362,13'
          Dst:             sshbuf_put_u32
        - Src:             'ssh-ecdsa-sk.c:363,13'
          Dst:             sshbuf_putb
        - Src:             'ssh-ecdsa-sk.c:364,13'
          Dst:             sshbuf_put
        - Src:             'ssh-ecdsa-sk.c:367,13'
          Dst:             ssh_digest_buffer
        - Src:             'ssh-ecdsa-sk.c:380,10'
          Dst:             ECDSA_do_verify
        - Src:             'ssh-ecdsa-sk.c:397,2'
          Dst:             explicit_bzero
        - Src:             'ssh-ecdsa-sk.c:398,2'
          Dst:             explicit_bzero
        - Src:             'ssh-ecdsa-sk.c:399,2'
          Dst:             explicit_bzero
        - Src:             'ssh-ecdsa-sk.c:400,2'
          Dst:             explicit_bzero
        - Src:             'ssh-ecdsa-sk.c:401,2'
          Dst:             explicit_bzero
        - Src:             'ssh-ecdsa-sk.c:402,2'
          Dst:             sshkey_sig_details_free
        - Src:             'ssh-ecdsa-sk.c:403,2'
          Dst:             sshbuf_free
        - Src:             'ssh-ecdsa-sk.c:404,2'
          Dst:             sshbuf_free
        - Src:             'ssh-ecdsa-sk.c:406,2'
          Dst:             sshbuf_free
        - Src:             'ssh-ecdsa-sk.c:407,2'
          Dst:             sshbuf_free
        - Src:             'ssh-ecdsa-sk.c:408,2'
          Dst:             sshbuf_free
        - Src:             'ssh-ecdsa-sk.c:409,2'
          Dst:             ECDSA_SIG_free
        - Src:             'ssh-ecdsa-sk.c:410,2'
          Dst:             BN_clear_free
        - Src:             'ssh-ecdsa-sk.c:411,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_sk_copy_public
      functionSourceFile: '/src/openssh/ssh-ecdsa-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 117
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          55
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_copy_public_sk
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa-sk.c:120,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:121,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:122,33'
              BranchSideFuncs:
                - sshkey_copy_public_sk
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:122,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:123,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:124,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ecdsa-sk.c:122,11'
          Dst:             sshkey_copy_public_sk
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_sk_deserialize_private
      functionSourceFile: '/src/openssh/ssh-ecdsa-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 143
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          72
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - sshkey_is_cert
        - sshkey_private_deserialize_sk
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa-sk.c:146,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:147,31'
              BranchSideFuncs:
                - sshkey_private_deserialize_sk
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-ecdsa-sk.c:151,41'
              BranchSideFuncs:
                - sshkey_private_deserialize_sk
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:147,7'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:149,11'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:150,2'
              BranchSideFuncs:
                - sshkey_private_deserialize_sk
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:151,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:152,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:154,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ecdsa-sk.c:146,7'
          Dst:             sshkey_is_cert
        - Src:             'ssh-ecdsa-sk.c:151,11'
          Dst:             sshkey_private_deserialize_sk
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_sk_serialize_private
      functionSourceFile: '/src/openssh/ssh-ecdsa-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 101
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          72
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - sshkey_is_cert
        - sshkey_serialize_private_sk
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa-sk.c:104,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:105,31'
              BranchSideFuncs:
                - sshkey_serialize_private_sk
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-ecdsa-sk.c:109,39'
              BranchSideFuncs:
                - sshkey_serialize_private_sk
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:105,7'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:107,11'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:108,2'
              BranchSideFuncs:
                - sshkey_serialize_private_sk
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:109,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:110,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:112,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ecdsa-sk.c:104,7'
          Dst:             sshkey_is_cert
        - Src:             'ssh-ecdsa-sk.c:109,11'
          Dst:             sshkey_serialize_private_sk
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_sk_deserialize_public
      functionSourceFile: '/src/openssh/ssh-ecdsa-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 130
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          59
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_deserialize_sk
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa-sk.c:133,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:134,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:135,33'
              BranchSideFuncs:
                - sshkey_deserialize_sk
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:135,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:136,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:137,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ecdsa-sk.c:135,11'
          Dst:             sshkey_deserialize_sk
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_sk_serialize_public
      functionSourceFile: '/src/openssh/ssh-ecdsa-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 87
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          59
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_serialize_sk
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa-sk.c:90,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:91,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:92,31'
              BranchSideFuncs:
                - sshkey_serialize_sk
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:92,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:93,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:95,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ecdsa-sk.c:92,11'
          Dst:             sshkey_serialize_sk
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_sk_equal
      functionSourceFile: '/src/openssh/ssh-ecdsa-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 76
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          49
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_sk_fields_equal
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ecdsa-sk.c:77,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:78,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-ecdsa-sk.c:79,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ecdsa-sk.c:79,6'
          Branch Sides:
            - BranchSide:      'ssh-ecdsa-sk.c:80,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ecdsa-sk.c:81,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ecdsa-sk.c:77,7'
          Dst:             sshkey_sk_fields_equal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ecdsa_sk_cleanup
      functionSourceFile: '/src/openssh/ssh-ecdsa-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 69
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          21
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshkey_sk_cleanup
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh-ecdsa-sk.c:70,2'
          Dst:             sshkey_sk_cleanup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_sk_verify
      functionSourceFile: '/src/openssh/ssh-ed25519-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 129
      functionDepth:   0
      returnType:      'int '
      argCount:        8
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'int '
        - 'struct.sshkey_sig_details **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         72
      ICount:          426
      EdgeCount:       101
      CyclomaticComplexity: 31
      functionsReached:
        - calloc
        - crypto_sign_ed25519_open
        - freezero
        - ssh_digest_memory
        - sshbuf_free
        - sshbuf_from
        - sshbuf_get_cstring
        - sshbuf_get_string_direct
        - sshbuf_get_u32
        - sshbuf_get_u8
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put
        - sshbuf_put_u32
        - sshbuf_put_u8
        - sshkey_sig_details_free
        - sshkey_ssh_name_plain
        - sshkey_type_plain
        - sshlog
        - strcmp
        - strlen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519-sk.c:146,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:147,4'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - calloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - malloc
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
                - sshlog
            - BranchSide:      'ssh-ed25519-sk.c:149,6'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - calloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - malloc
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519-sk.c:149,18'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:150,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:153,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519-sk.c:150,53'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:151,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:153,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519-sk.c:151,30'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:152,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:153,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519-sk.c:152,18'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:152,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:153,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519-sk.c:149,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:153,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:155,23'
              BranchSideFuncs:
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - calloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - malloc
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519-sk.c:155,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:156,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:157,25'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ssh_name_plain
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - calloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - malloc
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519-sk.c:157,47'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:158,31'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:161,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-ed25519-sk.c:158,55'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:159,20'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:161,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-ed25519-sk.c:159,40'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:160,21'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:161,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-ed25519-sk.c:157,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:161,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:172,35'
              BranchSideFuncs:
                - sshkey_ssh_name_plain
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - calloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - malloc
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519-sk.c:172,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:173,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:176,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - calloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - malloc
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519-sk.c:176,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:177,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:180,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - calloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - malloc
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519-sk.c:180,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:181,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:184,43'
              BranchSideFuncs:
                - strlen
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - calloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - malloc
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519-sk.c:185,66'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:186,43'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:188,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-ed25519-sk.c:184,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:188,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:197,17'
              BranchSideFuncs:
                - calloc
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - malloc
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519-sk.c:197,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:198,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:201,24'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - malloc
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519-sk.c:203,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:204,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:207,17'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_ptr
                - sshbuf_len
                - malloc
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519-sk.c:207,45'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:208,17'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:212,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-ed25519-sk.c:208,57'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:209,20'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:212,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-ed25519-sk.c:209,45'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:210,21'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:212,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-ed25519-sk.c:210,48'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:211,17'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:212,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-ed25519-sk.c:207,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:212,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:219,18'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_len
                - malloc
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519-sk.c:222,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:223,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:226,38'
              BranchSideFuncs:
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519-sk.c:226,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:228,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:230,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-ed25519-sk.c:230,15'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:230,18'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:231,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-ed25519-sk.c:230,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:231,5'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:236,4'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-ed25519-sk.c:237,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:237,18'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519-sk.c:238,15'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-ed25519-sk.c:242,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:243,12'
              BranchSideFuncs:
                - freezero
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'ssh-ed25519-sk.c:244,26'
              BranchSideFuncs:
                - sshkey_sig_details_free
                - sshbuf_free
                - sshbuf_free
                - free
      Callsites:
        - Src:             'ssh-ed25519-sk.c:150,6'
          Dst:             sshkey_type_plain
        - Src:             'ssh-ed25519-sk.c:155,11'
          Dst:             sshbuf_from
        - Src:             'ssh-ed25519-sk.c:157,6'
          Dst:             sshbuf_get_cstring
        - Src:             'ssh-ed25519-sk.c:158,6'
          Dst:             sshbuf_get_string_direct
        - Src:             'ssh-ed25519-sk.c:159,6'
          Dst:             sshbuf_get_u8
        - Src:             'ssh-ed25519-sk.c:160,6'
          Dst:             sshbuf_get_u32
        - Src:             'ssh-ed25519-sk.c:172,13'
          Dst:             sshkey_ssh_name_plain
        - Src:             'ssh-ed25519-sk.c:172,6'
          Dst:             strcmp
        - Src:             'ssh-ed25519-sk.c:176,6'
          Dst:             sshbuf_len
        - Src:             'ssh-ed25519-sk.c:185,6'
          Dst:             strlen
        - Src:             'ssh-ed25519-sk.c:184,6'
          Dst:             ssh_digest_memory
        - Src:             'ssh-ed25519-sk.c:186,6'
          Dst:             ssh_digest_memory
        - Src:             'ssh-ed25519-sk.c:197,17'
          Dst:             calloc
        - Src:             'ssh-ed25519-sk.c:203,17'
          Dst:             sshbuf_new
        - Src:             'ssh-ed25519-sk.c:207,6'
          Dst:             sshbuf_put
        - Src:             'ssh-ed25519-sk.c:208,6'
          Dst:             sshbuf_put
        - Src:             'ssh-ed25519-sk.c:209,6'
          Dst:             sshbuf_put_u8
        - Src:             'ssh-ed25519-sk.c:210,6'
          Dst:             sshbuf_put_u32
        - Src:             'ssh-ed25519-sk.c:211,6'
          Dst:             sshbuf_put
        - Src:             'ssh-ed25519-sk.c:219,7'
          Dst:             sshbuf_ptr
        - Src:             'ssh-ed25519-sk.c:220,10'
          Dst:             sshbuf_len
        - Src:             'ssh-ed25519-sk.c:226,13'
          Dst:             crypto_sign_ed25519_open
        - Src:             'ssh-ed25519-sk.c:228,3'
          Dst:             sshlog
        - Src:             'ssh-ed25519-sk.c:243,3'
          Dst:             freezero
        - Src:             'ssh-ed25519-sk.c:244,2'
          Dst:             sshkey_sig_details_free
        - Src:             'ssh-ed25519-sk.c:245,2'
          Dst:             sshbuf_free
        - Src:             'ssh-ed25519-sk.c:246,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_sk_copy_public
      functionSourceFile: '/src/openssh/ssh-ed25519-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 88
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          55
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_copy_public_sk
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519-sk.c:91,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:92,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:93,33'
              BranchSideFuncs:
                - sshkey_copy_public_sk
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ed25519-sk.c:93,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:94,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:95,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ed25519-sk.c:93,11'
          Dst:             sshkey_copy_public_sk
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_sk_deserialize_private
      functionSourceFile: '/src/openssh/ssh-ed25519-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 114
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          59
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_private_deserialize_sk
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519-sk.c:117,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:118,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:119,41'
              BranchSideFuncs:
                - sshkey_private_deserialize_sk
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ed25519-sk.c:119,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:120,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:121,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ed25519-sk.c:119,11'
          Dst:             sshkey_private_deserialize_sk
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_sk_serialize_private
      functionSourceFile: '/src/openssh/ssh-ed25519-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 75
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          59
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_serialize_private_sk
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519-sk.c:78,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:79,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:80,39'
              BranchSideFuncs:
                - sshkey_serialize_private_sk
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ed25519-sk.c:80,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:81,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:83,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ed25519-sk.c:80,11'
          Dst:             sshkey_serialize_private_sk
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_sk_deserialize_public
      functionSourceFile: '/src/openssh/ssh-ed25519-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 101
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          59
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_deserialize_sk
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519-sk.c:104,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:105,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:106,33'
              BranchSideFuncs:
                - sshkey_deserialize_sk
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ed25519-sk.c:106,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:107,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:108,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ed25519-sk.c:106,11'
          Dst:             sshkey_deserialize_sk
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_sk_serialize_public
      functionSourceFile: '/src/openssh/ssh-ed25519-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 61
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          59
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_serialize_sk
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519-sk.c:64,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:65,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:66,31'
              BranchSideFuncs:
                - sshkey_serialize_sk
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ed25519-sk.c:66,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:67,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:69,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ed25519-sk.c:66,11'
          Dst:             sshkey_serialize_sk
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_sk_equal
      functionSourceFile: '/src/openssh/ssh-ed25519-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 50
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          49
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshkey_sk_fields_equal
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519-sk.c:51,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:52,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-ed25519-sk.c:53,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ed25519-sk.c:53,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519-sk.c:54,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519-sk.c:55,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ed25519-sk.c:51,7'
          Dst:             sshkey_sk_fields_equal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_sk_cleanup
      functionSourceFile: '/src/openssh/ssh-ed25519-sk.c'
      linkageType:     InternalLinkage
      functionLinenumber: 43
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          21
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshkey_sk_cleanup
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh-ed25519-sk.c:44,2'
          Dst:             sshkey_sk_cleanup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    rsa_hash_alg_oid
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 612
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          50
      EdgeCount:       12
      CyclomaticComplexity: 7
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:613,2'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:615,4'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:619,4'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:623,4'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:627,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    openssh_RSA_verify
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 635
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'int '
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
        - 'struct.rsa_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         32
      ICount:          214
      EdgeCount:       44
      CyclomaticComplexity: 14
      functionsReached:
        - RSA_public_decrypt
        - RSA_size
        - freezero
        - rsa_hash_alg_oid
        - ssh_digest_bytes
        - timingsafe_bcmp
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:641,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:642,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:643,6'
              BranchSideFuncs:
                - ssh_digest_bytes
                - __sanitizer_cov_trace_cmp8
                - RSA_size
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - RSA_public_decrypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:645,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:646,7'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-rsa.c:649,21'
              BranchSideFuncs:
                - RSA_size
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - RSA_public_decrypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:650,19'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:650,22'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-rsa.c:652,7'
              BranchSideFuncs:
                - freezero
        - Branch String:   'ssh-rsa.c:650,50'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:651,6'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-rsa.c:652,7'
              BranchSideFuncs:
                - freezero
        - Branch String:   'ssh-rsa.c:651,18'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:651,21'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-rsa.c:652,7'
              BranchSideFuncs:
                - freezero
        - Branch String:   'ssh-rsa.c:650,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:652,7'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-rsa.c:655,26'
              BranchSideFuncs:
                - malloc
                - RSA_public_decrypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:655,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:656,7'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-rsa.c:659,32'
              BranchSideFuncs:
                - RSA_public_decrypt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:659,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:661,7'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-rsa.c:664,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:664,14'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:664,25'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-rsa.c:665,7'
              BranchSideFuncs:
                - freezero
        - Branch String:   'ssh-rsa.c:664,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:665,7'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-rsa.c:668,29'
              BranchSideFuncs:
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - freezero
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:670,16'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:670,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - freezero
            - BranchSide:      'ssh-rsa.c:671,7'
              BranchSideFuncs:
                - freezero
        - Branch String:   'ssh-rsa.c:670,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:671,7'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-rsa.c:674,6'
              BranchSideFuncs:
                - freezero
      Callsites:
        - Src:             'ssh-rsa.c:641,13'
          Dst:             rsa_hash_alg_oid
        - Src:             'ssh-rsa.c:644,9'
          Dst:             ssh_digest_bytes
        - Src:             'ssh-rsa.c:649,12'
          Dst:             RSA_size
        - Src:             'ssh-rsa.c:659,13'
          Dst:             RSA_public_decrypt
        - Src:             'ssh-rsa.c:668,13'
          Dst:             timingsafe_bcmp
        - Src:             'ssh-rsa.c:669,14'
          Dst:             timingsafe_bcmp
        - Src:             'ssh-rsa.c:676,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RSA_size
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.rsa_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RSA_public_decrypt
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'int '
        - 'char *'
        - 'char *'
        - 'struct.rsa_st *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    rsa_hash_id_from_ident
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 289
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          51
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - strcmp
      functionUses:    2
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:290,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:291,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:292,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:292,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:293,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:294,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:294,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:295,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:296,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-rsa.c:290,6'
          Dst:             strcmp
        - Src:             'ssh-rsa.c:292,6'
          Dst:             strcmp
        - Src:             'ssh-rsa.c:294,6'
          Dst:             strcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    rsa_hash_alg_ident
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 271
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          33
      EdgeCount:       10
      CyclomaticComplexity: 6
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:272,2'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:274,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:276,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:278,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:280,2'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    rsa_hash_alg_nid
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 322
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          33
      EdgeCount:       10
      CyclomaticComplexity: 6
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:323,2'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:325,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:327,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:329,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:331,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    rsa_hash_id_from_keyname
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 306
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         12
      ICount:          65
      EdgeCount:       16
      CyclomaticComplexity: 6
      functionsReached:
        - rsa_hash_id_from_ident
        - strcmp
      functionUses:    2
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:309,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:310,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:311,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:311,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:312,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:313,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:313,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:314,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:315,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:315,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:316,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:317,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-rsa.c:309,11'
          Dst:             rsa_hash_id_from_ident
        - Src:             'ssh-rsa.c:311,6'
          Dst:             strcmp
        - Src:             'ssh-rsa.c:313,6'
          Dst:             strcmp
        - Src:             'ssh-rsa.c:315,6'
          Dst:             strcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_rsa_verify
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 478
      functionDepth:   0
      returnType:      'int '
      argCount:        8
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'int '
        - 'struct.sshkey_sig_details **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         49
      ICount:          330
      EdgeCount:       69
      CyclomaticComplexity: 22
      functionsReached:
        - BN_num_bits
        - RSA_get0_key
        - RSA_size
        - explicit_bzero
        - freezero
        - openssh_RSA_verify
        - realloc
        - rsa_hash_id_from_ident
        - rsa_hash_id_from_keyname
        - ssh_digest_bytes
        - ssh_digest_memory
        - sshbuf_free
        - sshbuf_from
        - sshbuf_get_cstring
        - sshbuf_get_string
        - sshbuf_len
        - sshkey_type_plain
        - strcmp
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:486,18'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:486,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:489,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:486,38'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:487,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:489,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:487,46'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:488,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:489,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:488,18'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:488,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:489,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:486,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:489,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:490,15'
              BranchSideFuncs:
                - RSA_get0_key
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - rsa_hash_id_from_ident
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - RSA_size
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - rsa_hash_id_from_keyname
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'ssh-rsa.c:491,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:492,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:494,23'
              BranchSideFuncs:
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - rsa_hash_id_from_ident
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - RSA_size
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - rsa_hash_id_from_keyname
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'ssh-rsa.c:494,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:495,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:496,25'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - rsa_hash_id_from_ident
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - RSA_size
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - rsa_hash_id_from_keyname
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'ssh-rsa.c:496,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:497,7'
              BranchSideFuncs:
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:500,41'
              BranchSideFuncs:
                - rsa_hash_id_from_ident
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - RSA_size
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - rsa_hash_id_from_keyname
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'ssh-rsa.c:500,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:501,7'
              BranchSideFuncs:
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:508,6'
              BranchSideFuncs:
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - RSA_size
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - rsa_hash_id_from_keyname
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'ssh-rsa.c:508,18'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:508,28'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - RSA_size
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
                - rsa_hash_id_from_keyname
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'ssh-rsa.c:518,24'
              BranchSideFuncs:
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - RSA_size
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:508,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:509,44'
              BranchSideFuncs:
                - rsa_hash_id_from_keyname
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - RSA_size
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:518,24'
              BranchSideFuncs:
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - RSA_size
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:509,7'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:510,8'
              BranchSideFuncs:
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:513,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - RSA_size
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:513,7'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:514,8'
              BranchSideFuncs:
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:517,2'
              BranchSideFuncs:
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - RSA_size
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:518,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:519,7'
              BranchSideFuncs:
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:522,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - RSA_size
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:522,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:523,7'
              BranchSideFuncs:
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:527,20'
              BranchSideFuncs:
                - RSA_size
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:528,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:529,7'
              BranchSideFuncs:
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:531,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
                - realloc
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:534,7'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:535,14'
              BranchSideFuncs:
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:539,11'
              BranchSideFuncs:
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:543,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:544,7'
              BranchSideFuncs:
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:547,31'
              BranchSideFuncs:
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:547,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:549,3'
              BranchSideFuncs:
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:551,27'
              BranchSideFuncs:
                - openssh_RSA_verify
                - freezero
                - free
                - sshbuf_free
                - explicit_bzero
      Callsites:
        - Src:             'ssh-rsa.c:487,6'
          Dst:             sshkey_type_plain
        - Src:             'ssh-rsa.c:490,2'
          Dst:             RSA_get0_key
        - Src:             'ssh-rsa.c:491,6'
          Dst:             BN_num_bits
        - Src:             'ssh-rsa.c:494,11'
          Dst:             sshbuf_from
        - Src:             'ssh-rsa.c:496,6'
          Dst:             sshbuf_get_cstring
        - Src:             'ssh-rsa.c:500,18'
          Dst:             rsa_hash_id_from_ident
        - Src:             'ssh-rsa.c:508,21'
          Dst:             strcmp
        - Src:             'ssh-rsa.c:509,19'
          Dst:             rsa_hash_id_from_keyname
        - Src:             'ssh-rsa.c:518,6'
          Dst:             sshbuf_get_string
        - Src:             'ssh-rsa.c:522,6'
          Dst:             sshbuf_len
        - Src:             'ssh-rsa.c:527,11'
          Dst:             RSA_size
        - Src:             'ssh-rsa.c:534,18'
          Dst:             realloc
        - Src:             'ssh-rsa.c:540,3'
          Dst:             explicit_bzero
        - Src:             'ssh-rsa.c:543,14'
          Dst:             ssh_digest_bytes
        - Src:             'ssh-rsa.c:547,13'
          Dst:             ssh_digest_memory
        - Src:             'ssh-rsa.c:551,8'
          Dst:             openssh_RSA_verify
        - Src:             'ssh-rsa.c:554,2'
          Dst:             freezero
        - Src:             'ssh-rsa.c:556,2'
          Dst:             sshbuf_free
        - Src:             'ssh-rsa.c:557,2'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_rsa_sign
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 395
      functionDepth:   0
      returnType:      'int '
      argCount:        9
      argTypes:
        - 'struct.sshkey *'
        - 'char **'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         61
      ICount:          382
      EdgeCount:       84
      CyclomaticComplexity: 25
      functionsReached:
        - BN_num_bits
        - RSA_get0_key
        - RSA_sign
        - RSA_size
        - explicit_bzero
        - freezero
        - rsa_hash_alg_ident
        - rsa_hash_alg_nid
        - rsa_hash_id_from_keyname
        - ssh_digest_bytes
        - ssh_digest_memory
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put_cstring
        - sshbuf_put_string
        - sshkey_type_plain
        - strlen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:403,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:404,4'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_id_from_keyname
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - RSA_get0_key
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - RSA_size
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_alg_nid
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:405,6'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_id_from_keyname
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - RSA_get0_key
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - RSA_size
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_alg_nid
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:405,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:406,4'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_id_from_keyname
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - RSA_get0_key
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - RSA_size
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_alg_nid
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:408,6'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_id_from_keyname
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - RSA_get0_key
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - RSA_size
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_alg_nid
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:408,18'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:408,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - RSA_get0_key
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - RSA_size
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_alg_nid
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:409,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - RSA_get0_key
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - RSA_size
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_alg_nid
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:408,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:409,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - RSA_get0_key
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - RSA_size
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_alg_nid
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
            - BranchSide:      'ssh-rsa.c:411,39'
              BranchSideFuncs:
                - rsa_hash_id_from_keyname
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - RSA_get0_key
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - RSA_size
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_alg_nid
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:412,18'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:412,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:414,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:412,38'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:412,41'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:414,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:412,56'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:413,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:414,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:412,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:414,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:415,15'
              BranchSideFuncs:
                - RSA_get0_key
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - RSA_size
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_alg_nid
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:416,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:417,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:418,18'
              BranchSideFuncs:
                - RSA_size
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - rsa_hash_alg_nid
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:419,16'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:419,19'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:420,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:419,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:420,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:423,25'
              BranchSideFuncs:
                - rsa_hash_alg_nid
                - ssh_digest_bytes
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:424,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:425,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:426,31'
              BranchSideFuncs:
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - malloc
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:426,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:428,3'
              BranchSideFuncs:
                - explicit_bzero
                - freezero
                - sshbuf_free
            - BranchSide:      'ssh-rsa.c:430,20'
              BranchSideFuncs:
                - malloc
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:430,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:431,7'
              BranchSideFuncs:
                - explicit_bzero
                - freezero
                - sshbuf_free
            - BranchSide:      'ssh-rsa.c:435,15'
              BranchSideFuncs:
                - RSA_sign
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:435,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:436,7'
              BranchSideFuncs:
                - explicit_bzero
                - freezero
                - sshbuf_free
            - BranchSide:      'ssh-rsa.c:439,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
        - Branch String:   'ssh-rsa.c:439,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:440,10'
              BranchSideFuncs:
                - llvm.memmove.p0i8.p0i8.i64
                - explicit_bzero
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'ssh-rsa.c:443,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-rsa.c:443,13'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:0,0'
              BranchSideFuncs:
                - explicit_bzero
                - freezero
                - sshbuf_free
            - BranchSide:      'ssh-rsa.c:444,7'
              BranchSideFuncs:
                - explicit_bzero
                - freezero
                - sshbuf_free
        - Branch String:   'ssh-rsa.c:448,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:449,7'
              BranchSideFuncs:
                - explicit_bzero
                - freezero
                - sshbuf_free
            - BranchSide:      'ssh-rsa.c:452,32'
              BranchSideFuncs:
                - rsa_hash_alg_ident
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-rsa.c:452,71'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:453,31'
              BranchSideFuncs:
                - explicit_bzero
                - freezero
                - sshbuf_free
            - BranchSide:      'ssh-rsa.c:454,3'
              BranchSideFuncs:
                - explicit_bzero
                - freezero
                - sshbuf_free
        - Branch String:   'ssh-rsa.c:452,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:454,3'
              BranchSideFuncs:
                - explicit_bzero
                - freezero
                - sshbuf_free
            - BranchSide:      'ssh-rsa.c:455,19'
              BranchSideFuncs:
                - sshbuf_len
                - explicit_bzero
                - freezero
                - sshbuf_free
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-rsa.c:456,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:457,23'
              BranchSideFuncs:
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - freezero
                - sshbuf_free
            - BranchSide:      'ssh-rsa.c:463,6'
              BranchSideFuncs:
                - explicit_bzero
                - freezero
                - sshbuf_free
        - Branch String:   'ssh-rsa.c:457,7'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:458,8'
              BranchSideFuncs:
                - explicit_bzero
                - freezero
                - sshbuf_free
            - BranchSide:      'ssh-rsa.c:461,11'
              BranchSideFuncs:
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - freezero
                - sshbuf_free
        - Branch String:   'ssh-rsa.c:463,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:464,11'
              BranchSideFuncs:
                - explicit_bzero
                - freezero
                - sshbuf_free
            - BranchSide:      'ssh-rsa.c:465,6'
              BranchSideFuncs:
                - explicit_bzero
                - freezero
                - sshbuf_free
      Callsites:
        - Src:             'ssh-rsa.c:408,21'
          Dst:             strlen
        - Src:             'ssh-rsa.c:411,14'
          Dst:             rsa_hash_id_from_keyname
        - Src:             'ssh-rsa.c:413,6'
          Dst:             sshkey_type_plain
        - Src:             'ssh-rsa.c:415,2'
          Dst:             RSA_get0_key
        - Src:             'ssh-rsa.c:416,6'
          Dst:             BN_num_bits
        - Src:             'ssh-rsa.c:418,9'
          Dst:             RSA_size
        - Src:             'ssh-rsa.c:423,8'
          Dst:             rsa_hash_alg_nid
        - Src:             'ssh-rsa.c:424,14'
          Dst:             ssh_digest_bytes
        - Src:             'ssh-rsa.c:426,13'
          Dst:             ssh_digest_memory
        - Src:             'ssh-rsa.c:435,6'
          Dst:             RSA_sign
        - Src:             'ssh-rsa.c:442,3'
          Dst:             explicit_bzero
        - Src:             'ssh-rsa.c:448,11'
          Dst:             sshbuf_new
        - Src:             'ssh-rsa.c:452,35'
          Dst:             rsa_hash_alg_ident
        - Src:             'ssh-rsa.c:452,13'
          Dst:             sshbuf_put_cstring
        - Src:             'ssh-rsa.c:453,13'
          Dst:             sshbuf_put_string
        - Src:             'ssh-rsa.c:455,8'
          Dst:             sshbuf_len
        - Src:             'ssh-rsa.c:461,17'
          Dst:             sshbuf_ptr
        - Src:             'ssh-rsa.c:467,2'
          Dst:             explicit_bzero
        - Src:             'ssh-rsa.c:468,2'
          Dst:             freezero
        - Src:             'ssh-rsa.c:469,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RSA_sign
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'int '
        - 'char *'
        - 'int '
        - 'char *'
        - 'int *'
        - 'struct.rsa_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_rsa_copy_public
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 161
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          81
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - BN_clear_free
        - BN_dup
        - RSA_get0_key
        - RSA_set0_key
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:167,42'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:168,26'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:169,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-rsa.c:167,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:169,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:172,20'
              BranchSideFuncs:
                - RSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-rsa.c:172,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:173,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:176,24'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
      Callsites:
        - Src:             'ssh-rsa.c:166,2'
          Dst:             RSA_get0_key
        - Src:             'ssh-rsa.c:167,19'
          Dst:             BN_dup
        - Src:             'ssh-rsa.c:168,19'
          Dst:             BN_dup
        - Src:             'ssh-rsa.c:172,7'
          Dst:             RSA_set0_key
        - Src:             'ssh-rsa.c:180,2'
          Dst:             BN_clear_free
        - Src:             'ssh-rsa.c:181,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RSA_set0_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.rsa_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_rsa_generate
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 133
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         20
      ICount:          104
      EdgeCount:       26
      CyclomaticComplexity: 8
      functionsReached:
        - BN_free
        - BN_set_word
        - RSA_free
        - RSA_generate_key_ex
        - RSA_new
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:138,42'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:139,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:140,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:138,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:140,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:141,17'
              BranchSideFuncs:
                - RSA_new
                - BN_new
                - BN_set_word
                - __sanitizer_cov_trace_const_cmp4
                - RSA_free
                - BN_free
                - RSA_generate_key_ex
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:141,36'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:141,45'
              BranchSideFuncs:
                - RSA_free
                - BN_free
            - BranchSide:      'ssh-rsa.c:142,7'
              BranchSideFuncs:
                - RSA_free
                - BN_free
        - Branch String:   'ssh-rsa.c:141,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:142,7'
              BranchSideFuncs:
                - RSA_free
                - BN_free
            - BranchSide:      'ssh-rsa.c:145,19'
              BranchSideFuncs:
                - BN_set_word
                - __sanitizer_cov_trace_const_cmp4
                - RSA_free
                - BN_free
                - RSA_generate_key_ex
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:145,31'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:146,27'
              BranchSideFuncs:
                - RSA_generate_key_ex
                - __sanitizer_cov_trace_const_cmp4
                - RSA_free
                - BN_free
            - BranchSide:      'ssh-rsa.c:147,7'
              BranchSideFuncs:
                - RSA_free
                - BN_free
        - Branch String:   'ssh-rsa.c:145,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:147,7'
              BranchSideFuncs:
                - RSA_free
                - BN_free
            - BranchSide:      'ssh-rsa.c:150,11'
              BranchSideFuncs:
                - RSA_free
                - BN_free
      Callsites:
        - Src:             'ssh-rsa.c:141,17'
          Dst:             RSA_new
        - Src:             'ssh-rsa.c:141,45'
          Dst:             BN_new
        - Src:             'ssh-rsa.c:145,7'
          Dst:             BN_set_word
        - Src:             'ssh-rsa.c:146,7'
          Dst:             RSA_generate_key_ex
        - Src:             'ssh-rsa.c:154,2'
          Dst:             RSA_free
        - Src:             'ssh-rsa.c:155,2'
          Dst:             BN_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RSA_new
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.rsa_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_set_word
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.bignum_st *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RSA_generate_key_ex
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.rsa_st *'
        - 'int '
        - 'struct.bignum_st *'
        - 'struct.bn_gencb_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RSA_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.rsa_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_rsa_deserialize_private
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 218
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         33
      ICount:          213
      EdgeCount:       46
      CyclomaticComplexity: 15
      functionsReached:
        - BN_clear_free
        - RSA_blinding_on
        - RSA_set0_factors
        - RSA_set0_key
        - ssh_rsa_complete_crt_parameters
        - sshbuf_get_bignum2
        - sshkey_check_rsa_length
        - sshkey_is_cert
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:224,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:225,31'
              BranchSideFuncs:
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - RSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - RSA_set0_factors
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - ssh_rsa_complete_crt_parameters
                - __sanitizer_cov_trace_const_cmp4
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-rsa.c:234,30'
              BranchSideFuncs:
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - RSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - RSA_set0_factors
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - ssh_rsa_complete_crt_parameters
                - __sanitizer_cov_trace_const_cmp4
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:225,48'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:226,31'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:227,4'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-rsa.c:225,7'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:227,4'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:228,21'
              BranchSideFuncs:
                - RSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - RSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - RSA_set0_factors
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - ssh_rsa_complete_crt_parameters
                - __sanitizer_cov_trace_const_cmp4
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:228,7'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:229,6'
              BranchSideFuncs:
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - RSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - RSA_set0_factors
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - ssh_rsa_complete_crt_parameters
                - __sanitizer_cov_trace_const_cmp4
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-rsa.c:232,17'
              BranchSideFuncs:
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - RSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - RSA_set0_factors
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - ssh_rsa_complete_crt_parameters
                - __sanitizer_cov_trace_const_cmp4
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:234,47'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:235,30'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:238,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-rsa.c:235,50'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:236,30'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:238,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-rsa.c:236,47'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:237,30'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:238,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-rsa.c:234,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:238,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:239,20'
              BranchSideFuncs:
                - RSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - RSA_set0_factors
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - ssh_rsa_complete_crt_parameters
                - __sanitizer_cov_trace_const_cmp4
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:239,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:240,5'
              BranchSideFuncs:
                - RSA_set0_factors
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - ssh_rsa_complete_crt_parameters
                - __sanitizer_cov_trace_const_cmp4
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-rsa.c:243,8'
              BranchSideFuncs:
                - RSA_set0_factors
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - ssh_rsa_complete_crt_parameters
                - __sanitizer_cov_trace_const_cmp4
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:244,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:245,5'
              BranchSideFuncs:
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - ssh_rsa_complete_crt_parameters
                - __sanitizer_cov_trace_const_cmp4
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:248,16'
              BranchSideFuncs:
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - ssh_rsa_complete_crt_parameters
                - __sanitizer_cov_trace_const_cmp4
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-rsa.c:249,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:250,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:251,43'
              BranchSideFuncs:
                - ssh_rsa_complete_crt_parameters
                - __sanitizer_cov_trace_const_cmp4
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-rsa.c:251,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:252,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:253,22'
              BranchSideFuncs:
                - RSA_blinding_on
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-rsa.c:253,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:254,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:258,4'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
      Callsites:
        - Src:             'ssh-rsa.c:224,7'
          Dst:             sshkey_is_cert
        - Src:             'ssh-rsa.c:225,12'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-rsa.c:226,12'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-rsa.c:228,8'
          Dst:             RSA_set0_key
        - Src:             'ssh-rsa.c:234,11'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-rsa.c:235,11'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-rsa.c:236,11'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-rsa.c:237,11'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-rsa.c:239,7'
          Dst:             RSA_set0_key
        - Src:             'ssh-rsa.c:244,7'
          Dst:             RSA_set0_factors
        - Src:             'ssh-rsa.c:249,11'
          Dst:             sshkey_check_rsa_length
        - Src:             'ssh-rsa.c:251,11'
          Dst:             ssh_rsa_complete_crt_parameters
        - Src:             'ssh-rsa.c:253,6'
          Dst:             RSA_blinding_on
        - Src:             'ssh-rsa.c:260,2'
          Dst:             BN_clear_free
        - Src:             'ssh-rsa.c:261,2'
          Dst:             BN_clear_free
        - Src:             'ssh-rsa.c:262,2'
          Dst:             BN_clear_free
        - Src:             'ssh-rsa.c:263,2'
          Dst:             BN_clear_free
        - Src:             'ssh-rsa.c:264,2'
          Dst:             BN_clear_free
        - Src:             'ssh-rsa.c:265,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RSA_set0_factors
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.rsa_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_rsa_complete_crt_parameters
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 337
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         37
      ICount:          228
      EdgeCount:       51
      CyclomaticComplexity: 16
      functionsReached:
        - BN_CTX_free
        - BN_CTX_new
        - BN_clear_free
        - BN_div
        - BN_dup
        - BN_new
        - BN_set_flags
        - BN_value_one
        - RSA_get0_factors
        - RSA_get0_key
        - RSA_set0_crt_params
        - sshkey_type_plain
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:344,18'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:344,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:346,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:344,38'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:345,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:346,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:344,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:346,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:348,15'
              BranchSideFuncs:
                - RSA_get0_key
                - RSA_get0_factors
                - BN_CTX_new
                - BN_new
                - BN_new
                - BN_new
                - BN_dup
                - BN_dup
                - BN_set_flags
                - BN_set_flags
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_div
                - __sanitizer_cov_trace_const_cmp4
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_div
                - __sanitizer_cov_trace_const_cmp4
                - RSA_set0_crt_params
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
        - Branch String:   'ssh-rsa.c:351,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:352,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:353,13'
              BranchSideFuncs:
                - BN_new
                - BN_new
                - BN_new
                - BN_dup
                - BN_dup
                - BN_set_flags
                - BN_set_flags
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_div
                - __sanitizer_cov_trace_const_cmp4
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_div
                - __sanitizer_cov_trace_const_cmp4
                - RSA_set0_crt_params
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
        - Branch String:   'ssh-rsa.c:353,31'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:354,18'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:356,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:354,36'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:355,18'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:356,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:353,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:356,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:357,28'
              BranchSideFuncs:
                - BN_dup
                - BN_dup
                - BN_set_flags
                - BN_set_flags
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_div
                - __sanitizer_cov_trace_const_cmp4
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_div
                - __sanitizer_cov_trace_const_cmp4
                - RSA_set0_crt_params
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
        - Branch String:   'ssh-rsa.c:357,44'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:358,25'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
            - BranchSide:      'ssh-rsa.c:359,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
        - Branch String:   'ssh-rsa.c:357,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:359,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
            - BranchSide:      'ssh-rsa.c:362,15'
              BranchSideFuncs:
                - BN_set_flags
                - BN_set_flags
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_div
                - __sanitizer_cov_trace_const_cmp4
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_div
                - __sanitizer_cov_trace_const_cmp4
                - RSA_set0_crt_params
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
        - Branch String:   'ssh-rsa.c:365,48'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:366,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
            - BranchSide:      'ssh-rsa.c:369,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
        - Branch String:   'ssh-rsa.c:366,53'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:367,14'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
            - BranchSide:      'ssh-rsa.c:369,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
        - Branch String:   'ssh-rsa.c:367,48'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:368,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
            - BranchSide:      'ssh-rsa.c:369,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
        - Branch String:   'ssh-rsa.c:365,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:369,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
            - BranchSide:      'ssh-rsa.c:372,27'
              BranchSideFuncs:
                - RSA_set0_crt_params
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
        - Branch String:   'ssh-rsa.c:372,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:373,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
            - BranchSide:      'ssh-rsa.c:376,33'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_clear_free
                - BN_CTX_free
      Callsites:
        - Src:             'ssh-rsa.c:345,6'
          Dst:             sshkey_type_plain
        - Src:             'ssh-rsa.c:348,2'
          Dst:             RSA_get0_key
        - Src:             'ssh-rsa.c:349,2'
          Dst:             RSA_get0_factors
        - Src:             'ssh-rsa.c:351,13'
          Dst:             BN_CTX_new
        - Src:             'ssh-rsa.c:353,13'
          Dst:             BN_new
        - Src:             'ssh-rsa.c:354,18'
          Dst:             BN_new
        - Src:             'ssh-rsa.c:355,18'
          Dst:             BN_new
        - Src:             'ssh-rsa.c:357,21'
          Dst:             BN_dup
        - Src:             'ssh-rsa.c:358,18'
          Dst:             BN_dup
        - Src:             'ssh-rsa.c:362,2'
          Dst:             BN_set_flags
        - Src:             'ssh-rsa.c:363,2'
          Dst:             BN_set_flags
        - Src:             'ssh-rsa.c:365,26'
          Dst:             BN_value_one
        - Src:             'ssh-rsa.c:365,7'
          Dst:             BN_sub
        - Src:             'ssh-rsa.c:366,7'
          Dst:             BN_div
        - Src:             'ssh-rsa.c:367,26'
          Dst:             BN_value_one
        - Src:             'ssh-rsa.c:367,7'
          Dst:             BN_sub
        - Src:             'ssh-rsa.c:368,7'
          Dst:             BN_div
        - Src:             'ssh-rsa.c:372,7'
          Dst:             RSA_set0_crt_params
        - Src:             'ssh-rsa.c:380,2'
          Dst:             BN_clear_free
        - Src:             'ssh-rsa.c:381,2'
          Dst:             BN_clear_free
        - Src:             'ssh-rsa.c:382,2'
          Dst:             BN_clear_free
        - Src:             'ssh-rsa.c:383,2'
          Dst:             BN_clear_free
        - Src:             'ssh-rsa.c:384,2'
          Dst:             BN_clear_free
        - Src:             'ssh-rsa.c:385,2'
          Dst:             BN_CTX_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RSA_get0_factors
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.rsa_st *'
        - 'struct.bignum_st **'
        - 'struct.bignum_st **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_CTX_new
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.bignum_ctx *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_set_flags
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.bignum_st *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_div
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_ctx *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RSA_set0_crt_params
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.rsa_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_CTX_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.bignum_ctx *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_rsa_serialize_private
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 108
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         21
      ICount:          138
      EdgeCount:       28
      CyclomaticComplexity: 9
      functionsReached:
        - RSA_get0_crt_params
        - RSA_get0_factors
        - RSA_get0_key
        - sshbuf_put_bignum2
        - sshkey_is_cert
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:116,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:118,31'
              BranchSideFuncs:
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ssh-rsa.c:122,30'
              BranchSideFuncs:
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:118,47'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:119,31'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:120,11'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:118,7'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:120,11'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:121,2'
              BranchSideFuncs:
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:122,46'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:123,30'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:126,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:123,49'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:124,30'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:126,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:124,46'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:125,30'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:126,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:122,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:126,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:128,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-rsa.c:112,2'
          Dst:             RSA_get0_key
        - Src:             'ssh-rsa.c:113,2'
          Dst:             RSA_get0_factors
        - Src:             'ssh-rsa.c:114,2'
          Dst:             RSA_get0_crt_params
        - Src:             'ssh-rsa.c:116,7'
          Dst:             sshkey_is_cert
        - Src:             'ssh-rsa.c:118,12'
          Dst:             sshbuf_put_bignum2
        - Src:             'ssh-rsa.c:119,12'
          Dst:             sshbuf_put_bignum2
        - Src:             'ssh-rsa.c:122,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'ssh-rsa.c:123,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'ssh-rsa.c:124,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'ssh-rsa.c:125,11'
          Dst:             sshbuf_put_bignum2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RSA_get0_crt_params
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'struct.rsa_st *'
        - 'struct.bignum_st **'
        - 'struct.bignum_st **'
        - 'struct.bignum_st **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_rsa_deserialize_public
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 188
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         13
      ICount:          86
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - BN_clear_free
        - RSA_set0_key
        - sshbuf_get_bignum2
        - sshkey_check_rsa_length
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:192,41'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:193,25'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:194,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-rsa.c:192,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:194,7'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:197,20'
              BranchSideFuncs:
                - RSA_set0_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:197,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:198,7'
              BranchSideFuncs:
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:201,16'
              BranchSideFuncs:
                - sshkey_check_rsa_length
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'ssh-rsa.c:202,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:203,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'ssh-rsa.c:208,6'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
      Callsites:
        - Src:             'ssh-rsa.c:192,6'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-rsa.c:193,6'
          Dst:             sshbuf_get_bignum2
        - Src:             'ssh-rsa.c:197,7'
          Dst:             RSA_set0_key
        - Src:             'ssh-rsa.c:202,13'
          Dst:             sshkey_check_rsa_length
        - Src:             'ssh-rsa.c:210,2'
          Dst:             BN_clear_free
        - Src:             'ssh-rsa.c:211,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_rsa_serialize_public
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 91
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          72
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - RSA_get0_key
        - sshbuf_put_bignum2
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:95,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:96,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:97,15'
              BranchSideFuncs:
                - RSA_get0_key
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:98,46'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:99,30'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:100,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:98,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:100,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:102,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-rsa.c:97,2'
          Dst:             RSA_get0_key
        - Src:             'ssh-rsa.c:98,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'ssh-rsa.c:99,11'
          Dst:             sshbuf_put_bignum2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_rsa_equal
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 69
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         23
      ICount:          114
      EdgeCount:       31
      CyclomaticComplexity: 10
      functionsReached:
        - BN_cmp
        - RSA_get0_key
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:73,21'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:73,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:74,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:73,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:74,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:75,15'
              BranchSideFuncs:
                - RSA_get0_key
                - RSA_get0_key
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:77,22'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:77,25'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:78,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:77,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:78,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:79,6'
              BranchSideFuncs:
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:79,22'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:79,25'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:80,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-rsa.c:79,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:80,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:81,13'
              BranchSideFuncs:
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:81,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:82,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:83,13'
              BranchSideFuncs:
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-rsa.c:83,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:84,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:85,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-rsa.c:75,2'
          Dst:             RSA_get0_key
        - Src:             'ssh-rsa.c:76,2'
          Dst:             RSA_get0_key
        - Src:             'ssh-rsa.c:81,6'
          Dst:             BN_cmp
        - Src:             'ssh-rsa.c:83,6'
          Dst:             BN_cmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_rsa_cleanup
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 62
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          21
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - RSA_free
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh-rsa.c:63,2'
          Dst:             RSA_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_rsa_alloc
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 54
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          32
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - RSA_new
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:55,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:56,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:57,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-rsa.c:55,16'
          Dst:             RSA_new
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_rsa_size
      functionSourceFile: '/src/openssh/ssh-rsa.c'
      linkageType:     InternalLinkage
      functionLinenumber: 43
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          39
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - BN_num_bits
        - RSA_get0_key
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-rsa.c:46,6'
          Branch Sides:
            - BranchSide:      'ssh-rsa.c:47,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-rsa.c:48,15'
              BranchSideFuncs:
                - RSA_get0_key
                - BN_num_bits
      Callsites:
        - Src:             'ssh-rsa.c:48,2'
          Dst:             RSA_get0_key
        - Src:             'ssh-rsa.c:49,9'
          Dst:             BN_num_bits
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    seed_rng
      functionSourceFile: '/src/openssh/entropy.c'
      linkageType:     InternalLinkage
      functionLinenumber: 63
      functionDepth:   0
      returnType:      'N/A'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         7
      ICount:          41
      EdgeCount:       7
      CyclomaticComplexity: 2
      functionsReached:
        - OpenSSL_version_num
        - RAND_status
        - arc4random_buf
        - explicit_bzero
        - ssh_compatible_openssl
        - ssh_libcrypto_init
        - sshfatal
      functionUses:    1
      BranchProfiles:
        - Branch String:   'entropy.c:64,16'
          Branch Sides:
            - BranchSide:      'entropy.c:67,2'
              BranchSideFuncs:
                - ssh_libcrypto_init
                - OpenSSL_version_num
                - ssh_compatible_openssl
                - __sanitizer_cov_trace_const_cmp4
                - OpenSSL_version_num
                - sshfatal
                - RAND_status
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - explicit_bzero
                - sshfatal
            - BranchSide:      'entropy.c:67,2'
              BranchSideFuncs:
                - ssh_libcrypto_init
                - OpenSSL_version_num
                - ssh_compatible_openssl
                - __sanitizer_cov_trace_const_cmp4
                - OpenSSL_version_num
                - sshfatal
                - RAND_status
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - explicit_bzero
                - sshfatal
        - Branch String:   'entropy.c:69,6'
          Branch Sides:
            - BranchSide:      'entropy.c:71,3'
              BranchSideFuncs:
                - RAND_status
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - explicit_bzero
                - sshfatal
            - BranchSide:      'entropy.c:85,6'
              BranchSideFuncs:
                - RAND_status
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - explicit_bzero
                - sshfatal
        - Branch String:   'entropy.c:85,6'
          Branch Sides:
            - BranchSide:      'entropy.c:86,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'entropy.c:89,17'
              BranchSideFuncs:
                - arc4random_buf
                - explicit_bzero
      Callsites:
        - Src:             'entropy.c:67,2'
          Dst:             ssh_libcrypto_init
        - Src:             'entropy.c:70,6'
          Dst:             OpenSSL_version_num
        - Src:             'entropy.c:69,7'
          Dst:             ssh_compatible_openssl
        - Src:             'entropy.c:71,3'
          Dst:             OpenSSL_version_num
        - Src:             'entropy.c:71,3'
          Dst:             sshfatal
        - Src:             'entropy.c:85,6'
          Dst:             RAND_status
        - Src:             'entropy.c:86,3'
          Dst:             sshfatal
        - Src:             'entropy.c:89,2'
          Dst:             arc4random_buf
        - Src:             'entropy.c:90,2'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    OpenSSL_version_num
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RAND_status
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 714
      functionDepth:   0
      returnType:      'N/A'
      argCount:        5
      argTypes:
        - 'struct.nh_ctx *'
        - 'char *'
        - 'int '
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          50
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - nh_aux
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'umac.c:731,5'
          Dst:             nh_aux
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh_aux
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 371
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          313
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - get_u32_le
      functionUses:    2
      BranchProfiles:
        - Branch String:   'umac.c:407,3'
          Branch Sides:
            - BranchSide:      'umac.c:384,10'
              BranchSideFuncs:
                - get_u32_le
                - get_u32_le
                - get_u32_le
                - get_u32_le
                - get_u32_le
                - get_u32_le
                - get_u32_le
                - get_u32_le
            - BranchSide:      'umac.c:408,23'
              BranchSideFuncs: []
      Callsites:
        - Src:             'umac.c:384,10'
          Dst:             get_u32_le
        - Src:             'umac.c:384,40'
          Dst:             get_u32_le
        - Src:             'umac.c:385,10'
          Dst:             get_u32_le
        - Src:             'umac.c:385,40'
          Dst:             get_u32_le
        - Src:             'umac.c:386,10'
          Dst:             get_u32_le
        - Src:             'umac.c:386,40'
          Dst:             get_u32_le
        - Src:             'umac.c:387,10'
          Dst:             get_u32_le
        - Src:             'umac.c:387,40'
          Dst:             get_u32_le
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh_update
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 616
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.nh_ctx *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          134
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - nh_transform
      functionUses:    3
      BranchProfiles:
        - Branch String:   'umac.c:620,9'
          Branch Sides:
            - BranchSide:      'umac.c:620,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform
            - BranchSide:      'umac.c:621,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform
        - Branch String:   'umac.c:621,13'
          Branch Sides:
            - BranchSide:      'umac.c:622,34'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform
            - BranchSide:      'umac.c:629,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform
        - Branch String:   'umac.c:629,13'
          Branch Sides:
            - BranchSide:      'umac.c:630,17'
              BranchSideFuncs:
                - nh_transform
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'umac.c:636,11'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:
        - Src:             'umac.c:624,13'
          Dst:             nh_transform
        - Src:             'umac.c:631,13'
          Dst:             nh_transform
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh_transform
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 544
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.nh_ctx *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          39
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - nh_aux
      functionUses:    4
      BranchProfiles:  []
      Callsites:
        - Src:             'umac.c:548,5'
          Dst:             nh_aux
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ip_reduce_p36
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 872
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         4
      ICount:          33
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:
        - Branch String:   'umac.c:877,9'
          Branch Sides:
            - BranchSide:      'umac.c:877,9'
              BranchSideFuncs: []
            - BranchSide:      'umac.c:878,13'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ip_aux
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 862
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'size_t '
        - 'size_t *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          57
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    poly64
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 799
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'size_t '
        - 'size_t '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          125
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    3
      BranchProfiles:
        - Branch String:   'umac.c:816,9'
          Branch Sides:
            - BranchSide:      'umac.c:817,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'umac.c:819,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'umac.c:820,9'
          Branch Sides:
            - BranchSide:      'umac.c:820,9'
              BranchSideFuncs: []
            - BranchSide:      'umac.c:821,13'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    zero_pad
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 645
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         13
      ICount:          78
      EdgeCount:       16
      CyclomaticComplexity: 5
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'umac.c:647,9'
          Branch Sides:
            - BranchSide:      'umac.c:648,9'
              BranchSideFuncs: []
            - BranchSide:      'umac.c:659,5'
              BranchSideFuncs: []
        - Branch String:   'umac.c:648,9'
          Branch Sides:
            - BranchSide:      'umac.c:649,14'
              BranchSideFuncs: []
            - BranchSide:      'umac.c:653,9'
              BranchSideFuncs: []
        - Branch String:   'umac.c:653,9'
          Branch Sides:
            - BranchSide:      'umac.c:654,23'
              BranchSideFuncs: []
            - BranchSide:      'umac.c:658,5'
              BranchSideFuncs: []
        - Branch String:   'umac.c:659,5'
          Branch Sides:
            - BranchSide:      'umac.c:660,10'
              BranchSideFuncs: []
            - BranchSide:      'umac.c:664,1'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    uhash_reset
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 936
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.uhash_ctx *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - nh_reset
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'umac.c:937,5'
          Dst:             nh_reset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh_reset
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 585
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.nh_ctx *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          21
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ip_short
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 890
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.uhash_ctx *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          68
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ip_aux
        - ip_reduce_p36
        - put_u32
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'umac.c:894,10'
          Dst:             ip_aux
        - Src:             'umac.c:895,5'
          Dst:             ip_reduce_p36
        - Src:             'umac.c:895,5'
          Dst:             put_u32
        - Src:             'umac.c:897,10'
          Dst:             ip_aux
        - Src:             'umac.c:898,5'
          Dst:             ip_reduce_p36
        - Src:             'umac.c:898,5'
          Dst:             put_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ip_long
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 915
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.uhash_ctx *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         10
      ICount:          94
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - ip_aux
        - ip_reduce_p36
        - put_u32
      functionUses:    1
      BranchProfiles:
        - Branch String:   'umac.c:919,5'
          Branch Sides:
            - BranchSide:      'umac.c:921,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - ip_aux
                - ip_reduce_p36
                - put_u32
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'umac.c:927,1'
              BranchSideFuncs: []
        - Branch String:   'umac.c:921,13'
          Branch Sides:
            - BranchSide:      'umac.c:922,13'
              BranchSideFuncs:
                - ip_aux
                - ip_reduce_p36
                - put_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'umac.c:923,23'
              BranchSideFuncs:
                - ip_aux
                - ip_reduce_p36
                - put_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
      Callsites:
        - Src:             'umac.c:923,14'
          Dst:             ip_aux
        - Src:             'umac.c:924,9'
          Dst:             ip_reduce_p36
        - Src:             'umac.c:924,9'
          Dst:             put_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    poly_hash
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 834
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.uhash_ctx *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         10
      ICount:          128
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - poly64
      functionUses:    3
      BranchProfiles:
        - Branch String:   'umac.c:838,5'
          Branch Sides:
            - BranchSide:      'umac.c:839,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - poly64
                - __sanitizer_cov_trace_const_cmp4
                - poly64
                - poly64
            - BranchSide:      'umac.c:849,1'
              BranchSideFuncs: []
        - Branch String:   'umac.c:839,13'
          Branch Sides:
            - BranchSide:      'umac.c:840,40'
              BranchSideFuncs:
                - poly64
                - poly64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - poly64
            - BranchSide:      'umac.c:845,40'
              BranchSideFuncs:
                - poly64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - poly64
                - poly64
      Callsites:
        - Src:             'umac.c:840,33'
          Dst:             poly64
        - Src:             'umac.c:842,33'
          Dst:             poly64
        - Src:             'umac.c:845,33'
          Dst:             poly64
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh_final
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 676
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.nh_ctx *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          122
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - nh_reset
        - nh_transform
        - zero_pad
      functionUses:    3
      BranchProfiles:
        - Branch String:   'umac.c:679,9'
          Branch Sides:
            - BranchSide:      'umac.c:680,20'
              BranchSideFuncs:
                - zero_pad
                - nh_transform
                - nh_reset
            - BranchSide:      'umac.c:686,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - nh_reset
                - zero_pad
                - nh_transform
      Callsites:
        - Src:             'umac.c:682,9'
          Dst:             zero_pad
        - Src:             'umac.c:684,9'
          Dst:             nh_transform
        - Src:             'umac.c:688,9'
          Dst:             zero_pad
        - Src:             'umac.c:689,9'
          Dst:             nh_transform
        - Src:             'umac.c:703,5'
          Dst:             nh_reset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    endian_convert
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 557
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         17
      ICount:          107
      EdgeCount:       21
      CyclomaticComplexity: 6
      functionsReached:
        - get_u32
      functionUses:    4
      BranchProfiles:
        - Branch String:   'umac.c:559,9'
          Branch Sides:
            - BranchSide:      'umac.c:560,31'
              BranchSideFuncs:
                - get_u32
            - BranchSide:      'umac.c:565,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - get_u32
                - get_u32
        - Branch String:   'umac.c:564,9'
          Branch Sides:
            - BranchSide:      'umac.c:562,18'
              BranchSideFuncs:
                - get_u32
            - BranchSide:      'umac.c:565,5'
              BranchSideFuncs: []
        - Branch String:   'umac.c:573,9'
          Branch Sides:
            - BranchSide:      'umac.c:569,17'
              BranchSideFuncs:
                - get_u32
                - get_u32
            - BranchSide:      'umac.c:574,5'
              BranchSideFuncs: []
      Callsites:
        - Src:             'umac.c:562,18'
          Dst:             get_u32
        - Src:             'umac.c:569,17'
          Dst:             get_u32
        - Src:             'umac.c:570,20'
          Dst:             get_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh_init
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 605
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.nh_ctx *'
        - 'struct.aes_key_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - endian_convert
        - kdf
        - nh_reset
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'umac.c:606,5'
          Dst:             kdf
        - Src:             'umac.c:607,5'
          Dst:             endian_convert
        - Src:             'umac.c:608,5'
          Dst:             nh_reset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kdf
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 186
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'char *'
        - 'struct.aes_key_st *'
        - 'char '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         9
      ICount:          93
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - AES_encrypt
        - explicit_bzero
      functionUses:    5
      BranchProfiles:
        - Branch String:   'umac.c:196,5'
          Branch Sides:
            - BranchSide:      'umac.c:197,9'
              BranchSideFuncs:
                - AES_encrypt
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - AES_encrypt
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'umac.c:203,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - AES_encrypt
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'umac.c:203,9'
          Branch Sides:
            - BranchSide:      'umac.c:203,9'
              BranchSideFuncs:
                - AES_encrypt
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      'umac.c:204,9'
              BranchSideFuncs:
                - AES_encrypt
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - explicit_bzero
      Callsites:
        - Src:             'umac.c:197,9'
          Dst:             AES_encrypt
        - Src:             'umac.c:204,9'
          Dst:             AES_encrypt
        - Src:             'umac.c:207,5'
          Dst:             explicit_bzero
        - Src:             'umac.c:208,5'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    AES_encrypt
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'struct.aes_key_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    8
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    uhash_update
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1051
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.uhash_ctx *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         21
      ICount:          191
      EdgeCount:       27
      CyclomaticComplexity: 8
      functionsReached:
        - nh
        - nh_final
        - nh_update
        - poly_hash
      functionUses:    1
      BranchProfiles:
        - Branch String:   'umac.c:1056,9'
          Branch Sides:
            - BranchSide:      'umac.c:1057,20'
              BranchSideFuncs:
                - nh_update
            - BranchSide:      'umac.c:1061,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nh_update
                - __sanitizer_cov_trace_const_cmp4
                - nh
                - poly_hash
                - nh_update
                - nh_final
                - poly_hash
        - Branch String:   'umac.c:1062,14'
          Branch Sides:
            - BranchSide:      'umac.c:1063,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nh_update
                - __sanitizer_cov_trace_const_cmp4
                - nh
                - poly_hash
                - nh_update
                - nh_final
                - poly_hash
            - BranchSide:      'umac.c:1065,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nh_update
                - __sanitizer_cov_trace_const_cmp4
                - nh
                - poly_hash
                - nh_update
                - nh_final
                - poly_hash
        - Branch String:   'umac.c:1065,14'
          Branch Sides:
            - BranchSide:      'umac.c:1070,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - nh_update
                - nh
                - poly_hash
                - nh_update
                - nh_final
                - poly_hash
            - BranchSide:      'umac.c:1092,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - nh_update
        - Branch String:   'umac.c:1070,18'
          Branch Sides:
            - BranchSide:      'umac.c:1071,50'
              BranchSideFuncs:
                - nh_update
                - nh_final
                - poly_hash
                - __sanitizer_cov_trace_const_cmp8
                - nh_update
                - nh
                - poly_hash
            - BranchSide:      'umac.c:1081,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - nh_update
                - nh
                - poly_hash
        - Branch String:   'umac.c:1081,14'
          Branch Sides:
            - BranchSide:      'umac.c:1082,22'
              BranchSideFuncs:
                - nh
                - poly_hash
                - __sanitizer_cov_trace_const_cmp8
                - nh_update
            - BranchSide:      'umac.c:1089,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - nh_update
      Callsites:
        - Src:             'umac.c:1057,9'
          Dst:             nh_update
        - Src:             'umac.c:1072,18'
          Dst:             nh_update
        - Src:             'umac.c:1073,18'
          Dst:             nh_final
        - Src:             'umac.c:1075,18'
          Dst:             poly_hash
        - Src:             'umac.c:1082,18'
          Dst:             nh
        - Src:             'umac.c:1087,18'
          Dst:             poly_hash
        - Src:             'umac.c:1093,14'
          Dst:             nh_update
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    umac_update
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1259
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.umac_ctx *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          25
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - uhash_update
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'umac.c:1260,5'
          Dst:             uhash_update
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    pdf_gen_xor
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 238
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.pdf_ctx *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         9
      ICount:          129
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - AES_encrypt
      functionUses:    1
      BranchProfiles:
        - Branch String:   'umac.c:261,70'
          Branch Sides:
            - BranchSide:      'umac.c:262,28'
              BranchSideFuncs:
                - AES_encrypt
            - BranchSide:      'umac.c:264,53'
              BranchSideFuncs:
                - AES_encrypt
        - Branch String:   'umac.c:261,10'
          Branch Sides:
            - BranchSide:      'umac.c:261,10'
              BranchSideFuncs:
                - AES_encrypt
            - BranchSide:      'umac.c:264,53'
              BranchSideFuncs:
                - AES_encrypt
      Callsites:
        - Src:             'umac.c:266,9'
          Dst:             AES_encrypt
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    uhash_final
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1105
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.uhash_ctx *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          70
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - ip_long
        - ip_short
        - nh_final
        - poly_hash
        - uhash_reset
      functionUses:    1
      BranchProfiles:
        - Branch String:   'umac.c:1109,9'
          Branch Sides:
            - BranchSide:      'umac.c:1110,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ip_long
                - uhash_reset
                - nh_final
                - poly_hash
            - BranchSide:      'umac.c:1116,19'
              BranchSideFuncs:
                - nh_final
                - ip_short
                - uhash_reset
        - Branch String:   'umac.c:1110,13'
          Branch Sides:
            - BranchSide:      'umac.c:1111,23'
              BranchSideFuncs:
                - nh_final
                - poly_hash
                - ip_long
                - uhash_reset
            - BranchSide:      'umac.c:1114,17'
              BranchSideFuncs:
                - ip_long
                - uhash_reset
      Callsites:
        - Src:             'umac.c:1111,13'
          Dst:             nh_final
        - Src:             'umac.c:1112,13'
          Dst:             poly_hash
        - Src:             'umac.c:1114,9'
          Dst:             ip_long
        - Src:             'umac.c:1116,9'
          Dst:             nh_final
        - Src:             'umac.c:1117,9'
          Dst:             ip_short
        - Src:             'umac.c:1119,5'
          Dst:             uhash_reset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    umac_final
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1246
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.umac_ctx *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          29
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - pdf_gen_xor
        - uhash_final
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'umac.c:1247,5'
          Dst:             uhash_final
        - Src:             'umac.c:1248,5'
          Dst:             pdf_gen_xor
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    uhash_init
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 960
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.uhash_ctx *'
        - 'struct.aes_key_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         15
      ICount:          156
      EdgeCount:       18
      CyclomaticComplexity: 5
      functionsReached:
        - endian_convert
        - explicit_bzero
        - kdf
        - memset
        - nh_init
      functionUses:    1
      BranchProfiles:
        - Branch String:   'umac.c:972,5'
          Branch Sides:
            - BranchSide:      'umac.c:977,16'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - endian_convert
                - __sanitizer_cov_trace_const_cmp4
                - kdf
                - __sanitizer_cov_trace_const_cmp4
                - endian_convert
                - __sanitizer_cov_trace_const_cmp4
                - kdf
                - endian_convert
                - explicit_bzero
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'umac.c:985,9'
              BranchSideFuncs:
                - kdf
                - __sanitizer_cov_trace_const_cmp4
                - endian_convert
                - __sanitizer_cov_trace_const_cmp4
                - kdf
                - endian_convert
                - explicit_bzero
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'umac.c:986,5'
          Branch Sides:
            - BranchSide:      'umac.c:987,18'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - endian_convert
                - __sanitizer_cov_trace_const_cmp4
                - kdf
                - endian_convert
                - explicit_bzero
            - BranchSide:      'umac.c:989,5'
              BranchSideFuncs:
                - endian_convert
                - __sanitizer_cov_trace_const_cmp4
                - kdf
                - endian_convert
                - explicit_bzero
        - Branch String:   'umac.c:991,5'
          Branch Sides:
            - BranchSide:      'umac.c:992,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kdf
                - endian_convert
                - explicit_bzero
            - BranchSide:      'umac.c:996,9'
              BranchSideFuncs:
                - kdf
                - endian_convert
                - explicit_bzero
      Callsites:
        - Src:             'umac.c:965,5'
          Dst:             memset
        - Src:             'umac.c:968,5'
          Dst:             nh_init
        - Src:             'umac.c:971,5'
          Dst:             kdf
        - Src:             'umac.c:978,9'
          Dst:             endian_convert
        - Src:             'umac.c:985,5'
          Dst:             kdf
        - Src:             'umac.c:989,5'
          Dst:             endian_convert
        - Src:             'umac.c:996,5'
          Dst:             kdf
        - Src:             'umac.c:997,5'
          Dst:             endian_convert
        - Src:             'umac.c:999,5'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    pdf_init
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 224
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.pdf_ctx *'
        - 'struct.aes_key_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          43
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - AES_encrypt
        - AES_set_encrypt_key
        - explicit_bzero
        - kdf
        - memset
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'umac.c:227,5'
          Dst:             kdf
        - Src:             'umac.c:228,5'
          Dst:             AES_set_encrypt_key
        - Src:             'umac.c:231,5'
          Dst:             memset
        - Src:             'umac.c:232,5'
          Dst:             AES_encrypt
        - Src:             'umac.c:233,5'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    AES_set_encrypt_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'int '
        - 'struct.aes_key_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    umac_new
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1220
      functionDepth:   0
      returnType:      'struct.umac_ctx *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          68
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - AES_set_encrypt_key
        - explicit_bzero
        - pdf_init
        - uhash_init
        - xcalloc
      functionUses:    1
      BranchProfiles:
        - Branch String:   'umac.c:1226,9'
          Branch Sides:
            - BranchSide:      'umac.c:1226,9'
              BranchSideFuncs:
                - AES_set_encrypt_key
                - pdf_init
                - uhash_init
                - explicit_bzero
            - BranchSide:      'umac.c:1229,43'
              BranchSideFuncs:
                - AES_set_encrypt_key
                - pdf_init
                - uhash_init
                - explicit_bzero
      Callsites:
        - Src:             'umac.c:1225,18'
          Dst:             xcalloc
        - Src:             'umac.c:1233,9'
          Dst:             AES_set_encrypt_key
        - Src:             'umac.c:1234,9'
          Dst:             pdf_init
        - Src:             'umac.c:1235,9'
          Dst:             uhash_init
        - Src:             'umac.c:1236,9'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    umac_delete
      functionSourceFile: '/src/openssh/umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1205
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.umac_ctx *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          33
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - freezero
      functionUses:    1
      BranchProfiles:
        - Branch String:   'umac.c:1206,9'
          Branch Sides:
            - BranchSide:      'umac.c:1206,9'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'umac.c:1208,38'
              BranchSideFuncs:
                - freezero
      Callsites:
        - Src:             'umac.c:1209,9'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 714
      functionDepth:   0
      returnType:      'N/A'
      argCount:        5
      argTypes:
        - 'struct.nh_ctx.199 *'
        - 'char *'
        - 'int '
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          62
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - nh_aux
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             './umac.c:731,5'
          Dst:             nh_aux
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh_aux
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 473
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          497
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - get_u32_le
      functionUses:    2
      BranchProfiles:
        - Branch String:   './umac.c:524,5'
          Branch Sides:
            - BranchSide:      './umac.c:490,14'
              BranchSideFuncs:
                - get_u32_le
                - get_u32_le
                - get_u32_le
                - get_u32_le
                - get_u32_le
                - get_u32_le
                - get_u32_le
                - get_u32_le
            - BranchSide:      './umac.c:525,25'
              BranchSideFuncs: []
      Callsites:
        - Src:             './umac.c:490,14'
          Dst:             get_u32_le
        - Src:             './umac.c:490,44'
          Dst:             get_u32_le
        - Src:             './umac.c:491,14'
          Dst:             get_u32_le
        - Src:             './umac.c:491,44'
          Dst:             get_u32_le
        - Src:             './umac.c:492,14'
          Dst:             get_u32_le
        - Src:             './umac.c:492,44'
          Dst:             get_u32_le
        - Src:             './umac.c:493,14'
          Dst:             get_u32_le
        - Src:             './umac.c:493,44'
          Dst:             get_u32_le
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh_update
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 616
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.nh_ctx.199 *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          134
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - nh_transform
      functionUses:    3
      BranchProfiles:
        - Branch String:   './umac.c:620,9'
          Branch Sides:
            - BranchSide:      './umac.c:620,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform.1948
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform.1948
            - BranchSide:      './umac.c:621,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform.1948
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform.1948
        - Branch String:   './umac.c:621,13'
          Branch Sides:
            - BranchSide:      './umac.c:622,34'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform.1948
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform.1948
            - BranchSide:      './umac.c:629,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - nh_transform.1948
        - Branch String:   './umac.c:629,13'
          Branch Sides:
            - BranchSide:      './umac.c:630,17'
              BranchSideFuncs:
                - nh_transform.1948
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      './umac.c:636,11'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:
        - Src:             './umac.c:624,13'
          Dst:             nh_transform
        - Src:             './umac.c:631,13'
          Dst:             nh_transform
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh_transform
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 544
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.nh_ctx.199 *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          39
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - nh_aux
      functionUses:    4
      BranchProfiles:  []
      Callsites:
        - Src:             './umac.c:548,5'
          Dst:             nh_aux
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ip_reduce_p36
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 872
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         4
      ICount:          33
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:
        - Branch String:   './umac.c:877,9'
          Branch Sides:
            - BranchSide:      './umac.c:877,9'
              BranchSideFuncs: []
            - BranchSide:      './umac.c:878,13'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ip_aux
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 862
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'size_t '
        - 'size_t *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          57
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    poly64
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 799
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'size_t '
        - 'size_t '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          125
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    3
      BranchProfiles:
        - Branch String:   './umac.c:816,9'
          Branch Sides:
            - BranchSide:      './umac.c:817,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      './umac.c:819,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
        - Branch String:   './umac.c:820,9'
          Branch Sides:
            - BranchSide:      './umac.c:820,9'
              BranchSideFuncs: []
            - BranchSide:      './umac.c:821,13'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    zero_pad
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 645
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         13
      ICount:          78
      EdgeCount:       16
      CyclomaticComplexity: 5
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   './umac.c:647,9'
          Branch Sides:
            - BranchSide:      './umac.c:648,9'
              BranchSideFuncs: []
            - BranchSide:      './umac.c:659,5'
              BranchSideFuncs: []
        - Branch String:   './umac.c:648,9'
          Branch Sides:
            - BranchSide:      './umac.c:649,14'
              BranchSideFuncs: []
            - BranchSide:      './umac.c:653,9'
              BranchSideFuncs: []
        - Branch String:   './umac.c:653,9'
          Branch Sides:
            - BranchSide:      './umac.c:654,23'
              BranchSideFuncs: []
            - BranchSide:      './umac.c:658,5'
              BranchSideFuncs: []
        - Branch String:   './umac.c:659,5'
          Branch Sides:
            - BranchSide:      './umac.c:660,10'
              BranchSideFuncs: []
            - BranchSide:      './umac.c:664,1'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    uhash_reset
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 936
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.uhash_ctx.200 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          36
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - nh_reset
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             './umac.c:937,5'
          Dst:             nh_reset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh_reset
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 585
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.nh_ctx.199 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          29
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ip_short
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 890
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.uhash_ctx.200 *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          110
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ip_aux
        - ip_reduce_p36
        - put_u32
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             './umac.c:894,10'
          Dst:             ip_aux
        - Src:             './umac.c:895,5'
          Dst:             ip_reduce_p36
        - Src:             './umac.c:895,5'
          Dst:             put_u32
        - Src:             './umac.c:897,10'
          Dst:             ip_aux
        - Src:             './umac.c:898,5'
          Dst:             ip_reduce_p36
        - Src:             './umac.c:898,5'
          Dst:             put_u32
        - Src:             './umac.c:901,10'
          Dst:             ip_aux
        - Src:             './umac.c:902,5'
          Dst:             ip_reduce_p36
        - Src:             './umac.c:902,5'
          Dst:             put_u32
        - Src:             './umac.c:905,10'
          Dst:             ip_aux
        - Src:             './umac.c:906,5'
          Dst:             ip_reduce_p36
        - Src:             './umac.c:906,5'
          Dst:             put_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ip_long
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 915
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.uhash_ctx.200 *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         10
      ICount:          94
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - ip_aux
        - ip_reduce_p36
        - put_u32
      functionUses:    1
      BranchProfiles:
        - Branch String:   './umac.c:919,5'
          Branch Sides:
            - BranchSide:      './umac.c:921,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - ip_aux.1950
                - ip_reduce_p36.1949
                - put_u32
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      './umac.c:927,1'
              BranchSideFuncs: []
        - Branch String:   './umac.c:921,13'
          Branch Sides:
            - BranchSide:      './umac.c:922,13'
              BranchSideFuncs:
                - ip_aux.1950
                - ip_reduce_p36.1949
                - put_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      './umac.c:923,23'
              BranchSideFuncs:
                - ip_aux.1950
                - ip_reduce_p36.1949
                - put_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
      Callsites:
        - Src:             './umac.c:923,14'
          Dst:             ip_aux
        - Src:             './umac.c:924,9'
          Dst:             ip_reduce_p36
        - Src:             './umac.c:924,9'
          Dst:             put_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    poly_hash
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 834
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.uhash_ctx.200 *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         10
      ICount:          128
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - poly64
      functionUses:    3
      BranchProfiles:
        - Branch String:   './umac.c:838,5'
          Branch Sides:
            - BranchSide:      './umac.c:839,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - poly64.1951
                - __sanitizer_cov_trace_const_cmp4
                - poly64.1951
                - poly64.1951
            - BranchSide:      './umac.c:849,1'
              BranchSideFuncs: []
        - Branch String:   './umac.c:839,13'
          Branch Sides:
            - BranchSide:      './umac.c:840,40'
              BranchSideFuncs:
                - poly64.1951
                - poly64.1951
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - poly64.1951
            - BranchSide:      './umac.c:845,40'
              BranchSideFuncs:
                - poly64.1951
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - poly64.1951
                - poly64.1951
      Callsites:
        - Src:             './umac.c:840,33'
          Dst:             poly64
        - Src:             './umac.c:842,33'
          Dst:             poly64
        - Src:             './umac.c:845,33'
          Dst:             poly64
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh_final
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 676
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.nh_ctx.199 *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          146
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - nh_reset
        - nh_transform
        - zero_pad
      functionUses:    3
      BranchProfiles:
        - Branch String:   './umac.c:679,9'
          Branch Sides:
            - BranchSide:      './umac.c:680,20'
              BranchSideFuncs:
                - zero_pad.1952
                - nh_transform.1948
                - nh_reset.1954
            - BranchSide:      './umac.c:686,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - nh_reset.1954
                - zero_pad.1952
                - nh_transform.1948
      Callsites:
        - Src:             './umac.c:682,9'
          Dst:             zero_pad
        - Src:             './umac.c:684,9'
          Dst:             nh_transform
        - Src:             './umac.c:688,9'
          Dst:             zero_pad
        - Src:             './umac.c:689,9'
          Dst:             nh_transform
        - Src:             './umac.c:703,5'
          Dst:             nh_reset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    endian_convert
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 557
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         17
      ICount:          107
      EdgeCount:       21
      CyclomaticComplexity: 6
      functionsReached:
        - get_u32
      functionUses:    4
      BranchProfiles:
        - Branch String:   './umac.c:559,9'
          Branch Sides:
            - BranchSide:      './umac.c:560,31'
              BranchSideFuncs:
                - get_u32
            - BranchSide:      './umac.c:565,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - get_u32
                - get_u32
        - Branch String:   './umac.c:564,9'
          Branch Sides:
            - BranchSide:      './umac.c:562,18'
              BranchSideFuncs:
                - get_u32
            - BranchSide:      './umac.c:565,5'
              BranchSideFuncs: []
        - Branch String:   './umac.c:573,9'
          Branch Sides:
            - BranchSide:      './umac.c:569,17'
              BranchSideFuncs:
                - get_u32
                - get_u32
            - BranchSide:      './umac.c:574,5'
              BranchSideFuncs: []
      Callsites:
        - Src:             './umac.c:562,18'
          Dst:             get_u32
        - Src:             './umac.c:569,17'
          Dst:             get_u32
        - Src:             './umac.c:570,20'
          Dst:             get_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    nh_init
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 605
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.nh_ctx.199 *'
        - 'struct.aes_key_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - endian_convert
        - kdf
        - nh_reset
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             './umac.c:606,5'
          Dst:             kdf
        - Src:             './umac.c:607,5'
          Dst:             endian_convert
        - Src:             './umac.c:608,5'
          Dst:             nh_reset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kdf
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 186
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'char *'
        - 'struct.aes_key_st *'
        - 'char '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         9
      ICount:          93
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - AES_encrypt
        - explicit_bzero
      functionUses:    5
      BranchProfiles:
        - Branch String:   './umac.c:196,5'
          Branch Sides:
            - BranchSide:      './umac.c:197,9'
              BranchSideFuncs:
                - AES_encrypt
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - AES_encrypt
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      './umac.c:203,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - AES_encrypt
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   './umac.c:203,9'
          Branch Sides:
            - BranchSide:      './umac.c:203,9'
              BranchSideFuncs:
                - AES_encrypt
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      './umac.c:204,9'
              BranchSideFuncs:
                - AES_encrypt
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - explicit_bzero
      Callsites:
        - Src:             './umac.c:197,9'
          Dst:             AES_encrypt
        - Src:             './umac.c:204,9'
          Dst:             AES_encrypt
        - Src:             './umac.c:207,5'
          Dst:             explicit_bzero
        - Src:             './umac.c:208,5'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    uhash_update
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1051
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.uhash_ctx.200 *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         21
      ICount:          191
      EdgeCount:       27
      CyclomaticComplexity: 8
      functionsReached:
        - nh
        - nh_final
        - nh_update
        - poly_hash
      functionUses:    1
      BranchProfiles:
        - Branch String:   './umac.c:1056,9'
          Branch Sides:
            - BranchSide:      './umac.c:1057,20'
              BranchSideFuncs:
                - nh_update.1947
            - BranchSide:      './umac.c:1061,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nh_update.1947
                - __sanitizer_cov_trace_const_cmp4
                - nh.1945
                - poly_hash.1957
                - nh_update.1947
                - nh_final.1958
                - poly_hash.1957
        - Branch String:   './umac.c:1062,14'
          Branch Sides:
            - BranchSide:      './umac.c:1063,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nh_update.1947
                - __sanitizer_cov_trace_const_cmp4
                - nh.1945
                - poly_hash.1957
                - nh_update.1947
                - nh_final.1958
                - poly_hash.1957
            - BranchSide:      './umac.c:1065,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - nh_update.1947
                - __sanitizer_cov_trace_const_cmp4
                - nh.1945
                - poly_hash.1957
                - nh_update.1947
                - nh_final.1958
                - poly_hash.1957
        - Branch String:   './umac.c:1065,14'
          Branch Sides:
            - BranchSide:      './umac.c:1070,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - nh_update.1947
                - nh.1945
                - poly_hash.1957
                - nh_update.1947
                - nh_final.1958
                - poly_hash.1957
            - BranchSide:      './umac.c:1092,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - nh_update.1947
        - Branch String:   './umac.c:1070,18'
          Branch Sides:
            - BranchSide:      './umac.c:1071,50'
              BranchSideFuncs:
                - nh_update.1947
                - nh_final.1958
                - poly_hash.1957
                - __sanitizer_cov_trace_const_cmp8
                - nh_update.1947
                - nh.1945
                - poly_hash.1957
            - BranchSide:      './umac.c:1081,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - nh_update.1947
                - nh.1945
                - poly_hash.1957
        - Branch String:   './umac.c:1081,14'
          Branch Sides:
            - BranchSide:      './umac.c:1082,22'
              BranchSideFuncs:
                - nh.1945
                - poly_hash.1957
                - __sanitizer_cov_trace_const_cmp8
                - nh_update.1947
            - BranchSide:      './umac.c:1089,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - nh_update.1947
      Callsites:
        - Src:             './umac.c:1057,9'
          Dst:             nh_update
        - Src:             './umac.c:1072,18'
          Dst:             nh_update
        - Src:             './umac.c:1073,18'
          Dst:             nh_final
        - Src:             './umac.c:1075,18'
          Dst:             poly_hash
        - Src:             './umac.c:1082,18'
          Dst:             nh
        - Src:             './umac.c:1087,18'
          Dst:             poly_hash
        - Src:             './umac.c:1093,14'
          Dst:             nh_update
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    umac128_update
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1259
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.umac128_ctx *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          25
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - uhash_update
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             './umac.c:1260,5'
          Dst:             uhash_update
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    pdf_gen_xor
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 238
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.pdf_ctx *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         9
      ICount:          132
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - AES_encrypt
      functionUses:    1
      BranchProfiles:
        - Branch String:   './umac.c:261,70'
          Branch Sides:
            - BranchSide:      './umac.c:262,28'
              BranchSideFuncs:
                - AES_encrypt
            - BranchSide:      './umac.c:264,53'
              BranchSideFuncs:
                - AES_encrypt
        - Branch String:   './umac.c:261,10'
          Branch Sides:
            - BranchSide:      './umac.c:261,10'
              BranchSideFuncs:
                - AES_encrypt
            - BranchSide:      './umac.c:264,53'
              BranchSideFuncs:
                - AES_encrypt
      Callsites:
        - Src:             './umac.c:266,9'
          Dst:             AES_encrypt
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    uhash_final
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1105
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.uhash_ctx.200 *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          70
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - ip_long
        - ip_short
        - nh_final
        - poly_hash
        - uhash_reset
      functionUses:    1
      BranchProfiles:
        - Branch String:   './umac.c:1109,9'
          Branch Sides:
            - BranchSide:      './umac.c:1110,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ip_long.1956
                - uhash_reset.1953
                - nh_final.1958
                - poly_hash.1957
            - BranchSide:      './umac.c:1116,19'
              BranchSideFuncs:
                - nh_final.1958
                - ip_short.1955
                - uhash_reset.1953
        - Branch String:   './umac.c:1110,13'
          Branch Sides:
            - BranchSide:      './umac.c:1111,23'
              BranchSideFuncs:
                - nh_final.1958
                - poly_hash.1957
                - ip_long.1956
                - uhash_reset.1953
            - BranchSide:      './umac.c:1114,17'
              BranchSideFuncs:
                - ip_long.1956
                - uhash_reset.1953
      Callsites:
        - Src:             './umac.c:1111,13'
          Dst:             nh_final
        - Src:             './umac.c:1112,13'
          Dst:             poly_hash
        - Src:             './umac.c:1114,9'
          Dst:             ip_long
        - Src:             './umac.c:1116,9'
          Dst:             nh_final
        - Src:             './umac.c:1117,9'
          Dst:             ip_short
        - Src:             './umac.c:1119,5'
          Dst:             uhash_reset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    umac128_final
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1246
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.umac128_ctx *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          29
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - pdf_gen_xor
        - uhash_final
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             './umac.c:1247,5'
          Dst:             uhash_final
        - Src:             './umac.c:1248,5'
          Dst:             pdf_gen_xor
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    uhash_init
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 960
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.uhash_ctx.200 *'
        - 'struct.aes_key_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         15
      ICount:          156
      EdgeCount:       18
      CyclomaticComplexity: 5
      functionsReached:
        - endian_convert
        - explicit_bzero
        - kdf
        - memset
        - nh_init
      functionUses:    1
      BranchProfiles:
        - Branch String:   './umac.c:972,5'
          Branch Sides:
            - BranchSide:      './umac.c:977,16'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - endian_convert.1959
                - __sanitizer_cov_trace_const_cmp4
                - kdf.1961
                - __sanitizer_cov_trace_const_cmp4
                - endian_convert.1959
                - __sanitizer_cov_trace_const_cmp4
                - kdf.1961
                - endian_convert.1959
                - explicit_bzero
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      './umac.c:985,9'
              BranchSideFuncs:
                - kdf.1961
                - __sanitizer_cov_trace_const_cmp4
                - endian_convert.1959
                - __sanitizer_cov_trace_const_cmp4
                - kdf.1961
                - endian_convert.1959
                - explicit_bzero
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   './umac.c:986,5'
          Branch Sides:
            - BranchSide:      './umac.c:987,18'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - endian_convert.1959
                - __sanitizer_cov_trace_const_cmp4
                - kdf.1961
                - endian_convert.1959
                - explicit_bzero
            - BranchSide:      './umac.c:989,5'
              BranchSideFuncs:
                - endian_convert.1959
                - __sanitizer_cov_trace_const_cmp4
                - kdf.1961
                - endian_convert.1959
                - explicit_bzero
        - Branch String:   './umac.c:991,5'
          Branch Sides:
            - BranchSide:      './umac.c:992,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kdf.1961
                - endian_convert.1959
                - explicit_bzero
            - BranchSide:      './umac.c:996,9'
              BranchSideFuncs:
                - kdf.1961
                - endian_convert.1959
                - explicit_bzero
      Callsites:
        - Src:             './umac.c:965,5'
          Dst:             memset
        - Src:             './umac.c:968,5'
          Dst:             nh_init
        - Src:             './umac.c:971,5'
          Dst:             kdf
        - Src:             './umac.c:978,9'
          Dst:             endian_convert
        - Src:             './umac.c:985,5'
          Dst:             kdf
        - Src:             './umac.c:989,5'
          Dst:             endian_convert
        - Src:             './umac.c:996,5'
          Dst:             kdf
        - Src:             './umac.c:997,5'
          Dst:             endian_convert
        - Src:             './umac.c:999,5'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    pdf_init
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 224
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.pdf_ctx *'
        - 'struct.aes_key_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          43
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - AES_encrypt
        - AES_set_encrypt_key
        - explicit_bzero
        - kdf
        - memset
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             './umac.c:227,5'
          Dst:             kdf
        - Src:             './umac.c:228,5'
          Dst:             AES_set_encrypt_key
        - Src:             './umac.c:231,5'
          Dst:             memset
        - Src:             './umac.c:232,5'
          Dst:             AES_encrypt
        - Src:             './umac.c:233,5'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    umac128_new
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1220
      functionDepth:   0
      returnType:      'struct.umac128_ctx *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          68
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - AES_set_encrypt_key
        - explicit_bzero
        - pdf_init
        - uhash_init
        - xcalloc
      functionUses:    0
      BranchProfiles:
        - Branch String:   './umac.c:1226,9'
          Branch Sides:
            - BranchSide:      './umac.c:1226,9'
              BranchSideFuncs:
                - AES_set_encrypt_key
                - pdf_init.1970
                - uhash_init.1969
                - explicit_bzero
            - BranchSide:      './umac.c:1229,43'
              BranchSideFuncs:
                - AES_set_encrypt_key
                - pdf_init.1970
                - uhash_init.1969
                - explicit_bzero
      Callsites:
        - Src:             './umac.c:1225,18'
          Dst:             xcalloc
        - Src:             './umac.c:1233,9'
          Dst:             AES_set_encrypt_key
        - Src:             './umac.c:1234,9'
          Dst:             pdf_init
        - Src:             './umac.c:1235,9'
          Dst:             uhash_init
        - Src:             './umac.c:1236,9'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    umac128_delete
      functionSourceFile: '/src/openssh/./umac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1205
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.umac128_ctx *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          33
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - freezero
      functionUses:    0
      BranchProfiles:
        - Branch String:   './umac.c:1206,9'
          Branch Sides:
            - BranchSide:      './umac.c:1206,9'
              BranchSideFuncs:
                - freezero
            - BranchSide:      './umac.c:1208,38'
              BranchSideFuncs:
                - freezero
      Callsites:
        - Src:             './umac.c:1209,9'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    chachapoly_get_length
      functionSourceFile: '/src/openssh/cipher-chachapoly-libcrypto.c'
      linkageType:     InternalLinkage
      functionLinenumber: 152
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.chachapoly_ctx *'
        - 'int *'
        - 'int '
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          169
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - EVP_Cipher
        - EVP_CipherInit
        - memset
      functionUses:    1
      BranchProfiles:
        - Branch String:   'cipher-chachapoly-libcrypto.c:155,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:156,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher-chachapoly-libcrypto.c:157,9'
              BranchSideFuncs:
                - memset
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher-chachapoly-libcrypto.c:159,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:160,3'
              BranchSideFuncs:
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher-chachapoly-libcrypto.c:161,17'
              BranchSideFuncs:
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher-chachapoly-libcrypto.c:161,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:162,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher-chachapoly-libcrypto.c:163,11'
              BranchSideFuncs: []
      Callsites:
        - Src:             'cipher-chachapoly-libcrypto.c:157,2'
          Dst:             memset
        - Src:             'cipher-chachapoly-libcrypto.c:159,7'
          Dst:             EVP_CipherInit
        - Src:             'cipher-chachapoly-libcrypto.c:161,6'
          Dst:             EVP_Cipher
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    chachapoly_crypt
      functionSourceFile: '/src/openssh/cipher-chachapoly-libcrypto.c'
      linkageType:     InternalLinkage
      functionLinenumber: 88
      functionDepth:   0
      returnType:      'int '
      argCount:        8
      argTypes:
        - 'struct.chachapoly_ctx *'
        - 'int '
        - 'char *'
        - 'char *'
        - 'int '
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         32
      ICount:          298
      EdgeCount:       42
      CyclomaticComplexity: 12
      functionsReached:
        - EVP_Cipher
        - EVP_CipherInit
        - explicit_bzero
        - memset
        - poly1305_auth
        - timingsafe_bcmp
      functionUses:    1
      BranchProfiles:
        - Branch String:   'cipher-chachapoly-libcrypto.c:100,60'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:101,17'
              BranchSideFuncs:
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - poly1305_auth
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - poly1305_auth
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher-chachapoly-libcrypto.c:103,5'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
        - Branch String:   'cipher-chachapoly-libcrypto.c:100,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:103,5'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      'cipher-chachapoly-libcrypto.c:108,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - poly1305_auth
                - timingsafe_bcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - poly1305_auth
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher-chachapoly-libcrypto.c:108,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:109,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - poly1305_auth
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher-chachapoly-libcrypto.c:119,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - poly1305_auth
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher-chachapoly-libcrypto.c:112,7'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:113,6'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      'cipher-chachapoly-libcrypto.c:116,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - poly1305_auth
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher-chachapoly-libcrypto.c:119,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:120,23'
              BranchSideFuncs:
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - poly1305_auth
            - BranchSide:      'cipher-chachapoly-libcrypto.c:128,2'
              BranchSideFuncs:
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - poly1305_auth
        - Branch String:   'cipher-chachapoly-libcrypto.c:120,63'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:121,18'
              BranchSideFuncs:
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - poly1305_auth
            - BranchSide:      'cipher-chachapoly-libcrypto.c:122,6'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
        - Branch String:   'cipher-chachapoly-libcrypto.c:120,7'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:122,6'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      'cipher-chachapoly-libcrypto.c:125,2'
              BranchSideFuncs:
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - poly1305_auth
        - Branch String:   'cipher-chachapoly-libcrypto.c:129,60'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:130,17'
              BranchSideFuncs:
                - EVP_Cipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - poly1305_auth
            - BranchSide:      'cipher-chachapoly-libcrypto.c:131,5'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
        - Branch String:   'cipher-chachapoly-libcrypto.c:129,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:131,5'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      'cipher-chachapoly-libcrypto.c:136,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - poly1305_auth
        - Branch String:   'cipher-chachapoly-libcrypto.c:136,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:137,17'
              BranchSideFuncs:
                - poly1305_auth
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      'cipher-chachapoly-libcrypto.c:140,4'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
      Callsites:
        - Src:             'cipher-chachapoly-libcrypto.c:97,2'
          Dst:             memset
        - Src:             'cipher-chachapoly-libcrypto.c:99,2'
          Dst:             memset
        - Src:             'cipher-chachapoly-libcrypto.c:100,7'
          Dst:             EVP_CipherInit
        - Src:             'cipher-chachapoly-libcrypto.c:101,6'
          Dst:             EVP_Cipher
        - Src:             'cipher-chachapoly-libcrypto.c:111,3'
          Dst:             poly1305_auth
        - Src:             'cipher-chachapoly-libcrypto.c:112,7'
          Dst:             timingsafe_bcmp
        - Src:             'cipher-chachapoly-libcrypto.c:120,8'
          Dst:             EVP_CipherInit
        - Src:             'cipher-chachapoly-libcrypto.c:121,7'
          Dst:             EVP_Cipher
        - Src:             'cipher-chachapoly-libcrypto.c:129,7'
          Dst:             EVP_CipherInit
        - Src:             'cipher-chachapoly-libcrypto.c:130,6'
          Dst:             EVP_Cipher
        - Src:             'cipher-chachapoly-libcrypto.c:137,3'
          Dst:             poly1305_auth
        - Src:             'cipher-chachapoly-libcrypto.c:142,2'
          Dst:             explicit_bzero
        - Src:             'cipher-chachapoly-libcrypto.c:143,2'
          Dst:             explicit_bzero
        - Src:             'cipher-chachapoly-libcrypto.c:144,2'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    chachapoly_free
      functionSourceFile: '/src/openssh/cipher-chachapoly-libcrypto.c'
      linkageType:     InternalLinkage
      functionLinenumber: 68
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.chachapoly_ctx *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          36
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - EVP_CIPHER_CTX_free
        - freezero
      functionUses:    2
      BranchProfiles:
        - Branch String:   'cipher-chachapoly-libcrypto.c:69,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:70,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher-chachapoly-libcrypto.c:71,22'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_free
                - EVP_CIPHER_CTX_free
                - freezero
      Callsites:
        - Src:             'cipher-chachapoly-libcrypto.c:71,2'
          Dst:             EVP_CIPHER_CTX_free
        - Src:             'cipher-chachapoly-libcrypto.c:72,2'
          Dst:             EVP_CIPHER_CTX_free
        - Src:             'cipher-chachapoly-libcrypto.c:73,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    chachapoly_new
      functionSourceFile: '/src/openssh/cipher-chachapoly-libcrypto.c'
      linkageType:     InternalLinkage
      functionLinenumber: 44
      functionDepth:   0
      returnType:      'struct.chachapoly_ctx *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         20
      ICount:          110
      EdgeCount:       27
      CyclomaticComplexity: 9
      functionsReached:
        - EVP_CIPHER_CTX_iv_length
        - EVP_CIPHER_CTX_new
        - EVP_chacha20
        - calloc
        - chachapoly_free
      functionUses:    1
      BranchProfiles:
        - Branch String:   'cipher-chachapoly-libcrypto.c:47,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:48,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher-chachapoly-libcrypto.c:49,13'
              BranchSideFuncs:
                - calloc
                - EVP_CIPHER_CTX_new
                - EVP_CIPHER_CTX_new
                - EVP_chacha20
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - chachapoly_free
                - EVP_chacha20
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher-chachapoly-libcrypto.c:49,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:50,3'
              BranchSideFuncs: []
            - BranchSide:      'cipher-chachapoly-libcrypto.c:51,23'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_new
                - EVP_CIPHER_CTX_new
                - EVP_chacha20
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - chachapoly_free
                - EVP_chacha20
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher-chachapoly-libcrypto.c:51,53'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:52,25'
              BranchSideFuncs:
                - chachapoly_free
            - BranchSide:      'cipher-chachapoly-libcrypto.c:53,3'
              BranchSideFuncs:
                - chachapoly_free
        - Branch String:   'cipher-chachapoly-libcrypto.c:51,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:53,3'
              BranchSideFuncs:
                - chachapoly_free
            - BranchSide:      'cipher-chachapoly-libcrypto.c:54,22'
              BranchSideFuncs:
                - EVP_chacha20
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - chachapoly_free
                - EVP_chacha20
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher-chachapoly-libcrypto.c:54,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:55,3'
              BranchSideFuncs:
                - EVP_chacha20
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - chachapoly_free
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'cipher-chachapoly-libcrypto.c:56,22'
              BranchSideFuncs:
                - EVP_chacha20
                - EVP_CipherInit
                - __sanitizer_cov_trace_const_cmp4
                - chachapoly_free
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'cipher-chachapoly-libcrypto.c:56,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:57,3'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
                - chachapoly_free
            - BranchSide:      'cipher-chachapoly-libcrypto.c:58,31'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
                - chachapoly_free
        - Branch String:   'cipher-chachapoly-libcrypto.c:58,6'
          Branch Sides:
            - BranchSide:      'cipher-chachapoly-libcrypto.c:59,3'
              BranchSideFuncs:
                - chachapoly_free
            - BranchSide:      'cipher-chachapoly-libcrypto.c:60,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'cipher-chachapoly-libcrypto.c:49,13'
          Dst:             calloc
        - Src:             'cipher-chachapoly-libcrypto.c:51,23'
          Dst:             EVP_CIPHER_CTX_new
        - Src:             'cipher-chachapoly-libcrypto.c:52,25'
          Dst:             EVP_CIPHER_CTX_new
        - Src:             'cipher-chachapoly-libcrypto.c:54,37'
          Dst:             EVP_chacha20
        - Src:             'cipher-chachapoly-libcrypto.c:54,7'
          Dst:             EVP_CipherInit
        - Src:             'cipher-chachapoly-libcrypto.c:56,39'
          Dst:             EVP_chacha20
        - Src:             'cipher-chachapoly-libcrypto.c:56,7'
          Dst:             EVP_CipherInit
        - Src:             'cipher-chachapoly-libcrypto.c:58,6'
          Dst:             EVP_CIPHER_CTX_iv_length
        - Src:             'cipher-chachapoly-libcrypto.c:62,2'
          Dst:             chachapoly_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_chacha20
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_cipher_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_verify
      functionSourceFile: '/src/openssh/ssh-ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 209
      functionDepth:   0
      returnType:      'int '
      argCount:        8
      argTypes:
        - 'struct.sshkey *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'int '
        - 'struct.sshkey_sig_details **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         52
      ICount:          304
      EdgeCount:       72
      CyclomaticComplexity: 22
      functionsReached:
        - crypto_sign_ed25519_open
        - freezero
        - sshbuf_free
        - sshbuf_from
        - sshbuf_get_cstring
        - sshbuf_get_string_direct
        - sshbuf_len
        - sshkey_type_plain
        - sshlog
        - strcmp
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519.c:218,18'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:219,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:223,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519.c:219,50'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:220,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:223,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519.c:220,30'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:221,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:223,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519.c:221,50'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:222,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:223,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519.c:222,18'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:222,21'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:223,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519.c:218,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:223,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:225,23'
              BranchSideFuncs:
                - sshbuf_from
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519.c:225,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:226,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:227,30'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519.c:227,53'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:228,36'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-ed25519.c:229,3'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-ed25519.c:227,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:229,3'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-ed25519.c:230,28'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519.c:230,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:231,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-ed25519.c:234,17'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519.c:234,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:235,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-ed25519.c:238,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519.c:238,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:239,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-ed25519.c:242,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519.c:242,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:243,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-ed25519.c:246,10'
              BranchSideFuncs:
                - malloc
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519.c:248,35'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:248,50'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-ed25519.c:249,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-ed25519.c:248,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:249,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-ed25519.c:252,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - crypto_sign_ed25519_open
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
                - sshlog
        - Branch String:   'ssh-ed25519.c:254,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:256,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-ed25519.c:258,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_free
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-ed25519.c:258,15'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:258,18'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-ed25519.c:259,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-ed25519.c:258,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:259,5'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
            - BranchSide:      'ssh-ed25519.c:264,4'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
                - freezero
        - Branch String:   'ssh-ed25519.c:266,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:267,12'
              BranchSideFuncs:
                - freezero
                - sshbuf_free
                - free
                - freezero
            - BranchSide:      'ssh-ed25519.c:268,6'
              BranchSideFuncs:
                - sshbuf_free
                - free
                - freezero
        - Branch String:   'ssh-ed25519.c:268,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:269,12'
              BranchSideFuncs:
                - freezero
                - sshbuf_free
                - free
            - BranchSide:      'ssh-ed25519.c:270,14'
              BranchSideFuncs:
                - sshbuf_free
                - free
      Callsites:
        - Src:             'ssh-ed25519.c:219,6'
          Dst:             sshkey_type_plain
        - Src:             'ssh-ed25519.c:225,11'
          Dst:             sshbuf_from
        - Src:             'ssh-ed25519.c:227,11'
          Dst:             sshbuf_get_cstring
        - Src:             'ssh-ed25519.c:228,11'
          Dst:             sshbuf_get_string_direct
        - Src:             'ssh-ed25519.c:230,6'
          Dst:             strcmp
        - Src:             'ssh-ed25519.c:234,6'
          Dst:             sshbuf_len
        - Src:             'ssh-ed25519.c:254,13'
          Dst:             crypto_sign_ed25519_open
        - Src:             'ssh-ed25519.c:256,3'
          Dst:             sshlog
        - Src:             'ssh-ed25519.c:267,3'
          Dst:             freezero
        - Src:             'ssh-ed25519.c:269,3'
          Dst:             freezero
        - Src:             'ssh-ed25519.c:270,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_sign
      functionSourceFile: '/src/openssh/ssh-ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 150
      functionDepth:   0
      returnType:      'int '
      argCount:        9
      argTypes:
        - 'struct.sshkey *'
        - 'char **'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         45
      ICount:          261
      EdgeCount:       61
      CyclomaticComplexity: 18
      functionsReached:
        - crypto_sign_ed25519
        - freezero
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put_cstring
        - sshbuf_put_string
        - sshkey_type_plain
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519.c:157,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:158,4'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - malloc
                - crypto_sign_ed25519
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_free
                - freezero
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'ssh-ed25519.c:159,6'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - malloc
                - crypto_sign_ed25519
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_free
                - freezero
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ed25519.c:159,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:160,4'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - malloc
                - crypto_sign_ed25519
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_free
                - freezero
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'ssh-ed25519.c:162,6'
              BranchSideFuncs:
                - sshkey_type_plain
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - malloc
                - crypto_sign_ed25519
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_free
                - freezero
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ed25519.c:162,18'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:163,24'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:166,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519.c:163,50'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:164,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:166,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519.c:164,30'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:165,6'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:166,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519.c:162,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:166,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:167,17'
              BranchSideFuncs:
                - malloc
                - crypto_sign_ed25519
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_free
                - freezero
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ed25519.c:168,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:169,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:171,33'
              BranchSideFuncs:
                - crypto_sign_ed25519
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_free
                - freezero
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ed25519.c:172,29'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:172,32'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
            - BranchSide:      'ssh-ed25519.c:173,5'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
        - Branch String:   'ssh-ed25519.c:171,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:173,5'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
            - BranchSide:      'ssh-ed25519.c:177,11'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_free
                - freezero
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ed25519.c:177,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:178,5'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
            - BranchSide:      'ssh-ed25519.c:181,30'
              BranchSideFuncs:
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_free
                - freezero
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ed25519.c:181,54'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:182,29'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
            - BranchSide:      'ssh-ed25519.c:183,3'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
        - Branch String:   'ssh-ed25519.c:181,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:183,3'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
            - BranchSide:      'ssh-ed25519.c:184,19'
              BranchSideFuncs:
                - sshbuf_len
                - sshbuf_free
                - freezero
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ed25519.c:185,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:186,23'
              BranchSideFuncs:
                - malloc
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_free
                - freezero
            - BranchSide:      'ssh-ed25519.c:192,6'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
        - Branch String:   'ssh-ed25519.c:186,7'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:187,6'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
            - BranchSide:      'ssh-ed25519.c:190,11'
              BranchSideFuncs:
                - sshbuf_ptr
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_free
                - freezero
        - Branch String:   'ssh-ed25519.c:192,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:193,11'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
            - BranchSide:      'ssh-ed25519.c:195,4'
              BranchSideFuncs:
                - sshbuf_free
                - freezero
        - Branch String:   'ssh-ed25519.c:198,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:199,12'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-ed25519.c:201,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ed25519.c:163,6'
          Dst:             sshkey_type_plain
        - Src:             'ssh-ed25519.c:171,13'
          Dst:             crypto_sign_ed25519
        - Src:             'ssh-ed25519.c:177,11'
          Dst:             sshbuf_new
        - Src:             'ssh-ed25519.c:181,11'
          Dst:             sshbuf_put_cstring
        - Src:             'ssh-ed25519.c:182,11'
          Dst:             sshbuf_put_string
        - Src:             'ssh-ed25519.c:184,8'
          Dst:             sshbuf_len
        - Src:             'ssh-ed25519.c:190,17'
          Dst:             sshbuf_ptr
        - Src:             'ssh-ed25519.c:197,2'
          Dst:             sshbuf_free
        - Src:             'ssh-ed25519.c:199,3'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_copy_public
      functionSourceFile: '/src/openssh/ssh-ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 93
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          52
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519.c:94,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:95,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:96,24'
              BranchSideFuncs:
                - malloc
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'ssh-ed25519.c:96,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:97,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:98,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_generate
      functionSourceFile: '/src/openssh/ssh-ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 83
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          53
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - crypto_sign_ed25519_keypair
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519.c:84,54'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:85,23'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:86,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519.c:84,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:86,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:87,30'
              BranchSideFuncs:
                - crypto_sign_ed25519_keypair
      Callsites:
        - Src:             'ssh-ed25519.c:87,2'
          Dst:             crypto_sign_ed25519_keypair
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_deserialize_private
      functionSourceFile: '/src/openssh/ssh-ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 123
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         10
      ICount:          73
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - freezero
        - ssh_ed25519_deserialize_public
        - sshbuf_get_string
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519.c:128,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:129,3'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-ed25519.c:130,29'
              BranchSideFuncs:
                - sshbuf_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - freezero
        - Branch String:   'ssh-ed25519.c:130,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:131,3'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-ed25519.c:132,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - freezero
        - Branch String:   'ssh-ed25519.c:132,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:133,5'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-ed25519.c:136,20'
              BranchSideFuncs:
                - freezero
      Callsites:
        - Src:             'ssh-ed25519.c:128,11'
          Dst:             ssh_ed25519_deserialize_public
        - Src:             'ssh-ed25519.c:130,11'
          Dst:             sshbuf_get_string
        - Src:             'ssh-ed25519.c:141,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_deserialize_public
      functionSourceFile: '/src/openssh/ssh-ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 105
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.sshbuf *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          63
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - freezero
        - sshbuf_get_string
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ssh-ed25519.c:110,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:111,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:112,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - freezero
        - Branch String:   'ssh-ed25519.c:112,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:113,12'
              BranchSideFuncs:
                - freezero
            - BranchSide:      'ssh-ed25519.c:116,20'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ed25519.c:110,11'
          Dst:             sshbuf_get_string
        - Src:             'ssh-ed25519.c:113,3'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_serialize_private
      functionSourceFile: '/src/openssh/ssh-ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 71
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         9
      ICount:          58
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - sshbuf_put_string
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519.c:74,70'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:75,29'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:76,10'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519.c:74,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:76,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:78,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ed25519.c:74,11'
          Dst:             sshbuf_put_string
        - Src:             'ssh-ed25519.c:75,11'
          Dst:             sshbuf_put_string
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_serialize_public
      functionSourceFile: '/src/openssh/ssh-ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 57
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          54
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - sshbuf_put_string
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519.c:60,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:61,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:62,29'
              BranchSideFuncs:
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ed25519.c:62,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:63,10'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:65,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ed25519.c:62,11'
          Dst:             sshbuf_put_string
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_equal
      functionSourceFile: '/src/openssh/ssh-ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 46
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshkey *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          59
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - memcmp
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ssh-ed25519.c:47,28'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:47,31'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:48,3'
              BranchSideFuncs: []
        - Branch String:   'ssh-ed25519.c:47,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:48,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:49,13'
              BranchSideFuncs:
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ssh-ed25519.c:49,6'
          Branch Sides:
            - BranchSide:      'ssh-ed25519.c:50,3'
              BranchSideFuncs: []
            - BranchSide:      'ssh-ed25519.c:51,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ssh-ed25519.c:49,6'
          Dst:             memcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_ed25519_cleanup
      functionSourceFile: '/src/openssh/ssh-ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 37
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - freezero
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'ssh-ed25519.c:38,2'
          Dst:             freezero
        - Src:             'ssh-ed25519.c:39,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_digest_buffer
      functionSourceFile: '/src/openssh/digest-openssl.c'
      linkageType:     InternalLinkage
      functionLinenumber: 204
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'int '
        - 'struct.sshbuf *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          31
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_digest_memory
        - sshbuf_ptr
      functionUses:    6
      BranchProfiles:  []
      Callsites:
        - Src:             'digest-openssl.c:205,32'
          Dst:             sshbuf_ptr
        - Src:             'digest-openssl.c:205,47'
          Dst:             sshbuf_len
        - Src:             'digest-openssl.c:205,9'
          Dst:             ssh_digest_memory
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_digest_memory
      functionSourceFile: '/src/openssh/digest-openssl.c'
      linkageType:     InternalLinkage
      functionLinenumber: 186
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'int '
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          90
      EdgeCount:       16
      CyclomaticComplexity: 6
      functionsReached:
        - EVP_Digest
        - ssh_digest_by_alg
      functionUses:    15
      BranchProfiles:
        - Branch String:   'digest-openssl.c:190,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:191,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:192,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - EVP_Digest
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'digest-openssl.c:192,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:193,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:194,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_pc_indir
                - EVP_Digest
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'digest-openssl.c:194,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:195,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:196,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - EVP_Digest
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'digest-openssl.c:197,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:198,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:199,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'digest-openssl.c:187,36'
          Dst:             ssh_digest_by_alg
        - Src:             'digest-openssl.c:197,7'
          Dst:             EVP_Digest
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_digest_by_alg
      functionSourceFile: '/src/openssh/digest-openssl.c'
      linkageType:     InternalLinkage
      functionLinenumber: 69
      functionDepth:   0
      returnType:      'struct.ssh_digest *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         11
      ICount:          61
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached: []
      functionUses:    5
      BranchProfiles:
        - Branch String:   'digest-openssl.c:70,14'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:70,17'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:71,3'
              BranchSideFuncs: []
        - Branch String:   'digest-openssl.c:70,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:71,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:72,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'digest-openssl.c:72,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:73,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:74,14'
              BranchSideFuncs: []
        - Branch String:   'digest-openssl.c:74,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:75,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:76,19'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_Digest
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        6
      argTypes:
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'int *'
        - 'struct.evp_md_st *'
        - 'struct.engine_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_md5
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_md_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_sha1
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_md_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_sha256
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_md_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_sha384
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_md_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_sha512
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_md_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_digest_final
      functionSourceFile: '/src/openssh/digest-openssl.c'
      linkageType:     InternalLinkage
      functionLinenumber: 160
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh_digest_ctx *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         15
      ICount:          94
      EdgeCount:       20
      CyclomaticComplexity: 7
      functionsReached:
        - EVP_DigestFinal_ex
        - ssh_digest_by_alg
      functionUses:    4
      BranchProfiles:
        - Branch String:   'digest-openssl.c:164,21'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:164,24'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:165,3'
              BranchSideFuncs: []
        - Branch String:   'digest-openssl.c:164,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:165,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:166,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - EVP_DigestFinal_ex
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'digest-openssl.c:166,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:167,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:168,25'
              BranchSideFuncs:
                - EVP_DigestFinal_ex
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'digest-openssl.c:168,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:169,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:170,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'digest-openssl.c:170,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:171,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:172,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'digest-openssl.c:161,36'
          Dst:             ssh_digest_by_alg
        - Src:             'digest-openssl.c:168,6'
          Dst:             EVP_DigestFinal_ex
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_DigestFinal_ex
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.evp_md_ctx_st *'
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_digest_update_buffer
      functionSourceFile: '/src/openssh/digest-openssl.c'
      linkageType:     InternalLinkage
      functionLinenumber: 154
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh_digest_ctx *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          23
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_digest_update
        - sshbuf_ptr
      functionUses:    4
      BranchProfiles:  []
      Callsites:
        - Src:             'digest-openssl.c:155,32'
          Dst:             sshbuf_ptr
        - Src:             'digest-openssl.c:155,47'
          Dst:             sshbuf_len
        - Src:             'digest-openssl.c:155,9'
          Dst:             ssh_digest_update
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_digest_update
      functionSourceFile: '/src/openssh/digest-openssl.c'
      linkageType:     InternalLinkage
      functionLinenumber: 146
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh_digest_ctx *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          41
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - EVP_DigestUpdate
      functionUses:    9
      BranchProfiles:
        - Branch String:   'digest-openssl.c:147,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:148,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:149,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'digest-openssl.c:147,6'
          Dst:             EVP_DigestUpdate
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_DigestUpdate
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.evp_md_ctx_st *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_digest_copy_state
      functionSourceFile: '/src/openssh/digest-openssl.c'
      linkageType:     InternalLinkage
      functionLinenumber: 135
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh_digest_ctx *'
        - 'struct.ssh_digest_ctx *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          53
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - EVP_MD_CTX_copy_ex
      functionUses:    2
      BranchProfiles:
        - Branch String:   'digest-openssl.c:136,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:137,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:139,26'
              BranchSideFuncs:
                - EVP_MD_CTX_copy_ex
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'digest-openssl.c:139,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:140,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:141,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'digest-openssl.c:139,7'
          Dst:             EVP_MD_CTX_copy_ex
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_MD_CTX_copy_ex
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.evp_md_ctx_st *'
        - 'struct.evp_md_ctx_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_digest_free
      functionSourceFile: '/src/openssh/digest-openssl.c'
      linkageType:     InternalLinkage
      functionLinenumber: 177
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ssh_digest_ctx *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          32
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - EVP_MD_CTX_free
        - freezero
      functionUses:    7
      BranchProfiles:
        - Branch String:   'digest-openssl.c:178,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:179,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:180,18'
              BranchSideFuncs:
                - EVP_MD_CTX_free
                - freezero
      Callsites:
        - Src:             'digest-openssl.c:180,2'
          Dst:             EVP_MD_CTX_free
        - Src:             'digest-openssl.c:181,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_MD_CTX_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.evp_md_ctx_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_digest_start
      functionSourceFile: '/src/openssh/digest-openssl.c'
      linkageType:     InternalLinkage
      functionLinenumber: 115
      functionDepth:   0
      returnType:      'struct.ssh_digest_ctx *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         13
      ICount:          85
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - EVP_DigestInit_ex
        - EVP_MD_CTX_new
        - calloc
        - ssh_digest_by_alg
        - ssh_digest_free
      functionUses:    5
      BranchProfiles:
        - Branch String:   'digest-openssl.c:119,21'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:119,32'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:120,3'
              BranchSideFuncs: []
        - Branch String:   'digest-openssl.c:119,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:120,3'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:121,13'
              BranchSideFuncs:
                - EVP_MD_CTX_new
                - __sanitizer_cov_trace_pc_indir
                - EVP_DigestInit_ex
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_free
                - free
        - Branch String:   'digest-openssl.c:122,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:123,8'
              BranchSideFuncs:
                - free
            - BranchSide:      'digest-openssl.c:126,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - EVP_DigestInit_ex
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_free
        - Branch String:   'digest-openssl.c:126,6'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:127,19'
              BranchSideFuncs:
                - ssh_digest_free
            - BranchSide:      'digest-openssl.c:130,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'digest-openssl.c:116,36'
          Dst:             ssh_digest_by_alg
        - Src:             'digest-openssl.c:119,32'
          Dst:             calloc
        - Src:             'digest-openssl.c:122,20'
          Dst:             EVP_MD_CTX_new
        - Src:             'digest-openssl.c:126,6'
          Dst:             EVP_DigestInit_ex
        - Src:             'digest-openssl.c:127,3'
          Dst:             ssh_digest_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_MD_CTX_new
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_md_ctx_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_DigestInit_ex
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.evp_md_ctx_st *'
        - 'struct.evp_md_st *'
        - 'struct.engine_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_digest_blocksize
      functionSourceFile: '/src/openssh/digest-openssl.c'
      linkageType:     InternalLinkage
      functionLinenumber: 109
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'struct.ssh_digest_ctx *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - EVP_MD_CTX_md
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'digest-openssl.c:110,9'
          Dst:             EVP_MD_CTX_md
        - Src:             'digest-openssl.c:110,9'
          Dst:             EVP_MD_block_size
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_MD_CTX_md
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.evp_md_st *'
      argCount:        1
      argTypes:
        - 'struct.evp_md_ctx_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_MD_block_size
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.evp_md_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_digest_bytes
      functionSourceFile: '/src/openssh/digest-openssl.c'
      linkageType:     InternalLinkage
      functionLinenumber: 101
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          34
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - ssh_digest_by_alg
      functionUses:    20
      BranchProfiles:
        - Branch String:   'digest-openssl.c:104,9'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:104,9'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:104,30'
              BranchSideFuncs: []
      Callsites:
        - Src:             'digest-openssl.c:102,36'
          Dst:             ssh_digest_by_alg
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_digest_alg_name
      functionSourceFile: '/src/openssh/digest-openssl.c'
      linkageType:     InternalLinkage
      functionLinenumber: 93
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          34
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - ssh_digest_by_alg
      functionUses:    5
      BranchProfiles:
        - Branch String:   'digest-openssl.c:96,9'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:96,9'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:96,33'
              BranchSideFuncs: []
      Callsites:
        - Src:             'digest-openssl.c:94,36'
          Dst:             ssh_digest_by_alg
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_digest_alg_by_name
      functionSourceFile: '/src/openssh/digest-openssl.c'
      linkageType:     InternalLinkage
      functionLinenumber: 81
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          61
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - strcasecmp
      functionUses:    0
      BranchProfiles:
        - Branch String:   'digest-openssl.c:84,2'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:85,18'
              BranchSideFuncs:
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'digest-openssl.c:88,2'
              BranchSideFuncs: []
        - Branch String:   'digest-openssl.c:85,7'
          Branch Sides:
            - BranchSide:      'digest-openssl.c:86,19'
              BranchSideFuncs: []
            - BranchSide:      'digest-openssl.c:87,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strcasecmp
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'digest-openssl.c:85,7'
          Dst:             strcasecmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_hmac_final
      functionSourceFile: '/src/openssh/hmac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 108
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh_hmac_ctx *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         16
      ICount:          104
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - ssh_digest_bytes
        - ssh_digest_copy_state
        - ssh_digest_final
        - ssh_digest_update
      functionUses:    1
      BranchProfiles:
        - Branch String:   'hmac.c:112,17'
          Branch Sides:
            - BranchSide:      'hmac.c:113,23'
              BranchSideFuncs: []
            - BranchSide:      'hmac.c:114,3'
              BranchSideFuncs: []
        - Branch String:   'hmac.c:112,6'
          Branch Sides:
            - BranchSide:      'hmac.c:114,3'
              BranchSideFuncs: []
            - BranchSide:      'hmac.c:116,28'
              BranchSideFuncs:
                - ssh_digest_copy_state
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_final
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'hmac.c:116,56'
          Branch Sides:
            - BranchSide:      'hmac.c:117,24'
              BranchSideFuncs: []
            - BranchSide:      'hmac.c:119,3'
              BranchSideFuncs: []
        - Branch String:   'hmac.c:117,56'
          Branch Sides:
            - BranchSide:      'hmac.c:118,23'
              BranchSideFuncs: []
            - BranchSide:      'hmac.c:119,3'
              BranchSideFuncs: []
        - Branch String:   'hmac.c:116,6'
          Branch Sides:
            - BranchSide:      'hmac.c:119,3'
              BranchSideFuncs: []
            - BranchSide:      'hmac.c:120,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'hmac.c:111,8'
          Dst:             ssh_digest_bytes
        - Src:             'hmac.c:113,6'
          Dst:             ssh_digest_final
        - Src:             'hmac.c:116,6'
          Dst:             ssh_digest_copy_state
        - Src:             'hmac.c:117,6'
          Dst:             ssh_digest_update
        - Src:             'hmac.c:118,6'
          Dst:             ssh_digest_final
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_hmac_update_buffer
      functionSourceFile: '/src/openssh/hmac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 102
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh_hmac_ctx *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          22
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_digest_update_buffer
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'hmac.c:103,9'
          Dst:             ssh_digest_update_buffer
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_hmac_update
      functionSourceFile: '/src/openssh/hmac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 96
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh_hmac_ctx *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          26
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_digest_update
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'hmac.c:97,9'
          Dst:             ssh_digest_update
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_hmac_init
      functionSourceFile: '/src/openssh/hmac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 67
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh_hmac_ctx *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         26
      ICount:          193
      EdgeCount:       34
      CyclomaticComplexity: 10
      functionsReached:
        - explicit_bzero
        - ssh_digest_copy_state
        - ssh_digest_memory
        - ssh_digest_update
      functionUses:    2
      BranchProfiles:
        - Branch String:   'hmac.c:71,6'
          Branch Sides:
            - BranchSide:      'hmac.c:73,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - ssh_digest_copy_state
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'hmac.c:89,28'
              BranchSideFuncs:
                - ssh_digest_copy_state
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'hmac.c:73,7'
          Branch Sides:
            - BranchSide:      'hmac.c:74,11'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - ssh_digest_copy_state
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'hmac.c:75,30'
              BranchSideFuncs:
                - ssh_digest_memory
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - ssh_digest_copy_state
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'hmac.c:75,12'
          Branch Sides:
            - BranchSide:      'hmac.c:0,0'
              BranchSideFuncs: []
            - BranchSide:      'hmac.c:77,4'
              BranchSideFuncs: []
        - Branch String:   'hmac.c:78,3'
          Branch Sides:
            - BranchSide:      'hmac.c:79,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - ssh_digest_copy_state
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'hmac.c:80,25'
              BranchSideFuncs:
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - ssh_digest_copy_state
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'hmac.c:80,7'
          Branch Sides:
            - BranchSide:      'hmac.c:81,4'
              BranchSideFuncs: []
            - BranchSide:      'hmac.c:82,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - ssh_digest_copy_state
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'hmac.c:82,3'
          Branch Sides:
            - BranchSide:      'hmac.c:83,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - ssh_digest_copy_state
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'hmac.c:84,25'
              BranchSideFuncs:
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - ssh_digest_copy_state
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'hmac.c:84,7'
          Branch Sides:
            - BranchSide:      'hmac.c:85,4'
              BranchSideFuncs: []
            - BranchSide:      'hmac.c:86,18'
              BranchSideFuncs:
                - explicit_bzero
                - ssh_digest_copy_state
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'hmac.c:89,6'
          Branch Sides:
            - BranchSide:      'hmac.c:90,3'
              BranchSideFuncs: []
            - BranchSide:      'hmac.c:91,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'hmac.c:75,12'
          Dst:             ssh_digest_memory
        - Src:             'hmac.c:80,7'
          Dst:             ssh_digest_update
        - Src:             'hmac.c:84,7'
          Dst:             ssh_digest_update
        - Src:             'hmac.c:86,3'
          Dst:             explicit_bzero
        - Src:             'hmac.c:89,6'
          Dst:             ssh_digest_copy_state
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_hmac_free
      functionSourceFile: '/src/openssh/hmac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 125
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ssh_hmac_ctx *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          61
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - explicit_bzero
        - freezero
        - ssh_digest_free
      functionUses:    2
      BranchProfiles:
        - Branch String:   'hmac.c:126,6'
          Branch Sides:
            - BranchSide:      'hmac.c:126,6'
              BranchSideFuncs:
                - ssh_digest_free
                - ssh_digest_free
                - ssh_digest_free
                - freezero
                - explicit_bzero
                - free
            - BranchSide:      'hmac.c:127,19'
              BranchSideFuncs:
                - ssh_digest_free
                - ssh_digest_free
                - ssh_digest_free
                - freezero
                - explicit_bzero
                - free
        - Branch String:   'hmac.c:130,7'
          Branch Sides:
            - BranchSide:      'hmac.c:131,19'
              BranchSideFuncs:
                - explicit_bzero
                - free
                - freezero
            - BranchSide:      'hmac.c:134,12'
              BranchSideFuncs:
                - freezero
      Callsites:
        - Src:             'hmac.c:127,3'
          Dst:             ssh_digest_free
        - Src:             'hmac.c:128,3'
          Dst:             ssh_digest_free
        - Src:             'hmac.c:129,3'
          Dst:             ssh_digest_free
        - Src:             'hmac.c:131,4'
          Dst:             explicit_bzero
        - Src:             'hmac.c:134,3'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_hmac_start
      functionSourceFile: '/src/openssh/hmac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 46
      functionDepth:   0
      returnType:      'struct.ssh_hmac_ctx *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         16
      ICount:          97
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - calloc
        - ssh_digest_blocksize
        - ssh_digest_start
        - ssh_hmac_free
      functionUses:    1
      BranchProfiles:
        - Branch String:   'hmac.c:49,6'
          Branch Sides:
            - BranchSide:      'hmac.c:50,3'
              BranchSideFuncs: []
            - BranchSide:      'hmac.c:51,13'
              BranchSideFuncs:
                - ssh_digest_start
                - ssh_digest_start
                - ssh_digest_start
                - ssh_digest_blocksize
                - calloc
                - ssh_hmac_free
        - Branch String:   'hmac.c:52,50'
          Branch Sides:
            - BranchSide:      'hmac.c:53,36'
              BranchSideFuncs:
                - ssh_hmac_free
            - BranchSide:      'hmac.c:55,3'
              BranchSideFuncs:
                - ssh_hmac_free
        - Branch String:   'hmac.c:53,50'
          Branch Sides:
            - BranchSide:      'hmac.c:54,38'
              BranchSideFuncs:
                - ssh_hmac_free
            - BranchSide:      'hmac.c:55,3'
              BranchSideFuncs:
                - ssh_hmac_free
        - Branch String:   'hmac.c:52,6'
          Branch Sides:
            - BranchSide:      'hmac.c:55,3'
              BranchSideFuncs:
                - ssh_hmac_free
            - BranchSide:      'hmac.c:56,38'
              BranchSideFuncs:
                - ssh_digest_blocksize
                - calloc
                - ssh_hmac_free
        - Branch String:   'hmac.c:57,6'
          Branch Sides:
            - BranchSide:      'hmac.c:58,3'
              BranchSideFuncs:
                - ssh_hmac_free
            - BranchSide:      'hmac.c:59,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'hmac.c:49,13'
          Dst:             calloc
        - Src:             'hmac.c:52,19'
          Dst:             ssh_digest_start
        - Src:             'hmac.c:53,19'
          Dst:             ssh_digest_start
        - Src:             'hmac.c:54,21'
          Dst:             ssh_digest_start
        - Src:             'hmac.c:56,17'
          Dst:             ssh_digest_blocksize
        - Src:             'hmac.c:57,18'
          Dst:             calloc
        - Src:             'hmac.c:61,2'
          Dst:             ssh_hmac_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_hmac_bytes
      functionSourceFile: '/src/openssh/hmac.c'
      linkageType:     InternalLinkage
      functionLinenumber: 40
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          16
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_digest_bytes
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'hmac.c:41,9'
          Dst:             ssh_digest_bytes
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    p1p1_to_p2
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1660
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ge25519_p2 *'
        - 'struct.ge25519_p1p1 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          38
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_mul
      functionUses:    3
      BranchProfiles:  []
      Callsites:
        - Src:             'ed25519.c:1661,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1662,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1663,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_mul
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 315
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         19
      ICount:          136
      EdgeCount:       23
      CyclomaticComplexity: 6
      functionsReached:
        - reduce_mul
        - times38
      functionUses:    56
      BranchProfiles:
        - Branch String:   'ed25519.c:318,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:318,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - reduce_mul
                - times38
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:320,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - reduce_mul
                - times38
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:320,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:321,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - reduce_mul
                - times38
            - BranchSide:      'ed25519.c:324,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - reduce_mul
                - times38
        - Branch String:   'ed25519.c:321,5'
          Branch Sides:
            - BranchSide:      'ed25519.c:322,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - reduce_mul
                - times38
            - BranchSide:      'ed25519.c:322,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - reduce_mul
                - times38
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:324,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:325,20'
              BranchSideFuncs:
                - times38
                - __sanitizer_cov_trace_const_cmp4
                - reduce_mul
            - BranchSide:      'ed25519.c:326,14'
              BranchSideFuncs:
                - reduce_mul
      Callsites:
        - Src:             'ed25519.c:325,28'
          Dst:             times38
        - Src:             'ed25519.c:328,3'
          Dst:             reduce_mul
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    times38
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 157
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          15
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    reduce_mul
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 182
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         11
      ICount:          99
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - times19
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ed25519.c:186,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:188,9'
              BranchSideFuncs:
                - times19
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:199,1'
              BranchSideFuncs: []
        - Branch String:   'ed25519.c:192,5'
          Branch Sides:
            - BranchSide:      'ed25519.c:194,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - times19
            - BranchSide:      'ed25519.c:198,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - times19
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'ed25519.c:190,9'
          Dst:             times19
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    times19
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 152
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          14
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_sc25519_2interleave2
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 706
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         5
      ICount:          185
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ed25519.c:708,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:710,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:715,14'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    add_p1p1
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1696
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.ge25519_p1p1 *'
        - 'struct.ge25519_p1p1 *'
        - 'struct.ge25519_p1p1 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          76
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_add
        - crypto_sign_ed25519_ref_fe25519_mul
        - crypto_sign_ed25519_ref_fe25519_sub
      functionUses:    11
      BranchProfiles:  []
      Callsites:
        - Src:             'ed25519.c:1699,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
        - Src:             'ed25519.c:1700,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
        - Src:             'ed25519.c:1701,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1702,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
        - Src:             'ed25519.c:1703,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
        - Src:             'ed25519.c:1704,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1705,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1706,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1707,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1708,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
        - Src:             'ed25519.c:1709,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
        - Src:             'ed25519.c:1710,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
        - Src:             'ed25519.c:1711,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
        - Src:             'ed25519.c:1712,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_sub
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 304
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          99
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - fe25519_reduce_add_sub
      functionUses:    14
      BranchProfiles:
        - Branch String:   'ed25519.c:309,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:309,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - fe25519_reduce_add_sub
            - BranchSide:      'ed25519.c:310,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - fe25519_reduce_add_sub
        - Branch String:   'ed25519.c:310,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:310,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - fe25519_reduce_add_sub
            - BranchSide:      'ed25519.c:311,26'
              BranchSideFuncs:
                - fe25519_reduce_add_sub
      Callsites:
        - Src:             'ed25519.c:311,3'
          Dst:             fe25519_reduce_add_sub
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_add
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 297
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          60
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - fe25519_reduce_add_sub
      functionUses:    14
      BranchProfiles:
        - Branch String:   'ed25519.c:299,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:299,31'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - fe25519_reduce_add_sub
            - BranchSide:      'ed25519.c:300,26'
              BranchSideFuncs:
                - fe25519_reduce_add_sub
      Callsites:
        - Src:             'ed25519.c:300,3'
          Dst:             fe25519_reduce_add_sub
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fe25519_reduce_add_sub
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 162
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         11
      ICount:          99
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - times19
      functionUses:    2
      BranchProfiles:
        - Branch String:   'ed25519.c:166,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:168,9'
              BranchSideFuncs:
                - times19
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:179,1'
              BranchSideFuncs: []
        - Branch String:   'ed25519.c:172,5'
          Branch Sides:
            - BranchSide:      'ed25519.c:174,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - times19
            - BranchSide:      'ed25519.c:178,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - times19
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'ed25519.c:170,9'
          Dst:             times19
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    p1p1_to_p3
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1667
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ge25519_p1p1 *'
        - 'struct.ge25519_p1p1 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          28
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_mul
        - p1p1_to_p2
      functionUses:    15
      BranchProfiles:  []
      Callsites:
        - Src:             'ed25519.c:1668,3'
          Dst:             p1p1_to_p2
        - Src:             'ed25519.c:1669,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dbl_p1p1
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1717
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ge25519_p1p1 *'
        - 'struct.ge25519_p2 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          69
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_add
        - crypto_sign_ed25519_ref_fe25519_neg
        - crypto_sign_ed25519_ref_fe25519_square
        - crypto_sign_ed25519_ref_fe25519_sub
      functionUses:    5
      BranchProfiles:  []
      Callsites:
        - Src:             'ed25519.c:1719,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:1720,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:1721,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:1722,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
        - Src:             'ed25519.c:1723,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_neg
        - Src:             'ed25519.c:1725,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
        - Src:             'ed25519.c:1726,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:1727,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
        - Src:             'ed25519.c:1728,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
        - Src:             'ed25519.c:1729,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
        - Src:             'ed25519.c:1730,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
        - Src:             'ed25519.c:1731,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_square
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 332
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          21
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_mul
      functionUses:    67
      BranchProfiles:  []
      Callsites:
        - Src:             'ed25519.c:333,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_neg
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 288
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         7
      ICount:          54
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_setzero
        - crypto_sign_ed25519_ref_fe25519_sub
      functionUses:    3
      BranchProfiles:
        - Branch String:   'ed25519.c:291,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:291,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_setzero
                - crypto_sign_ed25519_ref_fe25519_sub
            - BranchSide:      'ed25519.c:292,19'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_setzero
                - crypto_sign_ed25519_ref_fe25519_sub
      Callsites:
        - Src:             'ed25519.c:292,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_setzero
        - Src:             'ed25519.c:293,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_setzero
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 282
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         5
      ICount:          32
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:
        - Branch String:   'ed25519.c:284,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:284,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:285,1'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    setneutral
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1773
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ge25519_p1p1 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          26
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_setone
        - crypto_sign_ed25519_ref_fe25519_setzero
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'ed25519.c:1774,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_setzero
        - Src:             'ed25519.c:1775,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_setone
        - Src:             'ed25519.c:1776,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_setone
        - Src:             'ed25519.c:1777,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_setzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_setone
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 275
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         5
      ICount:          36
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:
        - Branch String:   'ed25519.c:278,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:278,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:279,1'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_pack
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 227
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         7
      ICount:          54
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_freeze
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ed25519.c:231,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:232,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:233,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ed25519.c:230,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_freeze
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_freeze
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 203
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         11
      ICount:          102
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - fe25519_equal
        - ge
      functionUses:    5
      BranchProfiles:
        - Branch String:   'ed25519.c:206,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:207,24'
              BranchSideFuncs:
                - fe25519_equal
                - __sanitizer_cov_trace_const_cmp4
                - ge
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:208,11'
              BranchSideFuncs:
                - ge
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:213,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:214,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:215,14'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ed25519.c:205,21'
          Dst:             fe25519_equal
        - Src:             'ed25519.c:207,10'
          Dst:             fe25519_equal
        - Src:             'ed25519.c:208,8'
          Dst:             ge
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fe25519_equal
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 135
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          23
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ge
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 143
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          25
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_invert
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 337
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         27
      ICount:          178
      EdgeCount:       33
      CyclomaticComplexity: 8
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_mul
        - crypto_sign_ed25519_ref_fe25519_square
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ed25519.c:367,20'
          Branch Sides:
            - BranchSide:      'ed25519.c:367,48'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
            - BranchSide:      'ed25519.c:368,19'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
        - Branch String:   'ed25519.c:372,20'
          Branch Sides:
            - BranchSide:      'ed25519.c:372,48'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
            - BranchSide:      'ed25519.c:373,19'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
        - Branch String:   'ed25519.c:377,20'
          Branch Sides:
            - BranchSide:      'ed25519.c:377,48'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
            - BranchSide:      'ed25519.c:378,19'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
        - Branch String:   'ed25519.c:382,21'
          Branch Sides:
            - BranchSide:      'ed25519.c:382,49'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
            - BranchSide:      'ed25519.c:383,20'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
        - Branch String:   'ed25519.c:387,22'
          Branch Sides:
            - BranchSide:      'ed25519.c:387,51'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
            - BranchSide:      'ed25519.c:388,20'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
        - Branch String:   'ed25519.c:392,21'
          Branch Sides:
            - BranchSide:      'ed25519.c:392,49'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
            - BranchSide:      'ed25519.c:393,20'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
      Callsites:
        - Src:             'ed25519.c:350,10'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:351,10'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:352,10'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:353,10'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:354,11'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:355,11'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:356,23'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:358,18'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:359,18'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:360,18'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:361,18'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:362,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:363,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:365,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:366,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:367,48'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:367,73'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:368,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:370,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:371,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:372,48'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:372,73'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:373,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:375,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:376,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:377,48'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:377,73'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:378,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:380,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:381,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:382,49'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:382,74'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:383,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:385,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:386,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:387,51'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:387,76'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:388,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:390,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:391,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:392,49'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:392,74'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:393,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:395,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:396,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:397,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:398,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:399,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:400,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    negative
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1753
      functionDepth:   0
      returnType:      'char '
      argCount:        1
      argTypes:
        - 'char '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          17
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_cmov
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 260
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'char '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         5
      ICount:          63
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:
        - Branch String:   'ed25519.c:264,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:264,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:265,1'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    equal
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1742
      functionDepth:   0
      returnType:      'char '
      argCount:        2
      argTypes:
        - 'char '
        - 'char '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          40
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cmov_aff
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1736
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.ge25519_aff *'
        - 'struct.ge25519_aff *'
        - 'char '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          32
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_cmov
      functionUses:    4
      BranchProfiles:  []
      Callsites:
        - Src:             'ed25519.c:1737,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_cmov
        - Src:             'ed25519.c:1738,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_cmov
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ge25519_mixadd2
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1673
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ge25519_p1p1 *'
        - 'struct.ge25519_aff *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          91
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_add
        - crypto_sign_ed25519_ref_fe25519_mul
        - crypto_sign_ed25519_ref_fe25519_sub
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'ed25519.c:1675,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1676,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
        - Src:             'ed25519.c:1677,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
        - Src:             'ed25519.c:1678,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
        - Src:             'ed25519.c:1679,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
        - Src:             'ed25519.c:1680,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1681,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1682,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
        - Src:             'ed25519.c:1683,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
        - Src:             'ed25519.c:1684,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1685,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1686,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
        - Src:             'ed25519.c:1687,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
        - Src:             'ed25519.c:1688,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
        - Src:             'ed25519.c:1689,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1690,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1691,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1692,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    choose_t
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1760
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.ge25519_aff *'
        - 'size_t '
        - 'char '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          88
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_neg
        - equal
        - negative
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'ed25519.c:1764,55'
          Dst:             equal
        - Src:             'ed25519.c:1764,68'
          Dst:             equal
        - Src:             'ed25519.c:1764,3'
          Dst:             cmov_aff
        - Src:             'ed25519.c:1765,55'
          Dst:             equal
        - Src:             'ed25519.c:1765,68'
          Dst:             equal
        - Src:             'ed25519.c:1765,3'
          Dst:             cmov_aff
        - Src:             'ed25519.c:1766,55'
          Dst:             equal
        - Src:             'ed25519.c:1766,68'
          Dst:             equal
        - Src:             'ed25519.c:1766,3'
          Dst:             cmov_aff
        - Src:             'ed25519.c:1767,55'
          Dst:             equal
        - Src:             'ed25519.c:1767,3'
          Dst:             cmov_aff
        - Src:             'ed25519.c:1768,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_neg
        - Src:             'ed25519.c:1769,27'
          Dst:             negative
        - Src:             'ed25519.c:1769,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_cmov
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_sc25519_window3
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 668
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          408
      EdgeCount:       10
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ed25519.c:671,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:673,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:684,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:693,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:695,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:701,12'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sc25519_reduce_add_sub
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 532
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         11
      ICount:          115
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - lt
      functionUses:    3
      BranchProfiles:
        - Branch String:   'ed25519.c:539,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:541,21'
              BranchSideFuncs:
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:546,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:547,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:548,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:549,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ed25519.c:542,9'
          Dst:             lt
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    lt
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 523
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          22
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    barrett_reduce
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 553
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         45
      ICount:          323
      EdgeCount:       56
      CyclomaticComplexity: 13
      functionsReached:
        - lt
        - sc25519_reduce_add_sub
      functionUses:    3
      BranchProfiles:
        - Branch String:   'ed25519.c:564,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:564,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:565,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:565,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:565,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:567,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:567,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:568,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:570,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:568,5'
          Branch Sides:
            - BranchSide:      'ed25519.c:569,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:569,52'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:569,10'
          Branch Sides:
            - BranchSide:      'ed25519.c:569,43'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:569,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:575,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:575,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:576,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:576,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:577,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:580,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
        - Branch String:   'ed25519.c:577,5'
          Branch Sides:
            - BranchSide:      'ed25519.c:578,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
            - BranchSide:      'ed25519.c:578,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:578,10'
          Branch Sides:
            - BranchSide:      'ed25519.c:578,41'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:578,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:580,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:582,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
            - BranchSide:      'ed25519.c:587,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
                - lt
        - Branch String:   'ed25519.c:587,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:589,14'
              BranchSideFuncs:
                - lt
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
            - BranchSide:      'ed25519.c:599,26'
              BranchSideFuncs:
                - sc25519_reduce_add_sub
                - sc25519_reduce_add_sub
      Callsites:
        - Src:             'ed25519.c:590,9'
          Dst:             lt
        - Src:             'ed25519.c:599,3'
          Dst:             sc25519_reduce_add_sub
        - Src:             'ed25519.c:600,3'
          Dst:             sc25519_reduce_add_sub
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_verify_32
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 30
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          402
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_double_scalarmult_vartime
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1852
      functionDepth:   0
      returnType:      'N/A'
      argCount:        5
      argTypes:
        - 'struct.ge25519_p1p1 *'
        - 'struct.ge25519_p1p1 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.ge25519_p1p1 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         13
      ICount:          192
      EdgeCount:       16
      CyclomaticComplexity: 5
      functionsReached:
        - add_p1p1
        - crypto_sign_ed25519_ref_sc25519_2interleave2
        - dbl_p1p1
        - p1p1_to_p2
        - p1p1_to_p3
        - setneutral
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ed25519.c:1880,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:1882,36'
              BranchSideFuncs:
                - dbl_p1p1
                - p1p1_to_p2
                - dbl_p1p1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - p1p1_to_p3
                - __sanitizer_cov_trace_const_cmp4
                - p1p1_to_p2
                - p1p1_to_p3
                - add_p1p1
            - BranchSide:      'ed25519.c:1893,1'
              BranchSideFuncs: []
        - Branch String:   'ed25519.c:1885,8'
          Branch Sides:
            - BranchSide:      'ed25519.c:1887,18'
              BranchSideFuncs:
                - p1p1_to_p3
                - add_p1p1
                - __sanitizer_cov_trace_const_cmp4
                - p1p1_to_p3
                - __sanitizer_cov_trace_const_cmp4
                - dbl_p1p1
                - p1p1_to_p2
                - dbl_p1p1
                - __sanitizer_cov_trace_const_cmp4
                - p1p1_to_p2
            - BranchSide:      'ed25519.c:1890,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - p1p1_to_p3
                - __sanitizer_cov_trace_const_cmp4
                - dbl_p1p1
                - p1p1_to_p2
                - dbl_p1p1
                - __sanitizer_cov_trace_const_cmp4
                - p1p1_to_p3
                - add_p1p1
                - p1p1_to_p2
        - Branch String:   'ed25519.c:1890,8'
          Branch Sides:
            - BranchSide:      'ed25519.c:1890,41'
              BranchSideFuncs:
                - p1p1_to_p2
                - __sanitizer_cov_trace_const_cmp4
                - dbl_p1p1
                - p1p1_to_p2
                - dbl_p1p1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - p1p1_to_p3
                - p1p1_to_p3
                - add_p1p1
            - BranchSide:      'ed25519.c:1891,21'
              BranchSideFuncs:
                - p1p1_to_p3
                - __sanitizer_cov_trace_const_cmp4
                - dbl_p1p1
                - p1p1_to_p2
                - dbl_p1p1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - p1p1_to_p2
                - p1p1_to_p3
                - add_p1p1
      Callsites:
        - Src:             'ed25519.c:1859,3'
          Dst:             setneutral
        - Src:             'ed25519.c:1861,3'
          Dst:             dbl_p1p1
        - Src:             'ed25519.c:1861,43'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1862,3'
          Dst:             add_p1p1
        - Src:             'ed25519.c:1862,43'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1864,3'
          Dst:             add_p1p1
        - Src:             'ed25519.c:1864,43'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1865,3'
          Dst:             add_p1p1
        - Src:             'ed25519.c:1865,43'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1866,3'
          Dst:             add_p1p1
        - Src:             'ed25519.c:1866,43'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1867,3'
          Dst:             dbl_p1p1
        - Src:             'ed25519.c:1867,43'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1868,3'
          Dst:             add_p1p1
        - Src:             'ed25519.c:1868,43'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1869,3'
          Dst:             dbl_p1p1
        - Src:             'ed25519.c:1869,43'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1870,3'
          Dst:             add_p1p1
        - Src:             'ed25519.c:1870,43'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1871,3'
          Dst:             add_p1p1
        - Src:             'ed25519.c:1871,43'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1872,3'
          Dst:             add_p1p1
        - Src:             'ed25519.c:1872,43'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1873,3'
          Dst:             add_p1p1
        - Src:             'ed25519.c:1873,43'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1874,3'
          Dst:             add_p1p1
        - Src:             'ed25519.c:1874,43'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1876,3'
          Dst:             crypto_sign_ed25519_ref_sc25519_2interleave2
        - Src:             'ed25519.c:1882,5'
          Dst:             dbl_p1p1
        - Src:             'ed25519.c:1883,5'
          Dst:             p1p1_to_p2
        - Src:             'ed25519.c:1884,5'
          Dst:             dbl_p1p1
        - Src:             'ed25519.c:1887,7'
          Dst:             p1p1_to_p3
        - Src:             'ed25519.c:1888,7'
          Dst:             add_p1p1
        - Src:             'ed25519.c:1890,16'
          Dst:             p1p1_to_p2
        - Src:             'ed25519.c:1891,10'
          Dst:             p1p1_to_p3
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_open
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1993
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'char *'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         13
      ICount:          137
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - crypto_hash_sha512
        - crypto_sign_ed25519_ref_double_scalarmult_vartime
        - crypto_sign_ed25519_ref_pack
        - crypto_sign_ed25519_ref_sc25519_from32bytes
        - crypto_sign_ed25519_ref_sc25519_from64bytes
        - crypto_sign_ed25519_ref_unpackneg_vartime
        - crypto_verify_32
        - memset
      functionUses:    2
      BranchProfiles:
        - Branch String:   'ed25519.c:2001,7'
          Branch Sides:
            - BranchSide:      'ed25519.c:2001,19'
              BranchSideFuncs:
                - memset
            - BranchSide:      'ed25519.c:2002,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_unpackneg_vartime
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memmove.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - crypto_sign_ed25519_ref_sc25519_from32bytes
                - llvm.memmove.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - crypto_hash_sha512
                - crypto_sign_ed25519_ref_sc25519_from64bytes
                - crypto_sign_ed25519_ref_double_scalarmult_vartime
                - crypto_sign_ed25519_ref_pack
                - crypto_verify_32
                - __sanitizer_cov_trace_const_cmp4
                - memset
                - llvm.memmove.p0i8.p0i8.i64
                - memset
        - Branch String:   'ed25519.c:2002,7'
          Branch Sides:
            - BranchSide:      'ed25519.c:2002,21'
              BranchSideFuncs:
                - memset
            - BranchSide:      'ed25519.c:2003,39'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_unpackneg_vartime
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memmove.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - crypto_sign_ed25519_ref_sc25519_from32bytes
                - llvm.memmove.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - crypto_hash_sha512
                - crypto_sign_ed25519_ref_sc25519_from64bytes
                - crypto_sign_ed25519_ref_double_scalarmult_vartime
                - crypto_sign_ed25519_ref_pack
                - crypto_verify_32
                - __sanitizer_cov_trace_const_cmp4
                - memset
                - llvm.memmove.p0i8.p0i8.i64
                - memset
        - Branch String:   'ed25519.c:2003,7'
          Branch Sides:
            - BranchSide:      'ed25519.c:2003,44'
              BranchSideFuncs:
                - memset
            - BranchSide:      'ed25519.c:2005,3'
              BranchSideFuncs:
                - llvm.memmove.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - crypto_sign_ed25519_ref_sc25519_from32bytes
                - llvm.memmove.p0i8.p0i8.i64
                - llvm.memmove.p0i8.p0i8.i64
                - crypto_hash_sha512
                - crypto_sign_ed25519_ref_sc25519_from64bytes
                - crypto_sign_ed25519_ref_double_scalarmult_vartime
                - crypto_sign_ed25519_ref_pack
                - crypto_verify_32
                - __sanitizer_cov_trace_const_cmp4
                - memset
                - llvm.memmove.p0i8.p0i8.i64
                - memset
        - Branch String:   'ed25519.c:2019,7'
          Branch Sides:
            - BranchSide:      'ed25519.c:2019,41'
              BranchSideFuncs:
                - llvm.memmove.p0i8.p0i8.i64
                - memset
            - BranchSide:      'ed25519.c:2020,13'
              BranchSideFuncs:
                - llvm.memmove.p0i8.p0i8.i64
                - memset
      Callsites:
        - Src:             'ed25519.c:2003,7'
          Dst:             crypto_sign_ed25519_ref_unpackneg_vartime
        - Src:             'ed25519.c:2008,3'
          Dst:             crypto_sign_ed25519_ref_sc25519_from32bytes
        - Src:             'ed25519.c:2012,3'
          Dst:             crypto_hash_sha512
        - Src:             'ed25519.c:2014,3'
          Dst:             crypto_sign_ed25519_ref_sc25519_from64bytes
        - Src:             'ed25519.c:2016,3'
          Dst:             crypto_sign_ed25519_ref_double_scalarmult_vartime
        - Src:             'ed25519.c:2017,3'
          Dst:             crypto_sign_ed25519_ref_pack
        - Src:             'ed25519.c:2019,7'
          Dst:             crypto_verify_32
        - Src:             'ed25519.c:2021,5'
          Dst:             memset
        - Src:             'ed25519.c:2028,3'
          Dst:             memset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_unpackneg_vartime
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1786
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ge25519_p1p1 *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         12
      ICount:          137
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_add
        - crypto_sign_ed25519_ref_fe25519_getparity
        - crypto_sign_ed25519_ref_fe25519_iseq_vartime
        - crypto_sign_ed25519_ref_fe25519_mul
        - crypto_sign_ed25519_ref_fe25519_neg
        - crypto_sign_ed25519_ref_fe25519_pow2523
        - crypto_sign_ed25519_ref_fe25519_setone
        - crypto_sign_ed25519_ref_fe25519_square
        - crypto_sign_ed25519_ref_fe25519_sub
        - crypto_sign_ed25519_ref_fe25519_unpack
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ed25519.c:1815,7'
          Branch Sides:
            - BranchSide:      'ed25519.c:1816,18'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_iseq_vartime
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_getparity
                - __sanitizer_cov_trace_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_neg
            - BranchSide:      'ed25519.c:1819,25'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_iseq_vartime
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_getparity
                - __sanitizer_cov_trace_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_neg
        - Branch String:   'ed25519.c:1821,7'
          Branch Sides:
            - BranchSide:      'ed25519.c:1822,5'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_getparity
                - __sanitizer_cov_trace_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_neg
            - BranchSide:      'ed25519.c:1825,25'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_getparity
                - __sanitizer_cov_trace_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_neg
        - Branch String:   'ed25519.c:1825,6'
          Branch Sides:
            - BranchSide:      'ed25519.c:1826,18'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_neg
                - crypto_sign_ed25519_ref_fe25519_mul
            - BranchSide:      'ed25519.c:1828,16'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
      Callsites:
        - Src:             'ed25519.c:1789,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_setone
        - Src:             'ed25519.c:1791,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_unpack
        - Src:             'ed25519.c:1792,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:1793,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1794,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_sub
        - Src:             'ed25519.c:1795,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_add
        - Src:             'ed25519.c:1799,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:1800,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:1801,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1802,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1803,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1805,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_pow2523
        - Src:             'ed25519.c:1807,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1808,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1809,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1810,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1813,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:1814,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1815,8'
          Dst:             crypto_sign_ed25519_ref_fe25519_iseq_vartime
        - Src:             'ed25519.c:1816,5'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1819,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:1820,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1821,8'
          Dst:             crypto_sign_ed25519_ref_fe25519_iseq_vartime
        - Src:             'ed25519.c:1825,6'
          Dst:             crypto_sign_ed25519_ref_fe25519_getparity
        - Src:             'ed25519.c:1826,5'
          Dst:             crypto_sign_ed25519_ref_fe25519_neg
        - Src:             'ed25519.c:1828,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_sc25519_from32bytes
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 604
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          69
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - barrett_reduce
      functionUses:    3
      BranchProfiles:
        - Branch String:   'ed25519.c:607,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:607,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - barrett_reduce
            - BranchSide:      'ed25519.c:608,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - barrett_reduce
        - Branch String:   'ed25519.c:608,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:608,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - barrett_reduce
            - BranchSide:      'ed25519.c:609,18'
              BranchSideFuncs:
                - barrett_reduce
      Callsites:
        - Src:             'ed25519.c:609,3'
          Dst:             barrett_reduce
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_sc25519_from64bytes
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 614
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         7
      ICount:          51
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - barrett_reduce
      functionUses:    3
      BranchProfiles:
        - Branch String:   'ed25519.c:617,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:617,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - barrett_reduce
            - BranchSide:      'ed25519.c:618,18'
              BranchSideFuncs:
                - barrett_reduce
      Callsites:
        - Src:             'ed25519.c:618,3'
          Dst:             barrett_reduce
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_pack
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1833
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'struct.ge25519_p1p1 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          44
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_getparity
        - crypto_sign_ed25519_ref_fe25519_invert
        - crypto_sign_ed25519_ref_fe25519_mul
        - crypto_sign_ed25519_ref_fe25519_pack
      functionUses:    3
      BranchProfiles:  []
      Callsites:
        - Src:             'ed25519.c:1835,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_invert
        - Src:             'ed25519.c:1836,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1837,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1838,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_pack
        - Src:             'ed25519.c:1839,12'
          Dst:             crypto_sign_ed25519_ref_fe25519_getparity
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_getparity
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 268
      functionDepth:   0
      returnType:      'char '
      argCount:        1
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          26
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_freeze
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'ed25519.c:270,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_freeze
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_unpack
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 219
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         5
      ICount:          47
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ed25519.c:221,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:221,31'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:222,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_pow2523
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 404
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         31
      ICount:          173
      EdgeCount:       38
      CyclomaticComplexity: 9
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_mul
        - crypto_sign_ed25519_ref_fe25519_square
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ed25519.c:425,19'
          Branch Sides:
            - BranchSide:      'ed25519.c:425,43'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
            - BranchSide:      'ed25519.c:426,19'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
        - Branch String:   'ed25519.c:429,20'
          Branch Sides:
            - BranchSide:      'ed25519.c:429,45'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
            - BranchSide:      'ed25519.c:430,19'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
        - Branch String:   'ed25519.c:433,20'
          Branch Sides:
            - BranchSide:      'ed25519.c:433,45'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
            - BranchSide:      'ed25519.c:434,19'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
        - Branch String:   'ed25519.c:437,20'
          Branch Sides:
            - BranchSide:      'ed25519.c:437,45'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
            - BranchSide:      'ed25519.c:438,19'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
        - Branch String:   'ed25519.c:441,21'
          Branch Sides:
            - BranchSide:      'ed25519.c:441,46'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
            - BranchSide:      'ed25519.c:442,20'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
        - Branch String:   'ed25519.c:445,22'
          Branch Sides:
            - BranchSide:      'ed25519.c:445,48'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
            - BranchSide:      'ed25519.c:446,20'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
        - Branch String:   'ed25519.c:449,21'
          Branch Sides:
            - BranchSide:      'ed25519.c:449,46'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_square
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
            - BranchSide:      'ed25519.c:450,20'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_mul
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_square
                - crypto_sign_ed25519_ref_fe25519_mul
      Callsites:
        - Src:             'ed25519.c:416,10'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:417,10'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:418,10'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:419,10'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:420,11'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:421,11'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:422,23'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:424,18'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:425,43'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:426,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:428,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:429,45'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:430,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:432,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:433,45'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:434,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:436,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:437,45'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:438,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:440,19'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:441,46'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:442,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:444,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:445,48'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:446,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:448,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:449,46'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:450,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:452,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:453,20'
          Dst:             crypto_sign_ed25519_ref_fe25519_square
        - Src:             'ed25519.c:454,18'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_iseq_vartime
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 248
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         10
      ICount:          72
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_freeze
      functionUses:    3
      BranchProfiles:
        - Branch String:   'ed25519.c:254,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:255,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:256,3'
              BranchSideFuncs: []
        - Branch String:   'ed25519.c:255,8'
          Branch Sides:
            - BranchSide:      'ed25519.c:255,28'
              BranchSideFuncs: []
            - BranchSide:      'ed25519.c:255,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
      Callsites:
        - Src:             'ed25519.c:252,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_freeze
        - Src:             'ed25519.c:253,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_freeze
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_sc25519_to32bytes
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 623
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         5
      ICount:          41
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ed25519.c:625,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:625,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:626,1'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_sc25519_add
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 632
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          102
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - sc25519_reduce_add_sub
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ed25519.c:634,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:634,31'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
            - BranchSide:      'ed25519.c:635,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
        - Branch String:   'ed25519.c:635,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:637,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sc25519_reduce_add_sub
            - BranchSide:      'ed25519.c:641,26'
              BranchSideFuncs:
                - sc25519_reduce_add_sub
      Callsites:
        - Src:             'ed25519.c:641,3'
          Dst:             sc25519_reduce_add_sub
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_sc25519_mul
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 646
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         19
      ICount:          135
      EdgeCount:       23
      CyclomaticComplexity: 6
      functionsReached:
        - barrett_reduce
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ed25519.c:649,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:649,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - barrett_reduce
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:651,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - barrett_reduce
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:651,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:652,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - barrett_reduce
            - BranchSide:      'ed25519.c:656,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - barrett_reduce
        - Branch String:   'ed25519.c:652,5'
          Branch Sides:
            - BranchSide:      'ed25519.c:653,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - barrett_reduce
            - BranchSide:      'ed25519.c:653,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - barrett_reduce
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:656,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:658,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - barrett_reduce
            - BranchSide:      'ed25519.c:663,18'
              BranchSideFuncs:
                - barrett_reduce
      Callsites:
        - Src:             'ed25519.c:663,3'
          Dst:             barrett_reduce
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1939
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'char *'
        - 'size_t *'
        - 'char *'
        - 'size_t '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          110
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - crypto_hash_sha512
        - crypto_sign_ed25519_ref_pack
        - crypto_sign_ed25519_ref_sc25519_add
        - crypto_sign_ed25519_ref_sc25519_from32bytes
        - crypto_sign_ed25519_ref_sc25519_from64bytes
        - crypto_sign_ed25519_ref_sc25519_mul
        - crypto_sign_ed25519_ref_sc25519_to32bytes
        - crypto_sign_ed25519_ref_scalarmult_base
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'ed25519.c:1950,3'
          Dst:             crypto_hash_sha512
        - Src:             'ed25519.c:1961,3'
          Dst:             crypto_hash_sha512
        - Src:             'ed25519.c:1964,3'
          Dst:             crypto_sign_ed25519_ref_sc25519_from64bytes
        - Src:             'ed25519.c:1965,3'
          Dst:             crypto_sign_ed25519_ref_scalarmult_base
        - Src:             'ed25519.c:1966,3'
          Dst:             crypto_sign_ed25519_ref_pack
        - Src:             'ed25519.c:1972,3'
          Dst:             crypto_hash_sha512
        - Src:             'ed25519.c:1975,3'
          Dst:             crypto_sign_ed25519_ref_sc25519_from64bytes
        - Src:             'ed25519.c:1976,3'
          Dst:             crypto_sign_ed25519_ref_sc25519_from32bytes
        - Src:             'ed25519.c:1977,3'
          Dst:             crypto_sign_ed25519_ref_sc25519_mul
        - Src:             'ed25519.c:1978,3'
          Dst:             crypto_sign_ed25519_ref_sc25519_add
        - Src:             'ed25519.c:1981,3'
          Dst:             crypto_sign_ed25519_ref_sc25519_to32bytes
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_scalarmult_base
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1896
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ge25519_p1p1 *'
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         7
      ICount:          67
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - choose_t
        - crypto_sign_ed25519_ref_fe25519_mul
        - crypto_sign_ed25519_ref_fe25519_setone
        - crypto_sign_ed25519_ref_sc25519_window3
        - ge25519_mixadd2
      functionUses:    2
      BranchProfiles:
        - Branch String:   'ed25519.c:1905,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:1907,39'
              BranchSideFuncs:
                - choose_t
                - ge25519_mixadd2
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:1910,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ed25519.c:1900,3'
          Dst:             crypto_sign_ed25519_ref_sc25519_window3
        - Src:             'ed25519.c:1902,3'
          Dst:             choose_t
        - Src:             'ed25519.c:1903,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_setone
        - Src:             'ed25519.c:1904,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_mul
        - Src:             'ed25519.c:1907,5'
          Dst:             choose_t
        - Src:             'ed25519.c:1908,5'
          Dst:             ge25519_mixadd2
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_keypair
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1914
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          55
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - arc4random_buf
        - crypto_hash_sha512
        - crypto_sign_ed25519_ref_pack
        - crypto_sign_ed25519_ref_sc25519_from32bytes
        - crypto_sign_ed25519_ref_scalarmult_base
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'ed25519.c:1919,3'
          Dst:             arc4random_buf
        - Src:             'ed25519.c:1920,3'
          Dst:             crypto_hash_sha512
        - Src:             'ed25519.c:1925,3'
          Dst:             crypto_sign_ed25519_ref_sc25519_from32bytes
        - Src:             'ed25519.c:1927,3'
          Dst:             crypto_sign_ed25519_ref_scalarmult_base
        - Src:             'ed25519.c:1928,3'
          Dst:             crypto_sign_ed25519_ref_pack
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_fe25519_iszero
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 236
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.crypto_sign_ed25519_ref_fe25519 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         7
      ICount:          57
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_freeze
        - fe25519_equal
      functionUses:    1
      BranchProfiles:
        - Branch String:   'ed25519.c:242,3'
          Branch Sides:
            - BranchSide:      'ed25519.c:243,26'
              BranchSideFuncs:
                - fe25519_equal
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:244,10'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ed25519.c:240,3'
          Dst:             crypto_sign_ed25519_ref_fe25519_freeze
        - Src:             'ed25519.c:241,7'
          Dst:             fe25519_equal
        - Src:             'ed25519.c:243,10'
          Dst:             fe25519_equal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sign_ed25519_ref_isneutral_vartime
      functionSourceFile: '/src/openssh/ed25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1843
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ge25519_p1p1 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          50
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - crypto_sign_ed25519_ref_fe25519_iseq_vartime
        - crypto_sign_ed25519_ref_fe25519_iszero
      functionUses:    0
      BranchProfiles:
        - Branch String:   'ed25519.c:1845,6'
          Branch Sides:
            - BranchSide:      'ed25519.c:1845,34'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_iseq_vartime
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'ed25519.c:1846,29'
              BranchSideFuncs:
                - crypto_sign_ed25519_ref_fe25519_iseq_vartime
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'ed25519.c:1846,6'
          Branch Sides:
            - BranchSide:      'ed25519.c:1846,6'
              BranchSideFuncs: []
            - BranchSide:      'ed25519.c:1846,47'
              BranchSideFuncs: []
      Callsites:
        - Src:             'ed25519.c:1845,7'
          Dst:             crypto_sign_ed25519_ref_fe25519_iszero
        - Src:             'ed25519.c:1846,7'
          Dst:             crypto_sign_ed25519_ref_fe25519_iseq_vartime
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_hash_sha512
      functionSourceFile: '/src/openssh/hash.c'
      linkageType:     InternalLinkage
      functionLinenumber: 19
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          40
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - EVP_sha512
      functionUses:    9
      BranchProfiles:
        - Branch String:   'hash.c:21,6'
          Branch Sides:
            - BranchSide:      'hash.c:22,3'
              BranchSideFuncs: []
            - BranchSide:      'hash.c:23,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'hash.c:21,40'
          Dst:             EVP_sha512
        - Src:             'hash.c:21,7'
          Dst:             EVP_Digest
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    proposals_match
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 941
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char **'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         16
      ICount:          118
      EdgeCount:       20
      CyclomaticComplexity: 6
      functionsReached:
        - sshlog
        - strchr
        - strcmp
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kex.c:948,2'
          Branch Sides:
            - BranchSide:      'kex.c:949,19'
              BranchSideFuncs:
                - strchr
                - strchr
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
            - BranchSide:      'kex.c:959,2'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'kex.c:949,7'
          Branch Sides:
            - BranchSide:      'kex.c:950,5'
              BranchSideFuncs:
                - strchr
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strchr
                - sshlog
            - BranchSide:      'kex.c:951,19'
              BranchSideFuncs:
                - strchr
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strchr
                - sshlog
        - Branch String:   'kex.c:951,7'
          Branch Sides:
            - BranchSide:      'kex.c:952,5'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strchr
                - strchr
                - sshlog
            - BranchSide:      'kex.c:953,14'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strchr
                - strchr
                - sshlog
        - Branch String:   'kex.c:953,7'
          Branch Sides:
            - BranchSide:      'kex.c:954,4'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:958,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strchr
                - strchr
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
      Callsites:
        - Src:             'kex.c:949,12'
          Dst:             strchr
        - Src:             'kex.c:951,12'
          Dst:             strchr
        - Src:             'kex.c:953,7'
          Dst:             strcmp
        - Src:             'kex.c:954,4'
          Dst:             sshlog
        - Src:             'kex.c:959,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    choose_comp
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 877
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshcomp *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         15
      ICount:          89
      EdgeCount:       19
      CyclomaticComplexity: 6
      functionsReached:
        - match_list
        - sshlog
        - strcmp
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kex.c:880,6'
          Branch Sides:
            - BranchSide:      'kex.c:881,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:883,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
        - Branch String:   'kex.c:883,6'
          Branch Sides:
            - BranchSide:      'kex.c:884,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:885,20'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
        - Branch String:   'kex.c:885,13'
          Branch Sides:
            - BranchSide:      'kex.c:886,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:889,13'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
        - Branch String:   'kex.c:889,6'
          Branch Sides:
            - BranchSide:      'kex.c:890,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:892,3'
              BranchSideFuncs:
                - sshlog
                - free
      Callsites:
        - Src:             'kex.c:878,15'
          Dst:             match_list
        - Src:             'kex.c:883,6'
          Dst:             strcmp
        - Src:             'kex.c:885,13'
          Dst:             strcmp
        - Src:             'kex.c:889,6'
          Dst:             strcmp
        - Src:             'kex.c:892,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    choose_mac
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 859
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshmac *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          69
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - mac_setup
        - match_list
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kex.c:862,6'
          Branch Sides:
            - BranchSide:      'kex.c:863,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:864,16'
              BranchSideFuncs:
                - mac_setup
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
        - Branch String:   'kex.c:864,6'
          Branch Sides:
            - BranchSide:      'kex.c:865,3'
              BranchSideFuncs:
                - sshlog
                - free
            - BranchSide:      'kex.c:869,14'
              BranchSideFuncs: []
      Callsites:
        - Src:             'kex.c:860,15'
          Dst:             match_list
        - Src:             'kex.c:864,6'
          Dst:             mac_setup
        - Src:             'kex.c:865,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    choose_enc
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 837
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshenc *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          91
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - cipher_blocksize
        - cipher_by_name
        - cipher_ivlen
        - cipher_keylen
        - match_list
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kex.c:840,6'
          Branch Sides:
            - BranchSide:      'kex.c:841,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:842,36'
              BranchSideFuncs:
                - cipher_by_name
                - cipher_ivlen
                - cipher_keylen
                - cipher_blocksize
                - sshlog
                - free
        - Branch String:   'kex.c:842,6'
          Branch Sides:
            - BranchSide:      'kex.c:843,3'
              BranchSideFuncs:
                - sshlog
                - free
            - BranchSide:      'kex.c:847,14'
              BranchSideFuncs:
                - cipher_ivlen
                - cipher_keylen
                - cipher_blocksize
      Callsites:
        - Src:             'kex.c:838,15'
          Dst:             match_list
        - Src:             'kex.c:842,21'
          Dst:             cipher_by_name
        - Src:             'kex.c:843,3'
          Dst:             sshlog
        - Src:             'kex.c:850,16'
          Dst:             cipher_ivlen
        - Src:             'kex.c:852,17'
          Dst:             cipher_keylen
        - Src:             'kex.c:853,20'
          Dst:             cipher_blocksize
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    choose_hostkeyalg
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 922
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.kex *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          94
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - match_list
        - sshkey_ecdsa_nid_from_name
        - sshkey_type_from_name
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kex.c:926,2'
          Branch Sides:
            - BranchSide:      'kex.c:926,2'
              BranchSideFuncs:
                - sshlog
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ecdsa_nid_from_name
                - sshlog
            - BranchSide:      'kex.c:926,2'
              BranchSideFuncs:
                - sshlog
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ecdsa_nid_from_name
                - sshlog
        - Branch String:   'kex.c:928,6'
          Branch Sides:
            - BranchSide:      'kex.c:929,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:930,42'
              BranchSideFuncs:
                - sshkey_type_from_name
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_ecdsa_nid_from_name
                - sshlog
        - Branch String:   'kex.c:931,6'
          Branch Sides:
            - BranchSide:      'kex.c:932,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:935,46'
              BranchSideFuncs:
                - sshkey_ecdsa_nid_from_name
      Callsites:
        - Src:             'kex.c:924,19'
          Dst:             match_list
        - Src:             'kex.c:926,2'
          Dst:             sshlog
        - Src:             'kex.c:930,20'
          Dst:             sshkey_type_from_name
        - Src:             'kex.c:932,3'
          Dst:             sshlog
        - Src:             'kex.c:935,19'
          Dst:             sshkey_ecdsa_nid_from_name
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    choose_kex
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 902
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.kex *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          97
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - kex_alg_by_name
        - match_list
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kex.c:907,2'
          Branch Sides:
            - BranchSide:      'kex.c:907,2'
              BranchSideFuncs:
                - sshlog
                - kex_alg_by_name
                - sshlog
            - BranchSide:      'kex.c:907,2'
              BranchSideFuncs:
                - sshlog
                - kex_alg_by_name
                - sshlog
        - Branch String:   'kex.c:908,6'
          Branch Sides:
            - BranchSide:      'kex.c:909,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:910,32'
              BranchSideFuncs:
                - kex_alg_by_name
                - sshlog
        - Branch String:   'kex.c:910,6'
          Branch Sides:
            - BranchSide:      'kex.c:911,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:914,16'
              BranchSideFuncs: []
      Callsites:
        - Src:             'kex.c:905,12'
          Dst:             match_list
        - Src:             'kex.c:907,2'
          Dst:             sshlog
        - Src:             'kex.c:910,16'
          Dst:             kex_alg_by_name
        - Src:             'kex.c:911,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_alg_by_name
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 147
      functionDepth:   0
      returnType:      'struct.kexalg *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          52
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - strcmp
      functionUses:    2
      BranchProfiles:
        - Branch String:   'kex.c:150,2'
          Branch Sides:
            - BranchSide:      'kex.c:151,14'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:154,2'
              BranchSideFuncs: []
        - Branch String:   'kex.c:151,7'
          Branch Sides:
            - BranchSide:      'kex.c:152,11'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:153,2'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'kex.c:151,7'
          Dst:             strcmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    has_any_alg
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 966
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          39
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - match_list
      functionUses:    2
      BranchProfiles:
        - Branch String:   'kex.c:969,6'
          Branch Sides:
            - BranchSide:      'kex.c:970,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:971,7'
              BranchSideFuncs:
                - free
      Callsites:
        - Src:             'kex.c:969,12'
          Dst:             match_list
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    send_error
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1255
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          71
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - __errno_location
        - atomicio
        - ssh_packet_get_connection_out
        - sshlog
        - strlen
        - write
      functionUses:    4
      BranchProfiles:
        - Branch String:   'kex.c:1258,6'
          Branch Sides:
            - BranchSide:      'kex.c:1259,3'
              BranchSideFuncs:
                - ssh_packet_get_connection_out
                - strlen
                - atomicio
                - strlen
                - __sanitizer_cov_trace_cmp8
                - ssh_packet_get_connection_out
                - strlen
                - atomicio
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'kex.c:1261,53'
              BranchSideFuncs:
                - ssh_packet_get_connection_out
                - strlen
                - atomicio
                - strlen
                - __sanitizer_cov_trace_cmp8
                - ssh_packet_get_connection_out
                - strlen
                - atomicio
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'kex.c:1262,39'
          Branch Sides:
            - BranchSide:      'kex.c:1263,53'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'kex.c:1265,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'kex.c:1261,6'
          Branch Sides:
            - BranchSide:      'kex.c:1261,6'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'kex.c:1265,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
      Callsites:
        - Src:             'kex.c:1261,23'
          Dst:             ssh_packet_get_connection_out
        - Src:             'kex.c:1262,11'
          Dst:             strlen
        - Src:             'kex.c:1261,6'
          Dst:             atomicio
        - Src:             'kex.c:1261,6'
          Dst:             write
        - Src:             'kex.c:1262,27'
          Dst:             strlen
        - Src:             'kex.c:1263,23'
          Dst:             ssh_packet_get_connection_out
        - Src:             'kex.c:1264,12'
          Dst:             strlen
        - Src:             'kex.c:1263,6'
          Dst:             atomicio
        - Src:             'kex.c:1263,6'
          Dst:             write
        - Src:             'kex.c:1264,29'
          Dst:             strlen
        - Src:             'kex.c:1265,3'
          Dst:             __errno_location
        - Src:             'kex.c:1265,3'
          Dst:             strerror
        - Src:             'kex.c:1265,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_exchange_identification
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1276
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         103
      ICount:          646
      EdgeCount:       138
      CyclomaticComplexity: 37
      functionsReached:
        - __errno_location
        - __isoc99_sscanf
        - atomicio
        - calloc
        - compat_banner
        - memcmp
        - read
        - send_error
        - ssh_err
        - ssh_packet_get_connection_in
        - ssh_packet_get_connection_out
        - ssh_remote_ipaddr
        - sshbuf_consume_end
        - sshbuf_dup_string
        - sshbuf_len
        - sshbuf_mutable_ptr
        - sshbuf_ptr
        - sshbuf_put_u8
        - sshbuf_putf
        - sshbuf_reset
        - sshfatal
        - sshlog
        - waitrfd
        - write
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kex.c:1281,31'
          Branch Sides:
            - BranchSide:      'kex.c:1282,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_out
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1282,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshbuf_putf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_out
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1283,32'
          Branch Sides:
            - BranchSide:      'kex.c:1284,6'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_putf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_out
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1284,33'
              BranchSideFuncs:
                - sshbuf_reset
                - sshbuf_putf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_out
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1290,31'
          Branch Sides:
            - BranchSide:      'kex.c:1290,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_out
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
            - BranchSide:      'kex.c:1292,23'
              BranchSideFuncs:
                - sshbuf_putf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_out
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:1290,6'
          Branch Sides:
            - BranchSide:      'kex.c:1291,20'
              BranchSideFuncs:
                - sshbuf_putf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_out
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
            - BranchSide:      'kex.c:1292,23'
              BranchSideFuncs:
                - sshbuf_putf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_out
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:1295,6'
          Branch Sides:
            - BranchSide:      'kex.c:1292,11'
              BranchSideFuncs:
                - sshbuf_putf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_out
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
            - BranchSide:      'kex.c:1295,38'
              BranchSideFuncs:
                - sshbuf_putf
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_out
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:1292,6'
          Branch Sides:
            - BranchSide:      'kex.c:1296,12'
              BranchSideFuncs:
                - __errno_location
                - ssh_err
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1301,53'
              BranchSideFuncs:
                - ssh_packet_get_connection_out
                - sshbuf_mutable_ptr
                - sshbuf_len
                - atomicio
                - sshbuf_len
                - __sanitizer_cov_trace_cmp8
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'kex.c:1301,6'
          Branch Sides:
            - BranchSide:      'kex.c:1304,12'
              BranchSideFuncs:
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1309,30'
              BranchSideFuncs:
                - sshbuf_consume_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:1309,6'
          Branch Sides:
            - BranchSide:      'kex.c:1310,12'
              BranchSideFuncs:
                - __errno_location
                - ssh_err
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1314,41'
              BranchSideFuncs:
                - sshbuf_dup_string
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
        - Branch String:   'kex.c:1315,6'
          Branch Sides:
            - BranchSide:      'kex.c:1316,3'
              BranchSideFuncs:
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1320,2'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
        - Branch String:   'kex.c:1324,7'
          Branch Sides:
            - BranchSide:      'kex.c:1325,15'
              BranchSideFuncs:
                - send_error
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1332,16'
              BranchSideFuncs:
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
        - Branch String:   'kex.c:1335,8'
          Branch Sides:
            - BranchSide:      'kex.c:1336,46'
              BranchSideFuncs:
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
            - BranchSide:      'kex.c:1353,54'
              BranchSideFuncs:
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - sshlog
                - send_error
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'kex.c:1338,17'
          Branch Sides:
            - BranchSide:      'kex.c:1338,20'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - send_error
                - sshlog
            - BranchSide:      'kex.c:1345,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - sshlog
                - send_error
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'kex.c:1338,9'
          Branch Sides:
            - BranchSide:      'kex.c:1339,17'
              BranchSideFuncs:
                - send_error
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1345,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - sshlog
                - send_error
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'kex.c:1355,17'
          Branch Sides:
            - BranchSide:      'kex.c:1355,20'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - sshlog
                - send_error
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - sshlog
            - BranchSide:      'kex.c:1359,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - sshlog
                - send_error
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'kex.c:1355,8'
          Branch Sides:
            - BranchSide:      'kex.c:1356,5'
              BranchSideFuncs:
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1359,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - sshlog
                - send_error
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'kex.c:1365,8'
          Branch Sides:
            - BranchSide:      'kex.c:1366,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
            - BranchSide:      'kex.c:1369,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - sshlog
                - send_error
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
        - Branch String:   'kex.c:1369,8'
          Branch Sides:
            - BranchSide:      'kex.c:1370,5'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
            - BranchSide:      'kex.c:1371,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - send_error
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - sshlog
                - free
                - send_error
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
        - Branch String:   'kex.c:1371,18'
          Branch Sides:
            - BranchSide:      'kex.c:1371,21'
              BranchSideFuncs:
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1372,5'
              BranchSideFuncs:
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'kex.c:1371,8'
          Branch Sides:
            - BranchSide:      'kex.c:1372,5'
              BranchSideFuncs:
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1376,27'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - sshlog
                - __errno_location
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:1376,8'
          Branch Sides:
            - BranchSide:      'kex.c:1377,14'
              BranchSideFuncs:
                - __errno_location
                - ssh_err
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1381,19'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - ssh_err
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - sshlog
                - send_error
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - sshlog
        - Branch String:   'kex.c:1381,8'
          Branch Sides:
            - BranchSide:      'kex.c:1334,3'
              BranchSideFuncs:
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1382,5'
              BranchSideFuncs:
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'kex.c:1387,36'
          Branch Sides:
            - BranchSide:      'kex.c:1388,25'
              BranchSideFuncs:
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
            - BranchSide:      'kex.c:1391,31'
              BranchSideFuncs:
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
        - Branch String:   'kex.c:1387,7'
          Branch Sides:
            - BranchSide:      'kex.c:1389,4'
              BranchSideFuncs:
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshfatal
            - BranchSide:      'kex.c:1391,31'
              BranchSideFuncs:
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - free
                - sshlog
        - Branch String:   'kex.c:1391,7'
          Branch Sides:
            - BranchSide:      'kex.c:1392,4'
              BranchSideFuncs:
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1397,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - free
        - Branch String:   'kex.c:1397,7'
          Branch Sides:
            - BranchSide:      'kex.c:1398,4'
              BranchSideFuncs:
                - sshlog
                - free
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1403,3'
              BranchSideFuncs:
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_reset
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_get_connection_in
                - atomicio
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_dup_string
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - sshlog
                - sshbuf_ptr
                - memcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_dup_string
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - sshlog
                - sshfatal
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_get_connection_in
                - waitrfd
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - send_error
                - sshlog
                - send_error
                - sshlog
        - Branch String:   'kex.c:1407,6'
          Branch Sides:
            - BranchSide:      'kex.c:1408,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'kex.c:1410,45'
              BranchSideFuncs:
                - sshbuf_len
                - calloc
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - send_error
                - sshlog
        - Branch String:   'kex.c:1410,6'
          Branch Sides:
            - BranchSide:      'kex.c:1411,3'
              BranchSideFuncs:
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1420,13'
              BranchSideFuncs:
                - __isoc99_sscanf
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
                - sshlog
                - send_error
        - Branch String:   'kex.c:1420,6'
          Branch Sides:
            - BranchSide:      'kex.c:1422,3'
              BranchSideFuncs:
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1429,2'
              BranchSideFuncs:
                - sshlog
                - compat_banner
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
        - Branch String:   'kex.c:1434,2'
          Branch Sides:
            - BranchSide:      'kex.c:1436,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
            - BranchSide:      'kex.c:1438,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
            - BranchSide:      'kex.c:1442,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
        - Branch String:   'kex.c:1438,7'
          Branch Sides:
            - BranchSide:      'kex.c:1439,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
            - BranchSide:      'kex.c:1440,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - sshlog
                - send_error
        - Branch String:   'kex.c:1445,6'
          Branch Sides:
            - BranchSide:      'kex.c:1446,3'
              BranchSideFuncs:
                - sshlog
                - send_error
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1453,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
        - Branch String:   'kex.c:1453,23'
          Branch Sides:
            - BranchSide:      'kex.c:1453,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
            - BranchSide:      'kex.c:1460,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
        - Branch String:   'kex.c:1453,6'
          Branch Sides:
            - BranchSide:      'kex.c:1454,3'
              BranchSideFuncs:
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1460,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
        - Branch String:   'kex.c:1460,23'
          Branch Sides:
            - BranchSide:      'kex.c:1460,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
            - BranchSide:      'kex.c:1468,4'
              BranchSideFuncs:
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'kex.c:1460,6'
          Branch Sides:
            - BranchSide:      'kex.c:1461,3'
              BranchSideFuncs:
                - ssh_remote_ipaddr
                - ssh_remote_port
                - sshlog
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      'kex.c:1468,4'
              BranchSideFuncs:
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   'kex.c:1473,6'
          Branch Sides:
            - BranchSide:      'kex.c:1473,6'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'kex.c:1474,11'
              BranchSideFuncs:
                - __errno_location
      Callsites:
        - Src:             'kex.c:1289,2'
          Dst:             sshbuf_reset
        - Src:             'kex.c:1292,11'
          Dst:             sshbuf_putf
        - Src:             'kex.c:1296,12'
          Dst:             __errno_location
        - Src:             'kex.c:1297,3'
          Dst:             ssh_err
        - Src:             'kex.c:1297,3'
          Dst:             sshlog
        - Src:             'kex.c:1301,23'
          Dst:             ssh_packet_get_connection_out
        - Src:             'kex.c:1302,6'
          Dst:             sshbuf_mutable_ptr
        - Src:             'kex.c:1303,6'
          Dst:             sshbuf_len
        - Src:             'kex.c:1301,6'
          Dst:             atomicio
        - Src:             'kex.c:1301,6'
          Dst:             write
        - Src:             'kex.c:1303,34'
          Dst:             sshbuf_len
        - Src:             'kex.c:1304,12'
          Dst:             __errno_location
        - Src:             'kex.c:1305,3'
          Dst:             __errno_location
        - Src:             'kex.c:1305,3'
          Dst:             strerror
        - Src:             'kex.c:1305,3'
          Dst:             sshlog
        - Src:             'kex.c:1309,11'
          Dst:             sshbuf_consume_end
        - Src:             'kex.c:1310,12'
          Dst:             __errno_location
        - Src:             'kex.c:1311,3'
          Dst:             ssh_err
        - Src:             'kex.c:1311,3'
          Dst:             sshlog
        - Src:             'kex.c:1314,23'
          Dst:             sshbuf_dup_string
        - Src:             'kex.c:1316,3'
          Dst:             sshlog
        - Src:             'kex.c:1320,2'
          Dst:             sshlog
        - Src:             'kex.c:1325,4'
          Dst:             send_error
        - Src:             'kex.c:1327,4'
          Dst:             sshlog
        - Src:             'kex.c:1332,3'
          Dst:             sshbuf_reset
        - Src:             'kex.c:1336,17'
          Dst:             ssh_packet_get_connection_in
        - Src:             'kex.c:1336,9'
          Dst:             waitrfd
        - Src:             'kex.c:1338,20'
          Dst:             __errno_location
        - Src:             'kex.c:1339,6'
          Dst:             send_error
        - Src:             'kex.c:1341,6'
          Dst:             sshlog
        - Src:             'kex.c:1346,15'
          Dst:             __errno_location
        - Src:             'kex.c:1347,6'
          Dst:             __errno_location
        - Src:             'kex.c:1347,6'
          Dst:             strerror
        - Src:             'kex.c:1347,6'
          Dst:             sshlog
        - Src:             'kex.c:1353,25'
          Dst:             ssh_packet_get_connection_in
        - Src:             'kex.c:1353,10'
          Dst:             atomicio
        - Src:             'kex.c:1353,10'
          Dst:             read
        - Src:             'kex.c:1355,20'
          Dst:             __errno_location
        - Src:             'kex.c:1356,5'
          Dst:             sshlog
        - Src:             'kex.c:1360,14'
          Dst:             __errno_location
        - Src:             'kex.c:1361,5'
          Dst:             __errno_location
        - Src:             'kex.c:1361,5'
          Dst:             strerror
        - Src:             'kex.c:1361,5'
          Dst:             sshlog
        - Src:             'kex.c:1372,5'
          Dst:             sshlog
        - Src:             'kex.c:1376,13'
          Dst:             sshbuf_put_u8
        - Src:             'kex.c:1377,14'
          Dst:             __errno_location
        - Src:             'kex.c:1378,5'
          Dst:             ssh_err
        - Src:             'kex.c:1378,5'
          Dst:             sshlog
        - Src:             'kex.c:1381,8'
          Dst:             sshbuf_len
        - Src:             'kex.c:1382,5'
          Dst:             sshlog
        - Src:             'kex.c:1387,7'
          Dst:             sshbuf_len
        - Src:             'kex.c:1388,14'
          Dst:             sshbuf_ptr
        - Src:             'kex.c:1388,7'
          Dst:             memcmp
        - Src:             'kex.c:1391,13'
          Dst:             sshbuf_dup_string
        - Src:             'kex.c:1392,4'
          Dst:             sshlog
        - Src:             'kex.c:1398,4'
          Dst:             sshlog
        - Src:             'kex.c:1403,3'
          Dst:             sshlog
        - Src:             'kex.c:1406,24'
          Dst:             sshbuf_dup_string
        - Src:             'kex.c:1408,3'
          Dst:             sshfatal
        - Src:             'kex.c:1410,34'
          Dst:             sshbuf_len
        - Src:             'kex.c:1410,24'
          Dst:             calloc
        - Src:             'kex.c:1411,3'
          Dst:             sshlog
        - Src:             'kex.c:1420,6'
          Dst:             __isoc99_sscanf
        - Src:             'kex.c:1422,3'
          Dst:             sshlog
        - Src:             'kex.c:1425,3'
          Dst:             send_error
        - Src:             'kex.c:1429,2'
          Dst:             sshlog
        - Src:             'kex.c:1431,2'
          Dst:             compat_banner
        - Src:             'kex.c:1446,3'
          Dst:             sshlog
        - Src:             'kex.c:1448,3'
          Dst:             send_error
        - Src:             'kex.c:1454,3'
          Dst:             ssh_remote_ipaddr
        - Src:             'kex.c:1454,3'
          Dst:             ssh_remote_port
        - Src:             'kex.c:1454,3'
          Dst:             sshlog
        - Src:             'kex.c:1461,3'
          Dst:             ssh_remote_ipaddr
        - Src:             'kex.c:1461,3'
          Dst:             ssh_remote_port
        - Src:             'kex.c:1461,3'
          Dst:             sshlog
        - Src:             'kex.c:1474,3'
          Dst:             __errno_location
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_verify_host_key
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1224
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshkey *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         16
      ICount:          99
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - sshlog
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kex.c:1227,6'
          Branch Sides:
            - BranchSide:      'kex.c:1228,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:1231,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'kex.c:1231,49'
          Branch Sides:
            - BranchSide:      'kex.c:1232,7'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:1234,3'
              BranchSideFuncs: []
        - Branch String:   'kex.c:1232,38'
          Branch Sides:
            - BranchSide:      'kex.c:1233,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1235,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1231,6'
          Branch Sides:
            - BranchSide:      'kex.c:1234,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:1235,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1235,6'
          Branch Sides:
            - BranchSide:      'kex.c:1236,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:1237,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'kex.c:1228,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_load_hostkey
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1203
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh *'
        - 'struct.sshkey **'
        - 'struct.sshkey **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          97
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - sshlog
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kex.c:1208,40'
          Branch Sides:
            - BranchSide:      'kex.c:1209,6'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:1210,3'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'kex.c:1208,6'
          Branch Sides:
            - BranchSide:      'kex.c:1210,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:1213,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'kex.c:1217,6'
          Branch Sides:
            - BranchSide:      'kex.c:1218,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:1219,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'kex.c:1210,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    derive_key
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1100
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'struct.ssh *'
        - 'int '
        - 'int '
        - 'char *'
        - 'int '
        - 'struct.sshbuf *'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         37
      ICount:          260
      EdgeCount:       51
      CyclomaticComplexity: 16
      functionsReached:
        - calloc
        - ssh_digest_bytes
        - ssh_digest_final
        - ssh_digest_free
        - ssh_digest_start
        - ssh_digest_update
        - ssh_digest_update_buffer
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kex.c:1109,6'
          Branch Sides:
            - BranchSide:      'kex.c:1110,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:1111,26'
              BranchSideFuncs:
                - calloc
                - ssh_digest_start
                - ssh_digest_update_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_final
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_free
                - __sanitizer_cov_trace_cmp4
                - free
                - ssh_digest_free
                - ssh_digest_start
                - ssh_digest_update_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_final
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_free
                - sshlog
                - sshlog
        - Branch String:   'kex.c:1111,6'
          Branch Sides:
            - BranchSide:      'kex.c:1112,5'
              BranchSideFuncs:
                - free
                - ssh_digest_free
            - BranchSide:      'kex.c:1117,34'
              BranchSideFuncs:
                - ssh_digest_start
                - ssh_digest_update_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_final
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_free
                - __sanitizer_cov_trace_cmp4
                - free
                - ssh_digest_free
                - ssh_digest_start
                - ssh_digest_update_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_final
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_free
                - sshlog
                - sshlog
        - Branch String:   'kex.c:1117,58'
          Branch Sides:
            - BranchSide:      'kex.c:1118,31'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
            - BranchSide:      'kex.c:1123,5'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
        - Branch String:   'kex.c:1118,60'
          Branch Sides:
            - BranchSide:      'kex.c:1119,24'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
            - BranchSide:      'kex.c:1123,5'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
        - Branch String:   'kex.c:1119,53'
          Branch Sides:
            - BranchSide:      'kex.c:1120,24'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
            - BranchSide:      'kex.c:1123,5'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
        - Branch String:   'kex.c:1120,45'
          Branch Sides:
            - BranchSide:      'kex.c:1121,31'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
            - BranchSide:      'kex.c:1123,5'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
        - Branch String:   'kex.c:1121,62'
          Branch Sides:
            - BranchSide:      'kex.c:1122,23'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
            - BranchSide:      'kex.c:1123,5'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
        - Branch String:   'kex.c:1117,6'
          Branch Sides:
            - BranchSide:      'kex.c:1123,5'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
            - BranchSide:      'kex.c:1127,18'
              BranchSideFuncs:
                - ssh_digest_free
                - __sanitizer_cov_trace_cmp4
                - free
                - ssh_digest_free
                - ssh_digest_start
                - ssh_digest_update_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_final
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_free
                - sshlog
        - Branch String:   'kex.c:1135,2'
          Branch Sides:
            - BranchSide:      'kex.c:1136,35'
              BranchSideFuncs:
                - ssh_digest_start
                - ssh_digest_update_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_final
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_free
                - __sanitizer_cov_trace_cmp4
                - free
                - ssh_digest_free
                - sshlog
            - BranchSide:      'kex.c:1152,10'
              BranchSideFuncs:
                - free
                - ssh_digest_free
        - Branch String:   'kex.c:1136,59'
          Branch Sides:
            - BranchSide:      'kex.c:1137,32'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
            - BranchSide:      'kex.c:1141,4'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
        - Branch String:   'kex.c:1137,61'
          Branch Sides:
            - BranchSide:      'kex.c:1138,25'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
            - BranchSide:      'kex.c:1141,4'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
        - Branch String:   'kex.c:1138,54'
          Branch Sides:
            - BranchSide:      'kex.c:1139,25'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
            - BranchSide:      'kex.c:1141,4'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
        - Branch String:   'kex.c:1139,53'
          Branch Sides:
            - BranchSide:      'kex.c:1140,24'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
            - BranchSide:      'kex.c:1141,4'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
        - Branch String:   'kex.c:1136,7'
          Branch Sides:
            - BranchSide:      'kex.c:1141,4'
              BranchSideFuncs:
                - sshlog
                - free
                - ssh_digest_free
            - BranchSide:      'kex.c:1145,19'
              BranchSideFuncs:
                - ssh_digest_free
                - __sanitizer_cov_trace_cmp4
                - free
                - ssh_digest_free
                - ssh_digest_start
                - ssh_digest_update_buffer
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_update
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_final
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
      Callsites:
        - Src:             'kex.c:1109,14'
          Dst:             ssh_digest_bytes
        - Src:             'kex.c:1111,16'
          Dst:             calloc
        - Src:             'kex.c:1117,17'
          Dst:             ssh_digest_start
        - Src:             'kex.c:1118,6'
          Dst:             ssh_digest_update_buffer
        - Src:             'kex.c:1119,6'
          Dst:             ssh_digest_update
        - Src:             'kex.c:1120,6'
          Dst:             ssh_digest_update
        - Src:             'kex.c:1121,6'
          Dst:             ssh_digest_update_buffer
        - Src:             'kex.c:1122,6'
          Dst:             ssh_digest_final
        - Src:             'kex.c:1124,3'
          Dst:             sshlog
        - Src:             'kex.c:1127,2'
          Dst:             ssh_digest_free
        - Src:             'kex.c:1136,18'
          Dst:             ssh_digest_start
        - Src:             'kex.c:1137,7'
          Dst:             ssh_digest_update_buffer
        - Src:             'kex.c:1138,7'
          Dst:             ssh_digest_update
        - Src:             'kex.c:1139,7'
          Dst:             ssh_digest_update
        - Src:             'kex.c:1140,7'
          Dst:             ssh_digest_final
        - Src:             'kex.c:1141,4'
          Dst:             sshlog
        - Src:             'kex.c:1145,3'
          Dst:             ssh_digest_free
        - Src:             'kex.c:1157,2'
          Dst:             ssh_digest_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_derive_keys
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1165
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.ssh *'
        - 'char *'
        - 'int '
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         36
      ICount:          272
      EdgeCount:       47
      CyclomaticComplexity: 13
      functionsReached:
        - derive_key
        - sshbuf_len
        - sshbuf_put
        - sshlog
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kex.c:1172,6'
          Branch Sides:
            - BranchSide:      'kex.c:1173,18'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - derive_key
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - sshlog
            - BranchSide:      'kex.c:1179,24'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - derive_key
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - sshlog
        - Branch String:   'kex.c:1173,7'
          Branch Sides:
            - BranchSide:      'kex.c:1174,4'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:1177,23'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - derive_key
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
        - Branch String:   'kex.c:1177,7'
          Branch Sides:
            - BranchSide:      'kex.c:1178,11'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:1179,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - derive_key
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
        - Branch String:   'kex.c:1179,13'
          Branch Sides:
            - BranchSide:      'kex.c:0,0'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:1180,3'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'kex.c:1183,2'
          Branch Sides:
            - BranchSide:      'kex.c:1184,23'
              BranchSideFuncs:
                - derive_key
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
            - BranchSide:      'kex.c:1191,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1184,7'
          Branch Sides:
            - BranchSide:      'kex.c:1186,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - free
            - BranchSide:      'kex.c:1190,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - derive_key
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
        - Branch String:   'kex.c:1186,4'
          Branch Sides:
            - BranchSide:      'kex.c:1187,15'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'kex.c:1188,11'
              BranchSideFuncs: []
        - Branch String:   'kex.c:1191,2'
          Branch Sides:
            - BranchSide:      'kex.c:1192,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1198,2'
              BranchSideFuncs: []
        - Branch String:   'kex.c:1192,24'
          Branch Sides:
            - BranchSide:      'kex.c:1192,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1193,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1192,45'
          Branch Sides:
            - BranchSide:      'kex.c:1191,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1193,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1193,20'
          Branch Sides:
            - BranchSide:      'kex.c:1192,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1193,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'kex.c:1173,7'
          Dst:             sshbuf_len
        - Src:             'kex.c:1174,4'
          Dst:             sshlog
        - Src:             'kex.c:1177,12'
          Dst:             sshbuf_put
        - Src:             'kex.c:1179,13'
          Dst:             sshbuf_len
        - Src:             'kex.c:1180,3'
          Dst:             sshlog
        - Src:             'kex.c:1184,12'
          Dst:             derive_key
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_start_rekex
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 822
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         8
      ICount:          53
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - kex_send_kexinit
        - sshlog
      functionUses:    3
      BranchProfiles:
        - Branch String:   'kex.c:823,6'
          Branch Sides:
            - BranchSide:      'kex.c:824,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:827,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - sshlog
        - Branch String:   'kex.c:827,6'
          Branch Sides:
            - BranchSide:      'kex.c:828,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:831,2'
              BranchSideFuncs:
                - kex_send_kexinit
      Callsites:
        - Src:             'kex.c:824,3'
          Dst:             sshlog
        - Src:             'kex.c:828,3'
          Dst:             sshlog
        - Src:             'kex.c:832,9'
          Dst:             kex_send_kexinit
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_send_kexinit
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 613
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         19
      ICount:          132
      EdgeCount:       26
      CyclomaticComplexity: 9
      functionsReached:
        - arc4random_buf
        - ssh_err
        - sshbuf_len
        - sshbuf_mutable_ptr
        - sshlog
        - sshpkt_putb
        - sshpkt_send
        - sshpkt_start
      functionUses:    4
      BranchProfiles:
        - Branch String:   'kex.c:618,6'
          Branch Sides:
            - BranchSide:      'kex.c:619,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:622,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - arc4random_buf
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - sshlog
        - Branch String:   'kex.c:622,6'
          Branch Sides:
            - BranchSide:      'kex.c:623,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:624,2'
              BranchSideFuncs:
                - sshbuf_len
                - __sanitizer_cov_trace_const_cmp8
                - sshbuf_mutable_ptr
                - arc4random_buf
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_err
                - sshlog
                - sshlog
                - sshbuf_len
                - sshlog
        - Branch String:   'kex.c:627,6'
          Branch Sides:
            - BranchSide:      'kex.c:628,3'
              BranchSideFuncs:
                - sshbuf_len
                - sshlog
            - BranchSide:      'kex.c:632,35'
              BranchSideFuncs:
                - sshbuf_mutable_ptr
                - arc4random_buf
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_err
                - sshlog
                - sshlog
        - Branch String:   'kex.c:632,6'
          Branch Sides:
            - BranchSide:      'kex.c:633,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:636,17'
              BranchSideFuncs:
                - arc4random_buf
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:638,53'
          Branch Sides:
            - BranchSide:      'kex.c:639,23'
              BranchSideFuncs:
                - ssh_err
                - sshlog
            - BranchSide:      'kex.c:641,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:639,43'
          Branch Sides:
            - BranchSide:      'kex.c:640,23'
              BranchSideFuncs:
                - ssh_err
                - sshlog
            - BranchSide:      'kex.c:641,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:638,6'
          Branch Sides:
            - BranchSide:      'kex.c:641,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
            - BranchSide:      'kex.c:644,2'
              BranchSideFuncs:
                - sshlog
      Callsites:
        - Src:             'kex.c:619,3'
          Dst:             sshlog
        - Src:             'kex.c:627,6'
          Dst:             sshbuf_len
        - Src:             'kex.c:628,3'
          Dst:             sshbuf_len
        - Src:             'kex.c:628,3'
          Dst:             sshlog
        - Src:             'kex.c:632,16'
          Dst:             sshbuf_mutable_ptr
        - Src:             'kex.c:633,3'
          Dst:             sshlog
        - Src:             'kex.c:636,2'
          Dst:             arc4random_buf
        - Src:             'kex.c:638,11'
          Dst:             sshpkt_start
        - Src:             'kex.c:639,11'
          Dst:             sshpkt_putb
        - Src:             'kex.c:640,11'
          Dst:             sshpkt_send
        - Src:             'kex.c:641,3'
          Dst:             ssh_err
        - Src:             'kex.c:641,3'
          Dst:             sshlog
        - Src:             'kex.c:644,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_setup
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 803
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          58
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - kex_free
        - kex_ready
        - kex_send_kexinit
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kex.c:806,6'
          Branch Sides:
            - BranchSide:      'kex.c:807,10'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:808,28'
              BranchSideFuncs:
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - kex_free
        - Branch String:   'kex.c:808,6'
          Branch Sides:
            - BranchSide:      'kex.c:809,12'
              BranchSideFuncs:
                - kex_free
            - BranchSide:      'kex.c:813,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'kex.c:806,11'
          Dst:             kex_ready
        - Src:             'kex.c:808,11'
          Dst:             kex_send_kexinit
        - Src:             'kex.c:809,3'
          Dst:             kex_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_ready
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 790
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.ssh *'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          52
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - kex_input_kexinit
        - kex_prop2buf
        - kex_reset_dispatch
        - ssh_dispatch_set
      functionUses:    2
      BranchProfiles:
        - Branch String:   'kex.c:793,6'
          Branch Sides:
            - BranchSide:      'kex.c:794,10'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:795,2'
              BranchSideFuncs:
                - kex_reset_dispatch
                - ssh_dispatch_set
      Callsites:
        - Src:             'kex.c:793,11'
          Dst:             kex_prop2buf
        - Src:             'kex.c:796,2'
          Dst:             kex_reset_dispatch
        - Src:             'kex.c:797,2'
          Dst:             ssh_dispatch_set
        - Src:             'kex.c:797,2'
          Dst:             kex_input_kexinit
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_free
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 758
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.kex *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          109
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - DH_free
        - EC_KEY_free
        - kex_free_newkeys
        - sshbuf_free
        - sshkey_free
      functionUses:    7
      BranchProfiles:
        - Branch String:   'kex.c:761,6'
          Branch Sides:
            - BranchSide:      'kex.c:762,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:765,10'
              BranchSideFuncs:
                - DH_free
                - EC_KEY_free
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - free
                - free
                - free
                - free
                - kex_free_newkeys
        - Branch String:   'kex.c:770,2'
          Branch Sides:
            - BranchSide:      'kex.c:771,20'
              BranchSideFuncs:
                - kex_free_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - free
                - free
                - free
                - free
            - BranchSide:      'kex.c:774,14'
              BranchSideFuncs:
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_free
                - free
                - free
                - free
                - free
      Callsites:
        - Src:             'kex.c:765,2'
          Dst:             DH_free
        - Src:             'kex.c:767,2'
          Dst:             EC_KEY_free
        - Src:             'kex.c:771,3'
          Dst:             kex_free_newkeys
        - Src:             'kex.c:774,2'
          Dst:             sshbuf_free
        - Src:             'kex.c:775,2'
          Dst:             sshbuf_free
        - Src:             'kex.c:776,2'
          Dst:             sshbuf_free
        - Src:             'kex.c:777,2'
          Dst:             sshbuf_free
        - Src:             'kex.c:778,2'
          Dst:             sshbuf_free
        - Src:             'kex.c:779,2'
          Dst:             sshbuf_free
        - Src:             'kex.c:780,2'
          Dst:             sshbuf_free
        - Src:             'kex.c:781,2'
          Dst:             sshkey_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DH_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.dh_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_free_newkeys
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 728
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.newkeys *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         15
      ICount:          154
      EdgeCount:       19
      CyclomaticComplexity: 6
      functionsReached:
        - explicit_bzero
        - freezero
        - mac_clear
      functionUses:    4
      BranchProfiles:
        - Branch String:   'kex.c:729,6'
          Branch Sides:
            - BranchSide:      'kex.c:730,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:731,6'
              BranchSideFuncs:
                - free
                - explicit_bzero
                - free
                - explicit_bzero
                - mac_clear
                - free
                - explicit_bzero
                - freezero
                - explicit_bzero
                - free
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'kex.c:731,6'
          Branch Sides:
            - BranchSide:      'kex.c:732,18'
              BranchSideFuncs:
                - explicit_bzero
                - free
                - free
                - explicit_bzero
                - free
                - explicit_bzero
                - mac_clear
                - free
                - explicit_bzero
                - freezero
                - explicit_bzero
                - free
                - explicit_bzero
                - free
            - BranchSide:      'kex.c:736,6'
              BranchSideFuncs:
                - free
                - explicit_bzero
                - free
                - explicit_bzero
                - mac_clear
                - free
                - explicit_bzero
                - freezero
                - explicit_bzero
                - free
                - explicit_bzero
                - free
        - Branch String:   'kex.c:736,6'
          Branch Sides:
            - BranchSide:      'kex.c:737,18'
              BranchSideFuncs:
                - explicit_bzero
                - free
                - free
                - explicit_bzero
                - free
                - explicit_bzero
                - mac_clear
                - free
                - explicit_bzero
                - freezero
                - explicit_bzero
                - free
            - BranchSide:      'kex.c:741,7'
              BranchSideFuncs:
                - free
                - explicit_bzero
                - free
                - explicit_bzero
                - mac_clear
                - free
                - explicit_bzero
                - freezero
                - explicit_bzero
                - free
        - Branch String:   'kex.c:746,6'
          Branch Sides:
            - BranchSide:      'kex.c:747,18'
              BranchSideFuncs:
                - explicit_bzero
                - free
                - free
                - explicit_bzero
                - freezero
            - BranchSide:      'kex.c:751,7'
              BranchSideFuncs:
                - free
                - explicit_bzero
                - freezero
      Callsites:
        - Src:             'kex.c:732,3'
          Dst:             explicit_bzero
        - Src:             'kex.c:737,3'
          Dst:             explicit_bzero
        - Src:             'kex.c:742,2'
          Dst:             explicit_bzero
        - Src:             'kex.c:744,2'
          Dst:             explicit_bzero
        - Src:             'kex.c:745,2'
          Dst:             mac_clear
        - Src:             'kex.c:747,3'
          Dst:             explicit_bzero
        - Src:             'kex.c:752,2'
          Dst:             explicit_bzero
        - Src:             'kex.c:753,2'
          Dst:             freezero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_prop2buf
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 380
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         21
      ICount:          110
      EdgeCount:       27
      CyclomaticComplexity: 8
      functionsReached:
        - sshbuf_put_cstring
        - sshbuf_put_u32
        - sshbuf_put_u8
        - sshbuf_reset
      functionUses:    2
      BranchProfiles:
        - Branch String:   'kex.c:390,2'
          Branch Sides:
            - BranchSide:      'kex.c:391,26'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:394,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:391,7'
          Branch Sides:
            - BranchSide:      'kex.c:392,11'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:393,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:394,2'
          Branch Sides:
            - BranchSide:      'kex.c:395,31'
              BranchSideFuncs:
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:398,25'
              BranchSideFuncs:
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:395,7'
          Branch Sides:
            - BranchSide:      'kex.c:396,11'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:397,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_cstring
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:398,37'
          Branch Sides:
            - BranchSide:      'kex.c:399,26'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:400,10'
              BranchSideFuncs: []
        - Branch String:   'kex.c:398,6'
          Branch Sides:
            - BranchSide:      'kex.c:400,10'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:401,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'kex.c:384,2'
          Dst:             sshbuf_reset
        - Src:             'kex.c:391,12'
          Dst:             sshbuf_put_u8
        - Src:             'kex.c:395,12'
          Dst:             sshbuf_put_cstring
        - Src:             'kex.c:398,11'
          Dst:             sshbuf_put_u8
        - Src:             'kex.c:399,11'
          Dst:             sshbuf_put_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_reset_dispatch
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 479
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          16
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - kex_protocol_error
        - ssh_dispatch_range
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'kex.c:480,2'
          Dst:             ssh_dispatch_range
        - Src:             'kex.c:480,2'
          Dst:             kex_protocol_error
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_input_kexinit
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 651
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         39
      ICount:          244
      EdgeCount:       53
      CyclomaticComplexity: 16
      functionsReached:
        - kex_choose_conf
        - kex_send_kexinit
        - ssh_dispatch_set
        - ssh_err
        - sshbuf_put
        - sshlog
        - sshpkt_get_end
        - sshpkt_get_string
        - sshpkt_get_u32
        - sshpkt_get_u8
        - sshpkt_ptr
      functionUses:    2
      BranchProfiles:
        - Branch String:   'kex.c:659,6'
          Branch Sides:
            - BranchSide:      'kex.c:660,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:663,19'
              BranchSideFuncs:
                - ssh_dispatch_set
                - sshpkt_ptr
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - kex_choose_conf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:665,6'
          Branch Sides:
            - BranchSide:      'kex.c:666,10'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:669,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - kex_choose_conf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:669,2'
          Branch Sides:
            - BranchSide:      'kex.c:670,26'
              BranchSideFuncs:
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - kex_choose_conf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
            - BranchSide:      'kex.c:675,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - kex_choose_conf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:670,7'
          Branch Sides:
            - BranchSide:      'kex.c:671,4'
              BranchSideFuncs:
                - ssh_err
                - sshlog
            - BranchSide:      'kex.c:674,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - kex_choose_conf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:675,2'
          Branch Sides:
            - BranchSide:      'kex.c:676,30'
              BranchSideFuncs:
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - kex_choose_conf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - ssh_err
                - sshlog
            - BranchSide:      'kex.c:691,25'
              BranchSideFuncs:
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - kex_choose_conf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'kex.c:676,7'
          Branch Sides:
            - BranchSide:      'kex.c:677,4'
              BranchSideFuncs:
                - ssh_err
                - sshlog
            - BranchSide:      'kex.c:680,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - kex_choose_conf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_pc_indir
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:691,42'
          Branch Sides:
            - BranchSide:      'kex.c:692,26'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:694,11'
              BranchSideFuncs: []
        - Branch String:   'kex.c:692,43'
          Branch Sides:
            - BranchSide:      'kex.c:693,26'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:694,11'
              BranchSideFuncs: []
        - Branch String:   'kex.c:691,6'
          Branch Sides:
            - BranchSide:      'kex.c:694,11'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:696,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_kexinit
                - __sanitizer_cov_trace_const_cmp4
                - kex_choose_conf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'kex.c:696,6'
          Branch Sides:
            - BranchSide:      'kex.c:697,29'
              BranchSideFuncs:
                - kex_choose_conf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_pc_indir
            - BranchSide:      'kex.c:699,27'
              BranchSideFuncs:
                - kex_choose_conf
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'kex.c:697,7'
          Branch Sides:
            - BranchSide:      'kex.c:697,38'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:698,11'
              BranchSideFuncs: []
        - Branch String:   'kex.c:699,6'
          Branch Sides:
            - BranchSide:      'kex.c:700,10'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:702,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_pc_indir
        - Branch String:   'kex.c:702,30'
          Branch Sides:
            - BranchSide:      'kex.c:702,33'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_pc_indir
            - BranchSide:      'kex.c:705,2'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'kex.c:702,6'
          Branch Sides:
            - BranchSide:      'kex.c:703,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
            - BranchSide:      'kex.c:705,2'
              BranchSideFuncs:
                - sshlog
      Callsites:
        - Src:             'kex.c:658,2'
          Dst:             sshlog
        - Src:             'kex.c:660,3'
          Dst:             sshlog
        - Src:             'kex.c:663,2'
          Dst:             ssh_dispatch_set
        - Src:             'kex.c:664,8'
          Dst:             sshpkt_ptr
        - Src:             'kex.c:665,11'
          Dst:             sshbuf_put
        - Src:             'kex.c:670,12'
          Dst:             sshpkt_get_u8
        - Src:             'kex.c:671,4'
          Dst:             ssh_err
        - Src:             'kex.c:671,4'
          Dst:             sshlog
        - Src:             'kex.c:676,12'
          Dst:             sshpkt_get_string
        - Src:             'kex.c:677,4'
          Dst:             ssh_err
        - Src:             'kex.c:677,4'
          Dst:             sshlog
        - Src:             'kex.c:691,11'
          Dst:             sshpkt_get_u8
        - Src:             'kex.c:692,11'
          Dst:             sshpkt_get_u32
        - Src:             'kex.c:693,11'
          Dst:             sshpkt_get_end
        - Src:             'kex.c:697,12'
          Dst:             kex_send_kexinit
        - Src:             'kex.c:699,11'
          Dst:             kex_choose_conf
        - Src:             'kex.c:705,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_choose_conf
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 977
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         91
      ICount:          761
      EdgeCount:       123
      CyclomaticComplexity: 34
      functionsReached:
        - calloc
        - choose_comp
        - choose_enc
        - choose_hostkeyalg
        - choose_kex
        - choose_mac
        - cipher_authlen
        - cipher_seclen
        - has_any_alg
        - kex_buf2prop
        - kex_prop_free
        - match_list
        - proposals_match
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kex.c:987,6'
          Branch Sides:
            - BranchSide:      'kex.c:988,3'
              BranchSideFuncs:
                - kex_prop_free
                - kex_prop_free
            - BranchSide:      'kex.c:989,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - kex_buf2prop
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_list
                - free
        - Branch String:   'kex.c:990,6'
          Branch Sides:
            - BranchSide:      'kex.c:991,3'
              BranchSideFuncs:
                - kex_prop_free
                - kex_prop_free
            - BranchSide:      'kex.c:993,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_list
                - free
        - Branch String:   'kex.c:993,6'
          Branch Sides:
            - BranchSide:      'kex.c:994,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_list
                - free
            - BranchSide:      'kex.c:997,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - match_list
                - free
        - Branch String:   'kex.c:1002,18'
          Branch Sides:
            - BranchSide:      'kex.c:1002,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - match_list
                - free
            - BranchSide:      'kex.c:1011,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1002,6'
          Branch Sides:
            - BranchSide:      'kex.c:1003,9'
              BranchSideFuncs:
                - match_list
                - free
                - __sanitizer_cov_trace_const_cmp4
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1011,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1011,18'
          Branch Sides:
            - BranchSide:      'kex.c:1011,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1021,22'
              BranchSideFuncs:
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1011,6'
          Branch Sides:
            - BranchSide:      'kex.c:1012,19'
              BranchSideFuncs:
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1021,22'
              BranchSideFuncs:
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1012,7'
          Branch Sides:
            - BranchSide:      'kex.c:1014,4'
              BranchSideFuncs:
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1015,19'
              BranchSideFuncs:
                - has_any_alg
                - __sanitizer_cov_trace_const_cmp4
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1015,7'
          Branch Sides:
            - BranchSide:      'kex.c:1017,4'
              BranchSideFuncs:
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1018,2'
              BranchSideFuncs:
                - choose_kex
                - __sanitizer_cov_trace_const_cmp4
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1021,6'
          Branch Sides:
            - BranchSide:      'kex.c:1023,24'
              BranchSideFuncs:
                - kex_prop_free
                - kex_prop_free
            - BranchSide:      'kex.c:1027,29'
              BranchSideFuncs:
                - choose_hostkeyalg
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1027,6'
          Branch Sides:
            - BranchSide:      'kex.c:1029,24'
              BranchSideFuncs:
                - kex_prop_free
                - kex_prop_free
            - BranchSide:      'kex.c:1033,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1033,2'
          Branch Sides:
            - BranchSide:      'kex.c:1034,18'
              BranchSideFuncs:
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1071,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'kex.c:1034,7'
          Branch Sides:
            - BranchSide:      'kex.c:1035,6'
              BranchSideFuncs:
                - kex_prop_free
                - kex_prop_free
            - BranchSide:      'kex.c:1038,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1039,24'
          Branch Sides:
            - BranchSide:      'kex.c:1039,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1040,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1039,45'
          Branch Sides:
            - BranchSide:      'kex.c:1039,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1040,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1040,20'
          Branch Sides:
            - BranchSide:      'kex.c:1039,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1040,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1044,7'
          Branch Sides:
            - BranchSide:      'kex.c:1046,25'
              BranchSideFuncs:
                - kex_prop_free
                - kex_prop_free
            - BranchSide:      'kex.c:1050,28'
              BranchSideFuncs:
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1052,20'
          Branch Sides:
            - BranchSide:      'kex.c:1053,23'
              BranchSideFuncs:
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1059,25'
              BranchSideFuncs:
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1052,7'
          Branch Sides:
            - BranchSide:      'kex.c:1055,25'
              BranchSideFuncs:
                - kex_prop_free
                - kex_prop_free
            - BranchSide:      'kex.c:1059,25'
              BranchSideFuncs:
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1059,7'
          Branch Sides:
            - BranchSide:      'kex.c:1061,25'
              BranchSideFuncs:
                - kex_prop_free
                - kex_prop_free
            - BranchSide:      'kex.c:1065,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1065,3'
          Branch Sides:
            - BranchSide:      'kex.c:1033,38'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1033,38'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - calloc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_enc
                - __sanitizer_cov_trace_const_cmp4
                - cipher_authlen
                - __sanitizer_cov_trace_const_cmp4
                - choose_comp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_mac
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1072,2'
          Branch Sides:
            - BranchSide:      'kex.c:1073,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:1084,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:1074,10'
          Branch Sides:
            - BranchSide:      'kex.c:1074,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'kex.c:1074,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'kex.c:1075,10'
          Branch Sides:
            - BranchSide:      'kex.c:1075,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'kex.c:1075,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'kex.c:1076,10'
          Branch Sides:
            - BranchSide:      'kex.c:1076,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'kex.c:1076,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'kex.c:1077,10'
          Branch Sides:
            - BranchSide:      'kex.c:1077,8'
              BranchSideFuncs:
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'kex.c:1077,8'
              BranchSideFuncs:
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'kex.c:1078,13'
          Branch Sides:
            - BranchSide:      'kex.c:1078,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
            - BranchSide:      'kex.c:1078,11'
              BranchSideFuncs:
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'kex.c:1079,13'
          Branch Sides:
            - BranchSide:      'kex.c:1079,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'kex.c:1079,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'kex.c:1080,13'
          Branch Sides:
            - BranchSide:      'kex.c:1080,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'kex.c:1080,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'kex.c:1081,13'
          Branch Sides:
            - BranchSide:      'kex.c:1081,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'kex.c:1081,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - cipher_seclen
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'kex.c:1088,24'
          Branch Sides:
            - BranchSide:      'kex.c:1088,44'
              BranchSideFuncs:
                - proposals_match
                - __sanitizer_cov_trace_const_cmp4
                - kex_prop_free
                - kex_prop_free
            - BranchSide:      'kex.c:1090,4'
              BranchSideFuncs:
                - kex_prop_free
                - kex_prop_free
        - Branch String:   'kex.c:1088,6'
          Branch Sides:
            - BranchSide:      'kex.c:1089,3'
              BranchSideFuncs:
                - kex_prop_free
                - kex_prop_free
            - BranchSide:      'kex.c:1090,4'
              BranchSideFuncs:
                - kex_prop_free
                - kex_prop_free
      Callsites:
        - Src:             'kex.c:986,2'
          Dst:             sshlog
        - Src:             'kex.c:987,11'
          Dst:             kex_buf2prop
        - Src:             'kex.c:989,2'
          Dst:             sshlog
        - Src:             'kex.c:990,11'
          Dst:             kex_buf2prop
        - Src:             'kex.c:1005,9'
          Dst:             match_list
        - Src:             'kex.c:1012,7'
          Dst:             has_any_alg
        - Src:             'kex.c:1015,7'
          Dst:             has_any_alg
        - Src:             'kex.c:1021,11'
          Dst:             choose_kex
        - Src:             'kex.c:1027,11'
          Dst:             choose_hostkeyalg
        - Src:             'kex.c:1034,18'
          Dst:             calloc
        - Src:             'kex.c:1044,12'
          Dst:             choose_enc
        - Src:             'kex.c:1050,13'
          Dst:             cipher_authlen
        - Src:             'kex.c:1053,12'
          Dst:             choose_mac
        - Src:             'kex.c:1059,12'
          Dst:             choose_comp
        - Src:             'kex.c:1065,3'
          Dst:             sshlog
        - Src:             'kex.c:1078,13'
          Dst:             cipher_seclen
        - Src:             'kex.c:1078,13'
          Dst:             cipher_seclen
        - Src:             'kex.c:1088,28'
          Dst:             proposals_match
        - Src:             'kex.c:1092,2'
          Dst:             kex_prop_free
        - Src:             'kex.c:1093,2'
          Dst:             kex_prop_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_buf2prop
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 407
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'int *'
        - 'char ***'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         30
      ICount:          187
      EdgeCount:       40
      CyclomaticComplexity: 12
      functionsReached:
        - calloc
        - kex_prop_free
        - ssh_err
        - sshbuf_consume
        - sshbuf_free
        - sshbuf_fromb
        - sshbuf_get_cstring
        - sshbuf_get_u32
        - sshbuf_get_u8
        - sshlog
      functionUses:    3
      BranchProfiles:
        - Branch String:   'kex.c:415,6'
          Branch Sides:
            - BranchSide:      'kex.c:416,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:417,24'
              BranchSideFuncs:
                - sshbuf_fromb
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
                - ssh_err
                - sshlog
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:417,6'
          Branch Sides:
            - BranchSide:      'kex.c:418,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
            - BranchSide:      'kex.c:421,26'
              BranchSideFuncs:
                - sshbuf_consume
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
                - ssh_err
                - sshlog
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:421,6'
          Branch Sides:
            - BranchSide:      'kex.c:422,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
            - BranchSide:      'kex.c:426,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
                - ssh_err
                - sshlog
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:426,2'
          Branch Sides:
            - BranchSide:      'kex.c:427,31'
              BranchSideFuncs:
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
                - ssh_err
                - sshlog
                - ssh_err
                - sshlog
            - BranchSide:      'kex.c:434,25'
              BranchSideFuncs:
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:427,7'
          Branch Sides:
            - BranchSide:      'kex.c:428,4'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
            - BranchSide:      'kex.c:431,3'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
                - ssh_err
                - sshlog
                - sshbuf_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:434,38'
          Branch Sides:
            - BranchSide:      'kex.c:435,26'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
            - BranchSide:      'kex.c:436,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
        - Branch String:   'kex.c:434,6'
          Branch Sides:
            - BranchSide:      'kex.c:436,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
            - BranchSide:      'kex.c:439,6'
              BranchSideFuncs:
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
        - Branch String:   'kex.c:439,6'
          Branch Sides:
            - BranchSide:      'kex.c:440,24'
              BranchSideFuncs:
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
            - BranchSide:      'kex.c:441,2'
              BranchSideFuncs:
                - sshlog
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - kex_prop_free
        - Branch String:   'kex.c:446,13'
          Branch Sides:
            - BranchSide:      'kex.c:446,16'
              BranchSideFuncs:
                - sshbuf_free
                - kex_prop_free
            - BranchSide:      'kex.c:448,14'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kex.c:446,6'
          Branch Sides:
            - BranchSide:      'kex.c:447,17'
              BranchSideFuncs:
                - kex_prop_free
                - sshbuf_free
            - BranchSide:      'kex.c:448,14'
              BranchSideFuncs:
                - sshbuf_free
      Callsites:
        - Src:             'kex.c:415,18'
          Dst:             calloc
        - Src:             'kex.c:417,11'
          Dst:             sshbuf_fromb
        - Src:             'kex.c:421,11'
          Dst:             sshbuf_consume
        - Src:             'kex.c:422,3'
          Dst:             ssh_err
        - Src:             'kex.c:422,3'
          Dst:             sshlog
        - Src:             'kex.c:427,12'
          Dst:             sshbuf_get_cstring
        - Src:             'kex.c:428,4'
          Dst:             ssh_err
        - Src:             'kex.c:428,4'
          Dst:             sshlog
        - Src:             'kex.c:431,3'
          Dst:             sshlog
        - Src:             'kex.c:434,11'
          Dst:             sshbuf_get_u8
        - Src:             'kex.c:435,11'
          Dst:             sshbuf_get_u32
        - Src:             'kex.c:436,3'
          Dst:             ssh_err
        - Src:             'kex.c:436,3'
          Dst:             sshlog
        - Src:             'kex.c:441,2'
          Dst:             sshlog
        - Src:             'kex.c:442,2'
          Dst:             sshlog
        - Src:             'kex.c:447,3'
          Dst:             kex_prop_free
        - Src:             'kex.c:448,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_prop_free
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 454
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          50
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached: []
      functionUses:    4
      BranchProfiles:
        - Branch String:   'kex.c:457,6'
          Branch Sides:
            - BranchSide:      'kex.c:458,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:459,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
        - Branch String:   'kex.c:459,2'
          Branch Sides:
            - BranchSide:      'kex.c:460,8'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
            - BranchSide:      'kex.c:461,7'
              BranchSideFuncs:
                - free
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_protocol_error
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 466
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          66
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached:
        - sshlog
        - sshpkt_put_u32
        - sshpkt_send
        - sshpkt_start
      functionUses:    3
      BranchProfiles:
        - Branch String:   'kex.c:470,59'
          Branch Sides:
            - BranchSide:      'kex.c:471,26'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:473,10'
              BranchSideFuncs: []
        - Branch String:   'kex.c:471,42'
          Branch Sides:
            - BranchSide:      'kex.c:472,23'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:473,10'
              BranchSideFuncs: []
        - Branch String:   'kex.c:470,6'
          Branch Sides:
            - BranchSide:      'kex.c:473,10'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:474,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'kex.c:469,2'
          Dst:             sshlog
        - Src:             'kex.c:470,11'
          Dst:             sshpkt_start
        - Src:             'kex.c:471,11'
          Dst:             sshpkt_put_u32
        - Src:             'kex.c:472,11'
          Dst:             sshpkt_send
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_new
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 711
      functionDepth:   0
      returnType:      'struct.kex *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         17
      ICount:          84
      EdgeCount:       23
      CyclomaticComplexity: 8
      functionsReached:
        - calloc
        - kex_free
        - sshbuf_new
      functionUses:    2
      BranchProfiles:
        - Branch String:   'kex.c:712,14'
          Branch Sides:
            - BranchSide:      'kex.c:714,13'
              BranchSideFuncs:
                - calloc
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - kex_free
            - BranchSide:      'kex.c:714,13'
              BranchSideFuncs:
                - calloc
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - sshbuf_new
                - kex_free
        - Branch String:   'kex.c:714,46'
          Branch Sides:
            - BranchSide:      'kex.c:715,19'
              BranchSideFuncs:
                - kex_free
            - BranchSide:      'kex.c:720,12'
              BranchSideFuncs:
                - kex_free
        - Branch String:   'kex.c:715,41'
          Branch Sides:
            - BranchSide:      'kex.c:716,17'
              BranchSideFuncs:
                - kex_free
            - BranchSide:      'kex.c:720,12'
              BranchSideFuncs:
                - kex_free
        - Branch String:   'kex.c:716,39'
          Branch Sides:
            - BranchSide:      'kex.c:717,29'
              BranchSideFuncs:
                - kex_free
            - BranchSide:      'kex.c:720,12'
              BranchSideFuncs:
                - kex_free
        - Branch String:   'kex.c:717,51'
          Branch Sides:
            - BranchSide:      'kex.c:718,29'
              BranchSideFuncs:
                - kex_free
            - BranchSide:      'kex.c:720,12'
              BranchSideFuncs:
                - kex_free
        - Branch String:   'kex.c:718,51'
          Branch Sides:
            - BranchSide:      'kex.c:719,25'
              BranchSideFuncs:
                - kex_free
            - BranchSide:      'kex.c:720,12'
              BranchSideFuncs:
                - kex_free
        - Branch String:   'kex.c:714,6'
          Branch Sides:
            - BranchSide:      'kex.c:720,12'
              BranchSideFuncs:
                - kex_free
            - BranchSide:      'kex.c:723,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'kex.c:714,13'
          Dst:             calloc
        - Src:             'kex.c:715,19'
          Dst:             sshbuf_new
        - Src:             'kex.c:716,17'
          Dst:             sshbuf_new
        - Src:             'kex.c:717,29'
          Dst:             sshbuf_new
        - Src:             'kex.c:718,29'
          Dst:             sshbuf_new
        - Src:             'kex.c:719,25'
          Dst:             sshbuf_new
        - Src:             'kex.c:720,3'
          Dst:             kex_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_input_ext_info
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 532
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         29
      ICount:          195
      EdgeCount:       39
      CyclomaticComplexity: 12
      functionsReached:
        - kex_protocol_error
        - memchr
        - ssh_dispatch_set
        - sshlog
        - sshpkt_get_cstring
        - sshpkt_get_end
        - sshpkt_get_string
        - sshpkt_get_u32
        - strcmp
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kex.c:542,6'
          Branch Sides:
            - BranchSide:      'kex.c:543,10'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:544,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - sshpkt_get_end
                - sshpkt_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - memchr
                - sshlog
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - memchr
                - sshlog
                - sshlog
                - free
                - sshlog
        - Branch String:   'kex.c:544,6'
          Branch Sides:
            - BranchSide:      'kex.c:545,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:549,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - sshpkt_get_end
                - sshpkt_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - memchr
                - sshlog
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - memchr
                - sshlog
                - sshlog
                - free
        - Branch String:   'kex.c:549,2'
          Branch Sides:
            - BranchSide:      'kex.c:550,31'
              BranchSideFuncs:
                - sshpkt_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_cmp4
                - sshpkt_get_end
                - memchr
                - sshlog
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - memchr
                - sshlog
                - sshlog
                - free
            - BranchSide:      'kex.c:585,24'
              BranchSideFuncs:
                - sshpkt_get_end
        - Branch String:   'kex.c:550,7'
          Branch Sides:
            - BranchSide:      'kex.c:551,11'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:552,30'
              BranchSideFuncs:
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_cmp4
                - sshpkt_get_end
                - sshpkt_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - memchr
                - sshlog
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - memchr
                - sshlog
                - sshlog
                - free
        - Branch String:   'kex.c:552,7'
          Branch Sides:
            - BranchSide:      'kex.c:553,9'
              BranchSideFuncs:
                - free
            - BranchSide:      'kex.c:556,14'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_cmp4
                - sshpkt_get_end
                - sshpkt_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - free
                - memchr
                - sshlog
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - memchr
                - sshlog
                - sshlog
        - Branch String:   'kex.c:556,7'
          Branch Sides:
            - BranchSide:      'kex.c:558,15'
              BranchSideFuncs:
                - memchr
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_cmp4
                - sshpkt_get_end
                - sshpkt_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - memchr
                - sshlog
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - free
                - sshlog
            - BranchSide:      'kex.c:565,21'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_cmp4
                - sshpkt_get_end
                - sshpkt_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - memchr
                - sshlog
                - sshlog
                - free
                - memchr
                - sshlog
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
        - Branch String:   'kex.c:558,8'
          Branch Sides:
            - BranchSide:      'kex.c:559,5'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:562,4'
              BranchSideFuncs:
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_cmp4
                - sshpkt_get_end
                - sshpkt_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - memchr
                - sshlog
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - memchr
                - sshlog
                - free
        - Branch String:   'kex.c:565,14'
          Branch Sides:
            - BranchSide:      'kex.c:569,15'
              BranchSideFuncs:
                - memchr
                - sshlog
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_cmp4
                - sshpkt_get_end
                - sshpkt_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - memchr
                - sshlog
                - sshlog
                - free
                - sshlog
            - BranchSide:      'kex.c:581,4'
              BranchSideFuncs:
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_cmp4
                - sshpkt_get_end
                - sshpkt_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - memchr
                - sshlog
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - memchr
                - sshlog
                - sshlog
                - free
        - Branch String:   'kex.c:569,8'
          Branch Sides:
            - BranchSide:      'kex.c:570,5'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'kex.c:573,4'
              BranchSideFuncs:
                - sshlog
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_cmp4
                - sshpkt_get_end
                - sshpkt_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - memchr
                - sshlog
                - memchr
                - sshlog
                - sshlog
                - free
        - Branch String:   'kex.c:574,8'
          Branch Sides:
            - BranchSide:      'kex.c:575,5'
              BranchSideFuncs:
                - free
                - free
                - __sanitizer_cov_trace_cmp4
                - sshpkt_get_end
                - sshpkt_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - memchr
                - sshlog
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - memchr
                - sshlog
                - sshlog
                - free
            - BranchSide:      'kex.c:577,5'
              BranchSideFuncs:
                - sshlog
                - free
                - free
                - __sanitizer_cov_trace_cmp4
                - sshpkt_get_end
                - sshpkt_get_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - memchr
                - sshlog
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - memchr
                - sshlog
                - sshlog
                - free
      Callsites:
        - Src:             'kex.c:540,2'
          Dst:             sshlog
        - Src:             'kex.c:541,2'
          Dst:             ssh_dispatch_set
        - Src:             'kex.c:541,2'
          Dst:             kex_protocol_error
        - Src:             'kex.c:542,11'
          Dst:             sshpkt_get_u32
        - Src:             'kex.c:545,3'
          Dst:             sshlog
        - Src:             'kex.c:550,12'
          Dst:             sshpkt_get_cstring
        - Src:             'kex.c:552,12'
          Dst:             sshpkt_get_string
        - Src:             'kex.c:556,7'
          Dst:             strcmp
        - Src:             'kex.c:558,8'
          Dst:             memchr
        - Src:             'kex.c:559,5'
          Dst:             sshlog
        - Src:             'kex.c:562,4'
          Dst:             sshlog
        - Src:             'kex.c:565,14'
          Dst:             strcmp
        - Src:             'kex.c:569,8'
          Dst:             memchr
        - Src:             'kex.c:570,5'
          Dst:             sshlog
        - Src:             'kex.c:573,4'
          Dst:             sshlog
        - Src:             'kex.c:574,8'
          Dst:             strcmp
        - Src:             'kex.c:577,5'
          Dst:             sshlog
        - Src:             'kex.c:581,4'
          Dst:             sshlog
        - Src:             'kex.c:585,9'
          Dst:             sshpkt_get_end
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_send_ext_info
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 486
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         22
      ICount:          116
      EdgeCount:       30
      CyclomaticComplexity: 10
      functionsReached:
        - ssh_err
        - sshkey_alg_list
        - sshlog
        - sshpkt_put_cstring
        - sshpkt_put_u32
        - sshpkt_send
        - sshpkt_start
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kex.c:491,6'
          Branch Sides:
            - BranchSide:      'kex.c:492,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:494,24'
              BranchSideFuncs:
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_cstring
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - free
                - ssh_err
                - sshlog
        - Branch String:   'kex.c:494,54'
          Branch Sides:
            - BranchSide:      'kex.c:495,26'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
            - BranchSide:      'kex.c:502,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
        - Branch String:   'kex.c:495,40'
          Branch Sides:
            - BranchSide:      'kex.c:496,30'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
            - BranchSide:      'kex.c:502,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
        - Branch String:   'kex.c:496,60'
          Branch Sides:
            - BranchSide:      'kex.c:497,30'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
            - BranchSide:      'kex.c:502,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
        - Branch String:   'kex.c:497,47'
          Branch Sides:
            - BranchSide:      'kex.c:498,30'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
            - BranchSide:      'kex.c:502,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
        - Branch String:   'kex.c:499,47'
          Branch Sides:
            - BranchSide:      'kex.c:500,30'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
            - BranchSide:      'kex.c:502,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
        - Branch String:   'kex.c:500,46'
          Branch Sides:
            - BranchSide:      'kex.c:501,23'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
            - BranchSide:      'kex.c:502,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
        - Branch String:   'kex.c:494,6'
          Branch Sides:
            - BranchSide:      'kex.c:502,3'
              BranchSideFuncs:
                - ssh_err
                - sshlog
                - free
            - BranchSide:      'kex.c:506,4'
              BranchSideFuncs:
                - free
      Callsites:
        - Src:             'kex.c:490,2'
          Dst:             sshlog
        - Src:             'kex.c:491,14'
          Dst:             sshkey_alg_list
        - Src:             'kex.c:494,11'
          Dst:             sshpkt_start
        - Src:             'kex.c:495,11'
          Dst:             sshpkt_put_u32
        - Src:             'kex.c:496,11'
          Dst:             sshpkt_put_cstring
        - Src:             'kex.c:497,11'
          Dst:             sshpkt_put_cstring
        - Src:             'kex.c:498,11'
          Dst:             sshpkt_put_cstring
        - Src:             'kex.c:500,11'
          Dst:             sshpkt_put_cstring
        - Src:             'kex.c:501,11'
          Dst:             sshpkt_send
        - Src:             'kex.c:502,3'
          Dst:             ssh_err
        - Src:             'kex.c:502,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_input_newkeys
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 590
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          88
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - kex_input_kexinit
        - kex_protocol_error
        - ssh_dispatch_set
        - ssh_set_newkeys
        - sshbuf_reset
        - sshlog
        - sshpkt_get_end
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kex.c:597,6'
          Branch Sides:
            - BranchSide:      'kex.c:598,10'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:599,27'
              BranchSideFuncs:
                - ssh_set_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - free
        - Branch String:   'kex.c:599,6'
          Branch Sides:
            - BranchSide:      'kex.c:600,10'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:601,2'
              BranchSideFuncs:
                - sshbuf_reset
                - free
      Callsites:
        - Src:             'kex.c:594,2'
          Dst:             sshlog
        - Src:             'kex.c:595,2'
          Dst:             ssh_dispatch_set
        - Src:             'kex.c:595,2'
          Dst:             kex_protocol_error
        - Src:             'kex.c:596,2'
          Dst:             ssh_dispatch_set
        - Src:             'kex.c:596,2'
          Dst:             kex_input_kexinit
        - Src:             'kex.c:597,11'
          Dst:             sshpkt_get_end
        - Src:             'kex.c:599,11'
          Dst:             ssh_set_newkeys
        - Src:             'kex.c:603,2'
          Dst:             sshbuf_reset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_send_newkeys
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 514
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         16
      ICount:          90
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - kex_input_newkeys
        - kex_reset_dispatch
        - kex_send_ext_info
        - ssh_dispatch_set
        - sshlog
        - sshpkt_send
        - sshpkt_start
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kex.c:518,53'
          Branch Sides:
            - BranchSide:      'kex.c:519,23'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:520,10'
              BranchSideFuncs: []
        - Branch String:   'kex.c:518,6'
          Branch Sides:
            - BranchSide:      'kex.c:520,10'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:521,2'
              BranchSideFuncs:
                - sshlog
                - ssh_dispatch_set
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_ext_info
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:523,27'
          Branch Sides:
            - BranchSide:      'kex.c:523,31'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - kex_send_ext_info
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:526,2'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'kex.c:523,6'
          Branch Sides:
            - BranchSide:      'kex.c:524,30'
              BranchSideFuncs:
                - kex_send_ext_info
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'kex.c:526,2'
              BranchSideFuncs:
                - sshlog
        - Branch String:   'kex.c:524,7'
          Branch Sides:
            - BranchSide:      'kex.c:524,39'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:525,11'
              BranchSideFuncs: []
      Callsites:
        - Src:             'kex.c:517,2'
          Dst:             kex_reset_dispatch
        - Src:             'kex.c:518,11'
          Dst:             sshpkt_start
        - Src:             'kex.c:519,11'
          Dst:             sshpkt_send
        - Src:             'kex.c:521,2'
          Dst:             sshlog
        - Src:             'kex.c:522,2'
          Dst:             ssh_dispatch_set
        - Src:             'kex.c:522,2'
          Dst:             kex_input_newkeys
        - Src:             'kex.c:524,12'
          Dst:             kex_send_ext_info
        - Src:             'kex.c:526,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_proposal_free_entries
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 370
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         7
      ICount:          39
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kex.c:373,2'
          Branch Sides:
            - BranchSide:      'kex.c:374,8'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:375,1'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_proposal_populate_entries
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 332
      functionDepth:   0
      returnType:      'N/A'
      argCount:        7
      argTypes:
        - 'struct.ssh *'
        - 'char **'
        - 'char *'
        - 'char *'
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         40
      ICount:          258
      EdgeCount:       46
      CyclomaticComplexity: 8
      functionsReached:
        - compat_kex_proposal
        - sshfatal
        - xstrdup
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kex.c:335,25'
          Branch Sides:
            - BranchSide:      'kex.c:335,44'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
                - sshfatal
            - BranchSide:      'kex.c:335,60'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
                - sshfatal
        - Branch String:   'kex.c:338,6'
          Branch Sides:
            - BranchSide:      'kex.c:339,3'
              BranchSideFuncs:
                - sshfatal
            - BranchSide:      'kex.c:341,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
        - Branch String:   'kex.c:341,2'
          Branch Sides:
            - BranchSide:      'kex.c:342,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
            - BranchSide:      'kex.c:366,1'
              BranchSideFuncs: []
        - Branch String:   'kex.c:342,3'
          Branch Sides:
            - BranchSide:      'kex.c:344,34'
              BranchSideFuncs:
                - compat_kex_proposal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - xstrdup
                - xstrdup
            - BranchSide:      'kex.c:349,22'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
            - BranchSide:      'kex.c:349,22'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
            - BranchSide:      'kex.c:353,23'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
            - BranchSide:      'kex.c:353,23'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
            - BranchSide:      'kex.c:357,22'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
            - BranchSide:      'kex.c:357,22'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
            - BranchSide:      'kex.c:360,22'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
            - BranchSide:      'kex.c:363,22'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
        - Branch String:   'kex.c:345,8'
          Branch Sides:
            - BranchSide:      'kex.c:345,19'
              BranchSideFuncs:
                - compat_kex_proposal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - xstrdup
                - xstrdup
            - BranchSide:      'kex.c:345,30'
              BranchSideFuncs:
                - compat_kex_proposal
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - xstrdup
                - xstrdup
        - Branch String:   'kex.c:349,22'
          Branch Sides:
            - BranchSide:      'kex.c:349,32'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
            - BranchSide:      'kex.c:349,42'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
        - Branch String:   'kex.c:353,23'
          Branch Sides:
            - BranchSide:      'kex.c:353,30'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
            - BranchSide:      'kex.c:353,37'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
        - Branch String:   'kex.c:357,22'
          Branch Sides:
            - BranchSide:      'kex.c:357,29'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
            - BranchSide:      'kex.c:357,36'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
        - Branch String:   'kex.c:360,22'
          Branch Sides:
            - BranchSide:      'kex.c:360,31'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
            - BranchSide:      'kex.c:360,40'
              BranchSideFuncs:
                - xstrdup
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - xstrdup
                - xstrdup
                - compat_kex_proposal
                - xstrdup
      Callsites:
        - Src:             'kex.c:339,3'
          Dst:             sshfatal
        - Src:             'kex.c:344,14'
          Dst:             compat_kex_proposal
        - Src:             'kex.c:349,14'
          Dst:             xstrdup
        - Src:             'kex.c:353,15'
          Dst:             xstrdup
        - Src:             'kex.c:357,14'
          Dst:             xstrdup
        - Src:             'kex.c:360,14'
          Dst:             xstrdup
        - Src:             'kex.c:363,14'
          Dst:             xstrdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_assemble_names
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 228
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char **'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         50
      ICount:          293
      EdgeCount:       69
      CyclomaticComplexity: 21
      functionsReached:
        - kex_names_cat
        - match_filter_allowlist
        - match_filter_denylist
        - strdup
        - strsep
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kex.c:233,20'
          Branch Sides:
            - BranchSide:      'kex.c:233,23'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:234,3'
              BranchSideFuncs: []
        - Branch String:   'kex.c:233,35'
          Branch Sides:
            - BranchSide:      'kex.c:233,38'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:234,3'
              BranchSideFuncs: []
        - Branch String:   'kex.c:233,6'
          Branch Sides:
            - BranchSide:      'kex.c:234,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:236,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_filter_allowlist
                - kex_names_cat
                - free
                - kex_names_cat
                - free
                - match_filter_denylist
                - free
                - kex_names_cat
                - free
                - strdup
        - Branch String:   'kex.c:236,21'
          Branch Sides:
            - BranchSide:      'kex.c:236,26'
              BranchSideFuncs:
                - strdup
            - BranchSide:      'kex.c:237,24'
              BranchSideFuncs:
                - strdup
        - Branch String:   'kex.c:236,6'
          Branch Sides:
            - BranchSide:      'kex.c:237,24'
              BranchSideFuncs:
                - strdup
            - BranchSide:      'kex.c:242,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_filter_allowlist
                - kex_names_cat
                - free
                - kex_names_cat
                - free
                - match_filter_denylist
                - free
                - kex_names_cat
                - free
        - Branch String:   'kex.c:237,7'
          Branch Sides:
            - BranchSide:      'kex.c:238,4'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:239,3'
              BranchSideFuncs: []
        - Branch String:   'kex.c:244,6'
          Branch Sides:
            - BranchSide:      'kex.c:246,28'
              BranchSideFuncs:
                - kex_names_cat
                - free
                - strdup
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_filter_allowlist
                - kex_names_cat
                - free
            - BranchSide:      'kex.c:252,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_filter_allowlist
                - kex_names_cat
                - free
                - kex_names_cat
                - free
                - match_filter_denylist
                - free
        - Branch String:   'kex.c:246,7'
          Branch Sides:
            - BranchSide:      'kex.c:247,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'kex.c:250,8'
              BranchSideFuncs:
                - free
                - strdup
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_filter_allowlist
                - kex_names_cat
                - free
        - Branch String:   'kex.c:252,13'
          Branch Sides:
            - BranchSide:      'kex.c:254,39'
              BranchSideFuncs:
                - match_filter_denylist
                - free
                - free
                - free
                - free
                - free
            - BranchSide:      'kex.c:261,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strdup
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_filter_allowlist
                - kex_names_cat
                - free
                - kex_names_cat
                - free
        - Branch String:   'kex.c:254,7'
          Branch Sides:
            - BranchSide:      'kex.c:255,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'kex.c:258,8'
              BranchSideFuncs:
                - free
        - Branch String:   'kex.c:261,13'
          Branch Sides:
            - BranchSide:      'kex.c:0,0'
              BranchSideFuncs:
                - kex_names_cat
                - free
                - strdup
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_filter_allowlist
                - kex_names_cat
                - free
            - BranchSide:      'kex.c:263,28'
              BranchSideFuncs:
                - kex_names_cat
                - free
                - strdup
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_filter_allowlist
                - kex_names_cat
                - free
        - Branch String:   'kex.c:263,7'
          Branch Sides:
            - BranchSide:      'kex.c:264,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'kex.c:267,8'
              BranchSideFuncs:
                - free
                - strdup
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_filter_allowlist
                - kex_names_cat
                - free
        - Branch String:   'kex.c:279,6'
          Branch Sides:
            - BranchSide:      'kex.c:280,5'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'kex.c:284,2'
              BranchSideFuncs:
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_filter_allowlist
                - kex_names_cat
                - free
        - Branch String:   'kex.c:284,2'
          Branch Sides:
            - BranchSide:      'kex.c:285,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_filter_allowlist
                - kex_names_cat
                - free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
            - BranchSide:      'kex.c:302,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
        - Branch String:   'kex.c:285,7'
          Branch Sides:
            - BranchSide:      'kex.c:287,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'kex.c:290,8'
              BranchSideFuncs:
                - free
                - match_filter_allowlist
                - kex_names_cat
                - free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:291,7'
          Branch Sides:
            - BranchSide:      'kex.c:292,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'kex.c:295,28'
              BranchSideFuncs:
                - kex_names_cat
                - free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_filter_allowlist
        - Branch String:   'kex.c:295,7'
          Branch Sides:
            - BranchSide:      'kex.c:296,6'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'kex.c:299,8'
              BranchSideFuncs:
                - free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_filter_allowlist
                - kex_names_cat
        - Branch String:   'kex.c:302,18'
          Branch Sides:
            - BranchSide:      'kex.c:302,22'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'kex.c:305,5'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   'kex.c:302,6'
          Branch Sides:
            - BranchSide:      'kex.c:305,5'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      'kex.c:310,11'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
      Callsites:
        - Src:             'kex.c:237,17'
          Dst:             strdup
        - Src:             'kex.c:246,14'
          Dst:             kex_names_cat
        - Src:             'kex.c:254,17'
          Dst:             match_filter_denylist
        - Src:             'kex.c:263,14'
          Dst:             kex_names_cat
        - Src:             'kex.c:279,30'
          Dst:             strdup
        - Src:             'kex.c:284,15'
          Dst:             strsep
        - Src:             'kex.c:291,19'
          Dst:             match_filter_allowlist
        - Src:             'kex.c:295,14'
          Dst:             kex_names_cat
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_names_cat
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 186
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         35
      ICount:          196
      EdgeCount:       47
      CyclomaticComplexity: 14
      functionsReached:
        - calloc
        - match_list
        - strdup
        - strlcat
        - strlcpy
        - strlen
        - strsep
      functionUses:    3
      BranchProfiles:
        - Branch String:   'kex.c:190,16'
          Branch Sides:
            - BranchSide:      'kex.c:190,20'
              BranchSideFuncs:
                - strdup
            - BranchSide:      'kex.c:191,17'
              BranchSideFuncs:
                - strdup
        - Branch String:   'kex.c:190,6'
          Branch Sides:
            - BranchSide:      'kex.c:191,17'
              BranchSideFuncs:
                - strdup
            - BranchSide:      'kex.c:192,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - strlen
                - strdup
                - calloc
                - strlcpy
                - strsep
                - free
                - match_list
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strsep
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - strdup
        - Branch String:   'kex.c:192,16'
          Branch Sides:
            - BranchSide:      'kex.c:192,20'
              BranchSideFuncs:
                - strdup
            - BranchSide:      'kex.c:193,17'
              BranchSideFuncs:
                - strdup
        - Branch String:   'kex.c:192,6'
          Branch Sides:
            - BranchSide:      'kex.c:193,17'
              BranchSideFuncs:
                - strdup
            - BranchSide:      'kex.c:194,13'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - strlen
                - strdup
                - calloc
                - strlcpy
                - strsep
                - free
                - match_list
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strsep
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'kex.c:194,6'
          Branch Sides:
            - BranchSide:      'kex.c:195,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:196,15'
              BranchSideFuncs:
                - strlen
                - strlen
                - strdup
                - calloc
                - strlcpy
                - strsep
                - free
                - match_list
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strsep
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   'kex.c:197,37'
          Branch Sides:
            - BranchSide:      'kex.c:198,23'
              BranchSideFuncs:
                - free
            - BranchSide:      'kex.c:199,8'
              BranchSideFuncs:
                - free
        - Branch String:   'kex.c:197,6'
          Branch Sides:
            - BranchSide:      'kex.c:199,8'
              BranchSideFuncs:
                - free
            - BranchSide:      'kex.c:202,10'
              BranchSideFuncs:
                - strlcpy
                - strsep
                - free
                - match_list
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strsep
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:203,33'
          Branch Sides:
            - BranchSide:      'kex.c:203,37'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - free
                - match_list
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strsep
                - free
                - free
                - free
            - BranchSide:      'kex.c:203,2'
              BranchSideFuncs:
                - free
                - match_list
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
        - Branch String:   'kex.c:203,2'
          Branch Sides:
            - BranchSide:      'kex.c:204,23'
              BranchSideFuncs:
                - match_list
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strsep
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
                - free
            - BranchSide:      'kex.c:215,7'
              BranchSideFuncs:
                - free
        - Branch String:   'kex.c:204,7'
          Branch Sides:
            - BranchSide:      'kex.c:205,9'
              BranchSideFuncs:
                - free
                - strsep
                - free
                - match_list
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kex.c:208,15'
              BranchSideFuncs:
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strsep
                - free
                - match_list
                - free
                - __sanitizer_cov_trace_const_cmp4
                - free
                - free
        - Branch String:   'kex.c:208,37'
          Branch Sides:
            - BranchSide:      'kex.c:209,15'
              BranchSideFuncs:
                - free
                - free
            - BranchSide:      'kex.c:210,9'
              BranchSideFuncs:
                - free
                - free
        - Branch String:   'kex.c:208,7'
          Branch Sides:
            - BranchSide:      'kex.c:210,9'
              BranchSideFuncs:
                - free
                - free
            - BranchSide:      'kex.c:214,2'
              BranchSideFuncs:
                - strsep
                - free
                - match_list
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - strlcat
                - __sanitizer_cov_trace_cmp8
                - free
                - free
                - free
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'kex.c:191,10'
          Dst:             strdup
        - Src:             'kex.c:193,10'
          Dst:             strdup
        - Src:             'kex.c:194,6'
          Dst:             strlen
        - Src:             'kex.c:196,8'
          Dst:             strlen
        - Src:             'kex.c:196,20'
          Dst:             strlen
        - Src:             'kex.c:197,18'
          Dst:             strdup
        - Src:             'kex.c:198,13'
          Dst:             calloc
        - Src:             'kex.c:202,2'
          Dst:             strlcpy
        - Src:             'kex.c:203,12'
          Dst:             strsep
        - Src:             'kex.c:204,12'
          Dst:             match_list
        - Src:             'kex.c:208,7'
          Dst:             strlcat
        - Src:             'kex.c:209,7'
          Dst:             strlcat
        - Src:             'kex.c:203,53'
          Dst:             strsep
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_names_valid
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 160
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         20
      ICount:          101
      EdgeCount:       26
      CyclomaticComplexity: 8
      functionsReached:
        - kex_alg_by_name
        - sshlog
        - strcmp
        - strdup
        - strsep
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kex.c:163,20'
          Branch Sides:
            - BranchSide:      'kex.c:163,30'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:164,3'
              BranchSideFuncs: []
        - Branch String:   'kex.c:163,6'
          Branch Sides:
            - BranchSide:      'kex.c:164,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:165,23'
              BranchSideFuncs:
                - strdup
                - strsep
                - sshlog
                - free
                - kex_alg_by_name
                - strsep
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:165,6'
          Branch Sides:
            - BranchSide:      'kex.c:166,3'
              BranchSideFuncs: []
            - BranchSide:      'kex.c:167,12'
              BranchSideFuncs:
                - strsep
                - sshlog
                - free
                - kex_alg_by_name
                - strsep
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kex.c:167,33'
          Branch Sides:
            - BranchSide:      'kex.c:167,37'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
                - kex_alg_by_name
                - strsep
                - sshlog
                - free
            - BranchSide:      'kex.c:167,2'
              BranchSideFuncs:
                - sshlog
                - free
                - kex_alg_by_name
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
        - Branch String:   'kex.c:167,2'
          Branch Sides:
            - BranchSide:      'kex.c:169,23'
              BranchSideFuncs:
                - kex_alg_by_name
                - strsep
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - free
            - BranchSide:      'kex.c:175,2'
              BranchSideFuncs:
                - sshlog
                - free
        - Branch String:   'kex.c:169,7'
          Branch Sides:
            - BranchSide:      'kex.c:170,4'
              BranchSideFuncs:
                - sshlog
                - free
            - BranchSide:      'kex.c:174,2'
              BranchSideFuncs:
                - strsep
                - sshlog
                - free
                - kex_alg_by_name
                - sshlog
                - free
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'kex.c:163,23'
          Dst:             strcmp
        - Src:             'kex.c:165,16'
          Dst:             strdup
        - Src:             'kex.c:167,12'
          Dst:             strsep
        - Src:             'kex.c:169,7'
          Dst:             kex_alg_by_name
        - Src:             'kex.c:170,4'
          Dst:             sshlog
        - Src:             'kex.c:168,11'
          Dst:             strsep
        - Src:             'kex.c:175,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_alg_list
      functionSourceFile: '/src/openssh/kex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 125
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         13
      ICount:          103
      EdgeCount:       16
      CyclomaticComplexity: 5
      functionsReached:
        - realloc
        - strlen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kex.c:130,2'
          Branch Sides:
            - BranchSide:      'kex.c:131,7'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
            - BranchSide:      'kex.c:142,9'
              BranchSideFuncs: []
        - Branch String:   'kex.c:131,7'
          Branch Sides:
            - BranchSide:      'kex.c:132,18'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
            - BranchSide:      'kex.c:133,17'
              BranchSideFuncs:
                - strlen
                - realloc
                - llvm.memcpy.p0i8.p0i8.i64
                - free
        - Branch String:   'kex.c:134,7'
          Branch Sides:
            - BranchSide:      'kex.c:135,9'
              BranchSideFuncs:
                - free
            - BranchSide:      'kex.c:138,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - strlen
                - realloc
                - free
      Callsites:
        - Src:             'kex.c:133,10'
          Dst:             strlen
        - Src:             'kex.c:134,14'
          Dst:             realloc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    input_kex_dh_gex_reply
      functionSourceFile: '/src/openssh/kexgexc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 146
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh.268 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         48
      ICount:          362
      EdgeCount:       67
      CyclomaticComplexity: 21
      functionsReached:
        - BN_clear_free
        - DH_free
        - DH_get0_key
        - DH_get0_pqg
        - explicit_bzero
        - kex_derive_keys
        - kex_dh_compute_key
        - kex_protocol_error
        - kex_send_newkeys
        - kex_verify_host_key
        - kexgex_hash
        - ssh_dispatch_set
        - sshbuf_free
        - sshbuf_fromb
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put
        - sshkey_free
        - sshkey_fromb
        - sshkey_verify
        - sshlog
        - sshpkt_get_bignum2
        - sshpkt_get_end
        - sshpkt_get_string
        - sshpkt_getb_froms
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kexgexc.c:162,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:163,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:165,26'
              BranchSideFuncs:
                - sshbuf_fromb
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - kex_verify_host_key
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - kex_dh_compute_key
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexc.c:165,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:166,5'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:169,24'
              BranchSideFuncs:
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - kex_verify_host_key
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - kex_dh_compute_key
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexc.c:169,53'
          Branch Sides:
            - BranchSide:      'kexgexc.c:170,31'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:171,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexc.c:169,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:171,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:173,30'
              BranchSideFuncs:
                - sshpkt_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - kex_dh_compute_key
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexc.c:173,57'
          Branch Sides:
            - BranchSide:      'kexgexc.c:174,29'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:176,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexc.c:174,59'
          Branch Sides:
            - BranchSide:      'kexgexc.c:175,26'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:176,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexc.c:173,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:176,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:177,23'
              BranchSideFuncs:
                - sshbuf_new
                - kex_dh_compute_key
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexc.c:177,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:178,5'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:181,30'
              BranchSideFuncs:
                - kex_dh_compute_key
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexc.c:181,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:182,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:183,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexc.c:183,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:184,14'
              BranchSideFuncs:
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgexc.c:187,14'
              BranchSideFuncs:
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexc.c:190,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:203,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:205,25'
              BranchSideFuncs:
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexc.c:205,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:207,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:209,27'
              BranchSideFuncs:
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexc.c:209,68'
          Branch Sides:
            - BranchSide:      'kexgexc.c:210,28'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:211,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexc.c:209,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:211,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:214,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexc.c:214,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:214,36'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:215,7'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexc.c:215,36'
          Branch Sides:
            - BranchSide:      'kexgexc.c:215,39'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:216,6'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexc.c:215,7'
          Branch Sides:
            - BranchSide:      'kexgexc.c:216,6'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:219,27'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexc.c:219,7'
          Branch Sides:
            - BranchSide:      'kexgexc.c:220,6'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:223,23'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexc.c:223,7'
          Branch Sides:
            - BranchSide:      'kexgexc.c:224,4'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexc.c:225,26'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - free
      Callsites:
        - Src:             'kexgexc.c:158,2'
          Dst:             sshlog
        - Src:             'kexgexc.c:159,2'
          Dst:             ssh_dispatch_set
        - Src:             'kexgexc.c:159,2'
          Dst:             kex_protocol_error
        - Src:             'kexgexc.c:162,11'
          Dst:             sshpkt_getb_froms
        - Src:             'kexgexc.c:165,13'
          Dst:             sshbuf_fromb
        - Src:             'kexgexc.c:169,11'
          Dst:             sshkey_fromb
        - Src:             'kexgexc.c:170,11'
          Dst:             kex_verify_host_key
        - Src:             'kexgexc.c:173,11'
          Dst:             sshpkt_get_bignum2
        - Src:             'kexgexc.c:174,11'
          Dst:             sshpkt_get_string
        - Src:             'kexgexc.c:175,11'
          Dst:             sshpkt_get_end
        - Src:             'kexgexc.c:177,23'
          Dst:             sshbuf_new
        - Src:             'kexgexc.c:181,11'
          Dst:             kex_dh_compute_key
        - Src:             'kexgexc.c:187,2'
          Dst:             DH_get0_key
        - Src:             'kexgexc.c:188,2'
          Dst:             DH_get0_pqg
        - Src:             'kexgexc.c:201,6'
          Dst:             sshbuf_ptr
        - Src:             'kexgexc.c:201,33'
          Dst:             sshbuf_len
        - Src:             'kexgexc.c:190,11'
          Dst:             kexgex_hash
        - Src:             'kexgexc.c:205,11'
          Dst:             sshkey_verify
        - Src:             'kexgexc.c:209,11'
          Dst:             kex_derive_keys
        - Src:             'kexgexc.c:210,11'
          Dst:             kex_send_newkeys
        - Src:             'kexgexc.c:219,27'
          Dst:             sshbuf_new
        - Src:             'kexgexc.c:223,12'
          Dst:             sshbuf_put
        - Src:             'kexgexc.c:230,2'
          Dst:             explicit_bzero
        - Src:             'kexgexc.c:231,2'
          Dst:             DH_free
        - Src:             'kexgexc.c:233,2'
          Dst:             BN_clear_free
        - Src:             'kexgexc.c:234,2'
          Dst:             sshbuf_free
        - Src:             'kexgexc.c:235,2'
          Dst:             sshkey_free
        - Src:             'kexgexc.c:236,2'
          Dst:             sshbuf_free
        - Src:             'kexgexc.c:237,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DH_get0_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.dh_st *'
        - 'struct.bignum_st **'
        - 'struct.bignum_st **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    6
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DH_get0_pqg
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'struct.dh_st *'
        - 'struct.bignum_st **'
        - 'struct.bignum_st **'
        - 'struct.bignum_st **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    input_kex_dh_gex_group
      functionSourceFile: '/src/openssh/kexgexc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 96
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh.268 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         29
      ICount:          188
      EdgeCount:       40
      CyclomaticComplexity: 13
      functionsReached:
        - BN_clear_free
        - BN_num_bits
        - DH_get0_key
        - dh_gen_key
        - dh_new_group
        - input_kex_dh_gex_reply
        - kex_protocol_error
        - ssh_dispatch_set
        - sshlog
        - sshpkt_get_bignum2
        - sshpkt_get_end
        - sshpkt_put_bignum2
        - sshpkt_send
        - sshpkt_start
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kexgexc.c:105,45'
          Branch Sides:
            - BranchSide:      'kexgexc.c:106,30'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'kexgexc.c:108,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'kexgexc.c:106,45'
          Branch Sides:
            - BranchSide:      'kexgexc.c:107,26'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'kexgexc.c:108,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'kexgexc.c:105,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:108,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'kexgexc.c:109,26'
              BranchSideFuncs:
                - BN_num_bits
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_dispatch_set
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'kexgexc.c:109,34'
          Branch Sides:
            - BranchSide:      'kexgexc.c:110,13'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'kexgexc.c:111,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'kexgexc.c:110,29'
          Branch Sides:
            - BranchSide:      'kexgexc.c:110,39'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'kexgexc.c:111,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'kexgexc.c:109,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:111,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'kexgexc.c:114,30'
              BranchSideFuncs:
                - dh_new_group
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_dispatch_set
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'kexgexc.c:114,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:115,5'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'kexgexc.c:118,8'
              BranchSideFuncs:
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_dispatch_set
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'kexgexc.c:121,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:122,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'kexgexc.c:123,14'
              BranchSideFuncs:
                - DH_get0_key
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_dispatch_set
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'kexgexc.c:124,61'
          Branch Sides:
            - BranchSide:      'kexgexc.c:125,30'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'kexgexc.c:127,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'kexgexc.c:125,50'
          Branch Sides:
            - BranchSide:      'kexgexc.c:126,23'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'kexgexc.c:127,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'kexgexc.c:124,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:127,3'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'kexgexc.c:128,2'
              BranchSideFuncs:
                - sshlog
                - sshlog
                - ssh_dispatch_set
                - BN_clear_free
                - BN_clear_free
      Callsites:
        - Src:             'kexgexc.c:102,2'
          Dst:             sshlog
        - Src:             'kexgexc.c:103,2'
          Dst:             ssh_dispatch_set
        - Src:             'kexgexc.c:103,2'
          Dst:             kex_protocol_error
        - Src:             'kexgexc.c:105,11'
          Dst:             sshpkt_get_bignum2
        - Src:             'kexgexc.c:106,11'
          Dst:             sshpkt_get_bignum2
        - Src:             'kexgexc.c:107,11'
          Dst:             sshpkt_get_end
        - Src:             'kexgexc.c:109,14'
          Dst:             BN_num_bits
        - Src:             'kexgexc.c:114,17'
          Dst:             dh_new_group
        - Src:             'kexgexc.c:121,11'
          Dst:             dh_gen_key
        - Src:             'kexgexc.c:123,2'
          Dst:             DH_get0_key
        - Src:             'kexgexc.c:124,11'
          Dst:             sshpkt_start
        - Src:             'kexgexc.c:125,11'
          Dst:             sshpkt_put_bignum2
        - Src:             'kexgexc.c:126,11'
          Dst:             sshpkt_send
        - Src:             'kexgexc.c:128,2'
          Dst:             sshlog
        - Src:             'kexgexc.c:135,2'
          Dst:             sshlog
        - Src:             'kexgexc.c:136,2'
          Dst:             ssh_dispatch_set
        - Src:             'kexgexc.c:136,2'
          Dst:             input_kex_dh_gex_reply
        - Src:             'kexgexc.c:139,2'
          Dst:             BN_clear_free
        - Src:             'kexgexc.c:140,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kexgex_client
      functionSourceFile: '/src/openssh/kexgexc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 61
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh.268 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         21
      ICount:          153
      EdgeCount:       28
      CyclomaticComplexity: 9
      functionsReached:
        - dh_estimate
        - input_kex_dh_gex_group
        - ssh_dispatch_set
        - sshlog
        - sshpkt_put_u32
        - sshpkt_send
        - sshpkt_start
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kexgexc.c:71,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:72,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_dispatch_set
            - BranchSide:      'kexgexc.c:74,24'
              BranchSideFuncs:
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_dispatch_set
        - Branch String:   'kexgexc.c:72,16'
          Branch Sides:
            - BranchSide:      'kexgexc.c:72,3'
              BranchSideFuncs:
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_dispatch_set
            - BranchSide:      'kexgexc.c:72,3'
              BranchSideFuncs:
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
                - ssh_dispatch_set
        - Branch String:   'kexgexc.c:74,64'
          Branch Sides:
            - BranchSide:      'kexgexc.c:75,26'
              BranchSideFuncs: []
            - BranchSide:      'kexgexc.c:79,3'
              BranchSideFuncs: []
        - Branch String:   'kexgexc.c:75,47'
          Branch Sides:
            - BranchSide:      'kexgexc.c:76,26'
              BranchSideFuncs: []
            - BranchSide:      'kexgexc.c:79,3'
              BranchSideFuncs: []
        - Branch String:   'kexgexc.c:76,49'
          Branch Sides:
            - BranchSide:      'kexgexc.c:77,26'
              BranchSideFuncs: []
            - BranchSide:      'kexgexc.c:79,3'
              BranchSideFuncs: []
        - Branch String:   'kexgexc.c:77,47'
          Branch Sides:
            - BranchSide:      'kexgexc.c:78,23'
              BranchSideFuncs: []
            - BranchSide:      'kexgexc.c:79,3'
              BranchSideFuncs: []
        - Branch String:   'kexgexc.c:74,6'
          Branch Sides:
            - BranchSide:      'kexgexc.c:79,3'
              BranchSideFuncs: []
            - BranchSide:      'kexgexc.c:80,2'
              BranchSideFuncs:
                - sshlog
                - sshlog
                - ssh_dispatch_set
      Callsites:
        - Src:             'kexgexc.c:66,10'
          Dst:             dh_estimate
        - Src:             'kexgexc.c:74,11'
          Dst:             sshpkt_start
        - Src:             'kexgexc.c:75,11'
          Dst:             sshpkt_put_u32
        - Src:             'kexgexc.c:76,11'
          Dst:             sshpkt_put_u32
        - Src:             'kexgexc.c:77,11'
          Dst:             sshpkt_put_u32
        - Src:             'kexgexc.c:78,11'
          Dst:             sshpkt_send
        - Src:             'kexgexc.c:80,2'
          Dst:             sshlog
        - Src:             'kexgexc.c:86,2'
          Dst:             sshlog
        - Src:             'kexgexc.c:87,2'
          Dst:             ssh_dispatch_set
        - Src:             'kexgexc.c:87,2'
          Dst:             input_kex_dh_gex_group
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    input_kex_dh_gex_init
      functionSourceFile: '/src/openssh/kexgexs.c'
      linkageType:     InternalLinkage
      functionLinenumber: 128
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh.268 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         44
      ICount:          330
      EdgeCount:       62
      CyclomaticComplexity: 20
      functionsReached:
        - BN_clear_free
        - DH_free
        - DH_get0_key
        - DH_get0_pqg
        - explicit_bzero
        - kex_derive_keys
        - kex_dh_compute_key
        - kex_load_hostkey
        - kex_protocol_error
        - kex_send_newkeys
        - kexgex_hash
        - ssh_dispatch_set
        - sshbuf_free
        - sshbuf_new
        - sshbuf_ptr
        - sshkey_from_private
        - sshkey_putb
        - sshlog
        - sshpkt_get_bignum2
        - sshpkt_get_end
        - sshpkt_put_bignum2
        - sshpkt_put_string
        - sshpkt_put_stringb
        - sshpkt_send
        - sshpkt_start
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kexgexs.c:143,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:145,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:148,30'
              BranchSideFuncs:
                - sshpkt_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - kex_dh_compute_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexs.c:148,57'
          Branch Sides:
            - BranchSide:      'kexgexs.c:149,26'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:150,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexs.c:148,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:150,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:151,23'
              BranchSideFuncs:
                - sshbuf_new
                - kex_dh_compute_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexs.c:151,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:152,5'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:155,30'
              BranchSideFuncs:
                - kex_dh_compute_key
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexs.c:155,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:156,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:157,30'
              BranchSideFuncs:
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexs.c:157,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:158,5'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:161,23'
              BranchSideFuncs:
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexs.c:161,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:162,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:165,14'
              BranchSideFuncs:
                - DH_get0_key
                - DH_get0_pqg
                - sshbuf_ptr
                - sshbuf_len
                - kexgex_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexs.c:168,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:181,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:184,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexs.c:184,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:186,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:189,24'
              BranchSideFuncs:
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexs.c:189,62'
          Branch Sides:
            - BranchSide:      'kexgexs.c:190,30'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:194,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexs.c:190,63'
          Branch Sides:
            - BranchSide:      'kexgexs.c:191,30'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:194,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexs.c:191,50'
          Branch Sides:
            - BranchSide:      'kexgexs.c:192,29'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:194,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexs.c:192,57'
          Branch Sides:
            - BranchSide:      'kexgexs.c:193,23'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:194,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexs.c:189,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:194,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:196,27'
              BranchSideFuncs:
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexs.c:196,68'
          Branch Sides:
            - BranchSide:      'kexgexs.c:197,28'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:198,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexs.c:196,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:198,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:201,6'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgexs.c:201,35'
          Branch Sides:
            - BranchSide:      'kexgexs.c:202,31'
              BranchSideFuncs:
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:203,33'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
        - Branch String:   'kexgexs.c:201,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:203,33'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
            - BranchSide:      'kexgexs.c:204,3'
              BranchSideFuncs:
                - explicit_bzero
                - DH_free
                - BN_clear_free
                - sshbuf_free
                - sshbuf_free
                - free
      Callsites:
        - Src:             'kexgexs.c:140,2'
          Dst:             sshlog
        - Src:             'kexgexs.c:141,2'
          Dst:             ssh_dispatch_set
        - Src:             'kexgexs.c:141,2'
          Dst:             kex_protocol_error
        - Src:             'kexgexs.c:143,11'
          Dst:             kex_load_hostkey
        - Src:             'kexgexs.c:148,11'
          Dst:             sshpkt_get_bignum2
        - Src:             'kexgexs.c:149,11'
          Dst:             sshpkt_get_end
        - Src:             'kexgexs.c:151,23'
          Dst:             sshbuf_new
        - Src:             'kexgexs.c:155,11'
          Dst:             kex_dh_compute_key
        - Src:             'kexgexs.c:157,30'
          Dst:             sshbuf_new
        - Src:             'kexgexs.c:161,11'
          Dst:             sshkey_putb
        - Src:             'kexgexs.c:165,2'
          Dst:             DH_get0_key
        - Src:             'kexgexs.c:166,2'
          Dst:             DH_get0_pqg
        - Src:             'kexgexs.c:179,6'
          Dst:             sshbuf_ptr
        - Src:             'kexgexs.c:179,33'
          Dst:             sshbuf_len
        - Src:             'kexgexs.c:168,11'
          Dst:             kexgex_hash
        - Src:             'kexgexs.c:189,11'
          Dst:             sshpkt_start
        - Src:             'kexgexs.c:190,11'
          Dst:             sshpkt_put_stringb
        - Src:             'kexgexs.c:191,11'
          Dst:             sshpkt_put_bignum2
        - Src:             'kexgexs.c:192,11'
          Dst:             sshpkt_put_string
        - Src:             'kexgexs.c:193,11'
          Dst:             sshpkt_send
        - Src:             'kexgexs.c:196,11'
          Dst:             kex_derive_keys
        - Src:             'kexgexs.c:197,11'
          Dst:             kex_send_newkeys
        - Src:             'kexgexs.c:202,11'
          Dst:             sshkey_from_private
        - Src:             'kexgexs.c:207,2'
          Dst:             explicit_bzero
        - Src:             'kexgexs.c:208,2'
          Dst:             DH_free
        - Src:             'kexgexs.c:210,2'
          Dst:             BN_clear_free
        - Src:             'kexgexs.c:211,2'
          Dst:             sshbuf_free
        - Src:             'kexgexs.c:212,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    input_kex_dh_gex_request
      functionSourceFile: '/src/openssh/kexgexs.c'
      linkageType:     InternalLinkage
      functionLinenumber: 72
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh.268 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         50
      ICount:          318
      EdgeCount:       69
      CyclomaticComplexity: 21
      functionsReached:
        - DH_get0_pqg
        - choose_dh
        - dh_gen_key
        - input_kex_dh_gex_init
        - kex_protocol_error
        - mm_choose_dh
        - ssh_dispatch_set
        - sshlog
        - sshpkt_disconnect
        - sshpkt_get_end
        - sshpkt_get_u32
        - sshpkt_put_bignum2
        - sshpkt_send
        - sshpkt_start
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kexgexs.c:81,43'
          Branch Sides:
            - BranchSide:      'kexgexs.c:82,26'
              BranchSideFuncs: []
            - BranchSide:      'kexgexs.c:85,3'
              BranchSideFuncs: []
        - Branch String:   'kexgexs.c:82,45'
          Branch Sides:
            - BranchSide:      'kexgexs.c:83,26'
              BranchSideFuncs: []
            - BranchSide:      'kexgexs.c:85,3'
              BranchSideFuncs: []
        - Branch String:   'kexgexs.c:83,43'
          Branch Sides:
            - BranchSide:      'kexgexs.c:84,26'
              BranchSideFuncs: []
            - BranchSide:      'kexgexs.c:85,3'
              BranchSideFuncs: []
        - Branch String:   'kexgexs.c:81,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:85,3'
              BranchSideFuncs: []
            - BranchSide:      'kexgexs.c:86,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_dh
                - sshlog
                - DH_get0_pqg
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
                - sshpkt_disconnect
                - mm_choose_dh
        - Branch String:   'kexgexs.c:89,8'
          Branch Sides:
            - BranchSide:      'kexgexs.c:89,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_dh
                - sshlog
                - DH_get0_pqg
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
                - sshpkt_disconnect
                - mm_choose_dh
            - BranchSide:      'kexgexs.c:89,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_dh
                - sshlog
                - DH_get0_pqg
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
                - sshpkt_disconnect
                - mm_choose_dh
        - Branch String:   'kexgexs.c:90,8'
          Branch Sides:
            - BranchSide:      'kexgexs.c:90,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_dh
                - sshlog
                - DH_get0_pqg
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
                - sshpkt_disconnect
                - mm_choose_dh
            - BranchSide:      'kexgexs.c:90,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_dh
                - sshlog
                - DH_get0_pqg
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
                - sshpkt_disconnect
                - mm_choose_dh
        - Branch String:   'kexgexs.c:91,10'
          Branch Sides:
            - BranchSide:      'kexgexs.c:91,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_dh
                - sshlog
                - DH_get0_pqg
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
                - sshpkt_disconnect
                - mm_choose_dh
            - BranchSide:      'kexgexs.c:91,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_dh
                - sshlog
                - DH_get0_pqg
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
                - sshpkt_disconnect
                - mm_choose_dh
        - Branch String:   'kexgexs.c:92,10'
          Branch Sides:
            - BranchSide:      'kexgexs.c:92,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_dh
                - sshlog
                - DH_get0_pqg
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
                - sshpkt_disconnect
                - mm_choose_dh
            - BranchSide:      'kexgexs.c:92,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - choose_dh
                - sshlog
                - DH_get0_pqg
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
                - sshpkt_disconnect
                - mm_choose_dh
        - Branch String:   'kexgexs.c:94,26'
          Branch Sides:
            - BranchSide:      'kexgexs.c:94,29'
              BranchSideFuncs: []
            - BranchSide:      'kexgexs.c:96,5'
              BranchSideFuncs: []
        - Branch String:   'kexgexs.c:94,51'
          Branch Sides:
            - BranchSide:      'kexgexs.c:95,6'
              BranchSideFuncs: []
            - BranchSide:      'kexgexs.c:96,5'
              BranchSideFuncs: []
        - Branch String:   'kexgexs.c:95,28'
          Branch Sides:
            - BranchSide:      'kexgexs.c:95,31'
              BranchSideFuncs: []
            - BranchSide:      'kexgexs.c:96,5'
              BranchSideFuncs: []
        - Branch String:   'kexgexs.c:94,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:96,5'
              BranchSideFuncs: []
            - BranchSide:      'kexgexs.c:101,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - choose_dh
                - sshlog
                - DH_get0_pqg
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
                - sshpkt_disconnect
                - mm_choose_dh
        - Branch String:   'kexgexs.c:101,12'
          Branch Sides:
            - BranchSide:      'kexgexs.c:101,2'
              BranchSideFuncs:
                - mm_choose_dh
                - sshlog
                - DH_get0_pqg
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
                - sshpkt_disconnect
            - BranchSide:      'kexgexs.c:101,2'
              BranchSideFuncs:
                - choose_dh
                - sshlog
                - DH_get0_pqg
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
                - sshpkt_disconnect
        - Branch String:   'kexgexs.c:102,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:103,27'
              BranchSideFuncs:
                - sshpkt_disconnect
            - BranchSide:      'kexgexs.c:107,2'
              BranchSideFuncs:
                - sshlog
                - DH_get0_pqg
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
        - Branch String:   'kexgexs.c:109,62'
          Branch Sides:
            - BranchSide:      'kexgexs.c:110,30'
              BranchSideFuncs: []
            - BranchSide:      'kexgexs.c:113,3'
              BranchSideFuncs: []
        - Branch String:   'kexgexs.c:110,47'
          Branch Sides:
            - BranchSide:      'kexgexs.c:111,30'
              BranchSideFuncs: []
            - BranchSide:      'kexgexs.c:113,3'
              BranchSideFuncs: []
        - Branch String:   'kexgexs.c:111,47'
          Branch Sides:
            - BranchSide:      'kexgexs.c:112,23'
              BranchSideFuncs: []
            - BranchSide:      'kexgexs.c:113,3'
              BranchSideFuncs: []
        - Branch String:   'kexgexs.c:109,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:113,3'
              BranchSideFuncs: []
            - BranchSide:      'kexgexs.c:116,22'
              BranchSideFuncs:
                - dh_gen_key
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
        - Branch String:   'kexgexs.c:116,6'
          Branch Sides:
            - BranchSide:      'kexgexs.c:117,3'
              BranchSideFuncs: []
            - BranchSide:      'kexgexs.c:119,2'
              BranchSideFuncs:
                - sshlog
                - ssh_dispatch_set
      Callsites:
        - Src:             'kexgexs.c:78,2'
          Dst:             sshlog
        - Src:             'kexgexs.c:79,2'
          Dst:             ssh_dispatch_set
        - Src:             'kexgexs.c:79,2'
          Dst:             kex_protocol_error
        - Src:             'kexgexs.c:81,11'
          Dst:             sshpkt_get_u32
        - Src:             'kexgexs.c:82,11'
          Dst:             sshpkt_get_u32
        - Src:             'kexgexs.c:83,11'
          Dst:             sshpkt_get_u32
        - Src:             'kexgexs.c:84,11'
          Dst:             sshpkt_get_end
        - Src:             'kexgexs.c:101,12'
          Dst:             mm_choose_dh
        - Src:             'kexgexs.c:101,12'
          Dst:             choose_dh
        - Src:             'kexgexs.c:103,9'
          Dst:             sshpkt_disconnect
        - Src:             'kexgexs.c:107,2'
          Dst:             sshlog
        - Src:             'kexgexs.c:108,2'
          Dst:             DH_get0_pqg
        - Src:             'kexgexs.c:109,11'
          Dst:             sshpkt_start
        - Src:             'kexgexs.c:110,11'
          Dst:             sshpkt_put_bignum2
        - Src:             'kexgexs.c:111,11'
          Dst:             sshpkt_put_bignum2
        - Src:             'kexgexs.c:112,11'
          Dst:             sshpkt_send
        - Src:             'kexgexs.c:116,11'
          Dst:             dh_gen_key
        - Src:             'kexgexs.c:119,2'
          Dst:             sshlog
        - Src:             'kexgexs.c:120,2'
          Dst:             ssh_dispatch_set
        - Src:             'kexgexs.c:120,2'
          Dst:             input_kex_dh_gex_init
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kexgex_server
      functionSourceFile: '/src/openssh/kexgexs.c'
      linkageType:     InternalLinkage
      functionLinenumber: 63
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh.268 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          17
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - input_kex_dh_gex_request
        - ssh_dispatch_set
        - sshlog
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'kexgexs.c:64,2'
          Dst:             ssh_dispatch_set
        - Src:             'kexgexs.c:64,2'
          Dst:             input_kex_dh_gex_request
        - Src:             'kexgexs.c:66,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_gen_hash
      functionSourceFile: '/src/openssh/kexgen.c'
      linkageType:     InternalLinkage
      functionLinenumber: 59
      functionDepth:   0
      returnType:      'int '
      argCount:        11
      argTypes:
        - 'int '
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
        - 'char *'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         35
      ICount:          239
      EdgeCount:       50
      CyclomaticComplexity: 17
      functionsReached:
        - ssh_digest_buffer
        - ssh_digest_bytes
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_put_stringb
        - sshbuf_put_u32
        - sshbuf_put_u8
        - sshbuf_putb
      functionUses:    2
      BranchProfiles:
        - Branch String:   'kexgen.c:63,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:64,3'
              BranchSideFuncs: []
            - BranchSide:      'kexgen.c:65,11'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - ssh_digest_bytes
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:65,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:66,3'
              BranchSideFuncs: []
            - BranchSide:      'kexgen.c:67,30'
              BranchSideFuncs:
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - ssh_digest_bytes
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:67,55'
          Branch Sides:
            - BranchSide:      'kexgen.c:68,30'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgen.c:80,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgen.c:68,55'
          Branch Sides:
            - BranchSide:      'kexgen.c:70,26'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgen.c:80,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgen.c:70,67'
          Branch Sides:
            - BranchSide:      'kexgen.c:71,25'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgen.c:80,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgen.c:71,52'
          Branch Sides:
            - BranchSide:      'kexgen.c:72,23'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgen.c:80,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgen.c:72,48'
          Branch Sides:
            - BranchSide:      'kexgen.c:73,26'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgen.c:80,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgen.c:73,67'
          Branch Sides:
            - BranchSide:      'kexgen.c:74,25'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgen.c:80,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgen.c:74,52'
          Branch Sides:
            - BranchSide:      'kexgen.c:75,23'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgen.c:80,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgen.c:75,48'
          Branch Sides:
            - BranchSide:      'kexgen.c:76,30'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgen.c:80,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgen.c:76,61'
          Branch Sides:
            - BranchSide:      'kexgen.c:77,30'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgen.c:80,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgen.c:77,51'
          Branch Sides:
            - BranchSide:      'kexgen.c:78,30'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgen.c:80,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgen.c:78,51'
          Branch Sides:
            - BranchSide:      'kexgen.c:79,23'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgen.c:80,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgen.c:67,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:80,15'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgen.c:86,24'
              BranchSideFuncs:
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - ssh_digest_bytes
                - sshbuf_free
        - Branch String:   'kexgen.c:86,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgen.c:90,14'
              BranchSideFuncs:
                - sshbuf_free
                - ssh_digest_bytes
      Callsites:
        - Src:             'kexgen.c:63,17'
          Dst:             ssh_digest_bytes
        - Src:             'kexgen.c:65,11'
          Dst:             sshbuf_new
        - Src:             'kexgen.c:67,11'
          Dst:             sshbuf_put_stringb
        - Src:             'kexgen.c:68,11'
          Dst:             sshbuf_put_stringb
        - Src:             'kexgen.c:70,29'
          Dst:             sshbuf_len
        - Src:             'kexgen.c:70,11'
          Dst:             sshbuf_put_u32
        - Src:             'kexgen.c:71,11'
          Dst:             sshbuf_put_u8
        - Src:             'kexgen.c:72,11'
          Dst:             sshbuf_putb
        - Src:             'kexgen.c:73,29'
          Dst:             sshbuf_len
        - Src:             'kexgen.c:73,11'
          Dst:             sshbuf_put_u32
        - Src:             'kexgen.c:74,11'
          Dst:             sshbuf_put_u8
        - Src:             'kexgen.c:75,11'
          Dst:             sshbuf_putb
        - Src:             'kexgen.c:76,11'
          Dst:             sshbuf_put_stringb
        - Src:             'kexgen.c:77,11'
          Dst:             sshbuf_put_stringb
        - Src:             'kexgen.c:78,11'
          Dst:             sshbuf_put_stringb
        - Src:             'kexgen.c:79,11'
          Dst:             sshbuf_putb
        - Src:             'kexgen.c:80,3'
          Dst:             sshbuf_free
        - Src:             'kexgen.c:86,6'
          Dst:             ssh_digest_buffer
        - Src:             'kexgen.c:87,3'
          Dst:             sshbuf_free
        - Src:             'kexgen.c:90,2'
          Dst:             sshbuf_free
        - Src:             'kexgen.c:91,13'
          Dst:             ssh_digest_bytes
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    input_kex_gen_init
      functionSourceFile: '/src/openssh/kexgen.c'
      linkageType:     InternalLinkage
      functionLinenumber: 267
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh.317 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         53
      ICount:          347
      EdgeCount:       69
      CyclomaticComplexity: 18
      functionsReached:
        - explicit_bzero
        - kex_c25519_enc
        - kex_derive_keys
        - kex_dh_enc
        - kex_ecdh_enc
        - kex_gen_hash
        - kex_kem_sntrup761x25519_enc
        - kex_load_hostkey
        - kex_protocol_error
        - kex_send_newkeys
        - ssh_dispatch_set
        - sshbuf_free
        - sshbuf_new
        - sshkey_from_private
        - sshkey_putb
        - sshlog
        - sshpkt_get_end
        - sshpkt_getb_froms
        - sshpkt_put_string
        - sshpkt_put_stringb
        - sshpkt_send
        - sshpkt_start
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kexgen.c:281,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:283,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:285,29'
              BranchSideFuncs:
                - sshpkt_getb_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - kex_kem_sntrup761x25519_enc
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - kex_c25519_enc
                - kex_ecdh_enc
                - kex_dh_enc
        - Branch String:   'kexgen.c:285,56'
          Branch Sides:
            - BranchSide:      'kexgen.c:286,26'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:287,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:285,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:287,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:290,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - kex_kem_sntrup761x25519_enc
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - kex_c25519_enc
                - kex_ecdh_enc
                - kex_dh_enc
        - Branch String:   'kexgen.c:290,2'
          Branch Sides:
            - BranchSide:      'kexgen.c:297,18'
              BranchSideFuncs:
                - kex_dh_enc
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:297,18'
              BranchSideFuncs:
                - kex_dh_enc
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:297,18'
              BranchSideFuncs:
                - kex_dh_enc
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:297,18'
              BranchSideFuncs:
                - kex_dh_enc
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:297,18'
              BranchSideFuncs:
                - kex_dh_enc
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:301,20'
              BranchSideFuncs:
                - kex_ecdh_enc
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:306,22'
              BranchSideFuncs:
                - kex_c25519_enc
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:310,35'
              BranchSideFuncs:
                - kex_kem_sntrup761x25519_enc
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:314,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgen.c:317,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:318,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:321,30'
              BranchSideFuncs:
                - sshbuf_new
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgen.c:321,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:322,5'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:325,23'
              BranchSideFuncs:
                - sshkey_putb
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgen.c:325,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:326,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:327,10'
              BranchSideFuncs:
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgen.c:328,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:339,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:342,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgen.c:342,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:344,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:347,24'
              BranchSideFuncs:
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgen.c:347,60'
          Branch Sides:
            - BranchSide:      'kexgen.c:348,30'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:352,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:348,63'
          Branch Sides:
            - BranchSide:      'kexgen.c:349,30'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:352,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:349,56'
          Branch Sides:
            - BranchSide:      'kexgen.c:350,29'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:352,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:350,57'
          Branch Sides:
            - BranchSide:      'kexgen.c:351,23'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:352,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:347,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:352,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:354,27'
              BranchSideFuncs:
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgen.c:354,68'
          Branch Sides:
            - BranchSide:      'kexgen.c:355,28'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:356,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:354,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:356,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:358,6'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgen.c:358,35'
          Branch Sides:
            - BranchSide:      'kexgen.c:359,31'
              BranchSideFuncs:
                - sshkey_from_private
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:360,33'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:358,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:360,33'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:361,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
      Callsites:
        - Src:             'kexgen.c:278,2'
          Dst:             sshlog
        - Src:             'kexgen.c:279,2'
          Dst:             ssh_dispatch_set
        - Src:             'kexgen.c:279,2'
          Dst:             kex_protocol_error
        - Src:             'kexgen.c:281,11'
          Dst:             kex_load_hostkey
        - Src:             'kexgen.c:285,11'
          Dst:             sshpkt_getb_froms
        - Src:             'kexgen.c:286,11'
          Dst:             sshpkt_get_end
        - Src:             'kexgen.c:297,7'
          Dst:             kex_dh_enc
        - Src:             'kexgen.c:301,7'
          Dst:             kex_ecdh_enc
        - Src:             'kexgen.c:306,7'
          Dst:             kex_c25519_enc
        - Src:             'kexgen.c:310,7'
          Dst:             kex_kem_sntrup761x25519_enc
        - Src:             'kexgen.c:321,30'
          Dst:             sshbuf_new
        - Src:             'kexgen.c:325,11'
          Dst:             sshkey_putb
        - Src:             'kexgen.c:328,11'
          Dst:             kex_gen_hash
        - Src:             'kexgen.c:347,11'
          Dst:             sshpkt_start
        - Src:             'kexgen.c:348,11'
          Dst:             sshpkt_put_stringb
        - Src:             'kexgen.c:349,11'
          Dst:             sshpkt_put_stringb
        - Src:             'kexgen.c:350,11'
          Dst:             sshpkt_put_string
        - Src:             'kexgen.c:351,11'
          Dst:             sshpkt_send
        - Src:             'kexgen.c:354,11'
          Dst:             kex_derive_keys
        - Src:             'kexgen.c:355,11'
          Dst:             kex_send_newkeys
        - Src:             'kexgen.c:359,11'
          Dst:             sshkey_from_private
        - Src:             'kexgen.c:364,2'
          Dst:             explicit_bzero
        - Src:             'kexgen.c:365,2'
          Dst:             sshbuf_free
        - Src:             'kexgen.c:367,2'
          Dst:             sshbuf_free
        - Src:             'kexgen.c:368,2'
          Dst:             sshbuf_free
        - Src:             'kexgen.c:369,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_gen_server
      functionSourceFile: '/src/openssh/kexgen.c'
      linkageType:     InternalLinkage
      functionLinenumber: 259
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh.317 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          17
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - input_kex_gen_init
        - ssh_dispatch_set
        - sshlog
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'kexgen.c:260,2'
          Dst:             sshlog
        - Src:             'kexgen.c:261,2'
          Dst:             ssh_dispatch_set
        - Src:             'kexgen.c:261,2'
          Dst:             input_kex_gen_init
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    input_kex_gen_reply
      functionSourceFile: '/src/openssh/kexgen.c'
      linkageType:     InternalLinkage
      functionLinenumber: 140
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh.317 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         53
      ICount:          369
      EdgeCount:       69
      CyclomaticComplexity: 18
      functionsReached:
        - explicit_bzero
        - kex_c25519_dec
        - kex_derive_keys
        - kex_dh_dec
        - kex_ecdh_dec
        - kex_gen_hash
        - kex_kem_sntrup761x25519_dec
        - kex_protocol_error
        - kex_send_newkeys
        - kex_verify_host_key
        - ssh_dispatch_set
        - sshbuf_free
        - sshbuf_fromb
        - sshbuf_new
        - sshbuf_put
        - sshkey_free
        - sshkey_fromb
        - sshkey_verify
        - sshlog
        - sshpkt_get_end
        - sshpkt_get_string
        - sshpkt_getb_froms
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kexgen.c:155,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:156,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:158,26'
              BranchSideFuncs:
                - sshbuf_fromb
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - kex_verify_host_key
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_getb_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - kex_kem_sntrup761x25519_dec
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - kex_c25519_dec
                - kex_ecdh_dec
                - kex_dh_dec
        - Branch String:   'kexgen.c:158,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:159,5'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:162,24'
              BranchSideFuncs:
                - sshkey_fromb
                - __sanitizer_cov_trace_const_cmp4
                - kex_verify_host_key
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_getb_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - kex_kem_sntrup761x25519_dec
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - kex_c25519_dec
                - kex_ecdh_dec
                - kex_dh_dec
        - Branch String:   'kexgen.c:162,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:163,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:164,31'
              BranchSideFuncs:
                - kex_verify_host_key
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_getb_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - kex_kem_sntrup761x25519_dec
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - kex_c25519_dec
                - kex_ecdh_dec
                - kex_dh_dec
        - Branch String:   'kexgen.c:164,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:165,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:169,29'
              BranchSideFuncs:
                - sshpkt_getb_froms
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_string
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_get_end
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - kex_kem_sntrup761x25519_dec
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - kex_c25519_dec
                - kex_ecdh_dec
                - kex_dh_dec
        - Branch String:   'kexgen.c:169,54'
          Branch Sides:
            - BranchSide:      'kexgen.c:170,29'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:172,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:170,59'
          Branch Sides:
            - BranchSide:      'kexgen.c:171,26'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:172,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:169,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:172,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:175,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - kex_kem_sntrup761x25519_dec
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - kex_c25519_dec
                - kex_ecdh_dec
                - kex_dh_dec
        - Branch String:   'kexgen.c:175,2'
          Branch Sides:
            - BranchSide:      'kexgen.c:182,18'
              BranchSideFuncs:
                - kex_dh_dec
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:182,18'
              BranchSideFuncs:
                - kex_dh_dec
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:182,18'
              BranchSideFuncs:
                - kex_dh_dec
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:182,18'
              BranchSideFuncs:
                - kex_dh_dec
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:182,18'
              BranchSideFuncs:
                - kex_dh_dec
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:185,20'
              BranchSideFuncs:
                - kex_ecdh_dec
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:189,22'
              BranchSideFuncs:
                - kex_c25519_dec
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:192,35'
              BranchSideFuncs:
                - kex_kem_sntrup761x25519_dec
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgen.c:196,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgen.c:199,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:200,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:203,10'
              BranchSideFuncs:
                - kex_gen_hash
                - __sanitizer_cov_trace_const_cmp4
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgen.c:204,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:215,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:217,25'
              BranchSideFuncs:
                - sshkey_verify
                - __sanitizer_cov_trace_const_cmp4
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgen.c:217,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:219,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:221,27'
              BranchSideFuncs:
                - kex_derive_keys
                - __sanitizer_cov_trace_const_cmp4
                - kex_send_newkeys
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgen.c:221,68'
          Branch Sides:
            - BranchSide:      'kexgen.c:222,28'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:223,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:221,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:223,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:226,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgen.c:226,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:226,36'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:227,7'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:227,36'
          Branch Sides:
            - BranchSide:      'kexgen.c:227,39'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:228,6'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:227,7'
          Branch Sides:
            - BranchSide:      'kexgen.c:228,6'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:231,27'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:231,7'
          Branch Sides:
            - BranchSide:      'kexgen.c:232,6'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:235,23'
              BranchSideFuncs:
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgen.c:235,7'
          Branch Sides:
            - BranchSide:      'kexgen.c:236,4'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgen.c:237,26'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - free
                - sshbuf_free
                - sshkey_free
                - sshbuf_free
                - sshbuf_free
                - sshbuf_free
      Callsites:
        - Src:             'kexgen.c:151,2'
          Dst:             sshlog
        - Src:             'kexgen.c:152,2'
          Dst:             ssh_dispatch_set
        - Src:             'kexgen.c:152,2'
          Dst:             kex_protocol_error
        - Src:             'kexgen.c:155,11'
          Dst:             sshpkt_getb_froms
        - Src:             'kexgen.c:158,13'
          Dst:             sshbuf_fromb
        - Src:             'kexgen.c:162,11'
          Dst:             sshkey_fromb
        - Src:             'kexgen.c:164,11'
          Dst:             kex_verify_host_key
        - Src:             'kexgen.c:169,11'
          Dst:             sshpkt_getb_froms
        - Src:             'kexgen.c:170,11'
          Dst:             sshpkt_get_string
        - Src:             'kexgen.c:171,11'
          Dst:             sshpkt_get_end
        - Src:             'kexgen.c:182,7'
          Dst:             kex_dh_dec
        - Src:             'kexgen.c:185,7'
          Dst:             kex_ecdh_dec
        - Src:             'kexgen.c:189,7'
          Dst:             kex_c25519_dec
        - Src:             'kexgen.c:192,7'
          Dst:             kex_kem_sntrup761x25519_dec
        - Src:             'kexgen.c:204,11'
          Dst:             kex_gen_hash
        - Src:             'kexgen.c:217,11'
          Dst:             sshkey_verify
        - Src:             'kexgen.c:221,11'
          Dst:             kex_derive_keys
        - Src:             'kexgen.c:222,11'
          Dst:             kex_send_newkeys
        - Src:             'kexgen.c:231,27'
          Dst:             sshbuf_new
        - Src:             'kexgen.c:235,12'
          Dst:             sshbuf_put
        - Src:             'kexgen.c:242,2'
          Dst:             explicit_bzero
        - Src:             'kexgen.c:243,2'
          Dst:             explicit_bzero
        - Src:             'kexgen.c:244,2'
          Dst:             explicit_bzero
        - Src:             'kexgen.c:246,2'
          Dst:             sshbuf_free
        - Src:             'kexgen.c:248,2'
          Dst:             sshbuf_free
        - Src:             'kexgen.c:249,2'
          Dst:             sshkey_free
        - Src:             'kexgen.c:250,2'
          Dst:             sshbuf_free
        - Src:             'kexgen.c:251,2'
          Dst:             sshbuf_free
        - Src:             'kexgen.c:252,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_gen_client
      functionSourceFile: '/src/openssh/kexgen.c'
      linkageType:     InternalLinkage
      functionLinenumber: 100
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ssh.317 *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         24
      ICount:          134
      EdgeCount:       27
      CyclomaticComplexity: 5
      functionsReached:
        - input_kex_gen_reply
        - kex_c25519_keypair
        - kex_dh_keypair
        - kex_ecdh_keypair
        - kex_kem_sntrup761x25519_keypair
        - ssh_dispatch_set
        - sshlog
        - sshpkt_put_stringb
        - sshpkt_send
        - sshpkt_start
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kexgen.c:104,2'
          Branch Sides:
            - BranchSide:      'kexgen.c:111,22'
              BranchSideFuncs:
                - kex_dh_keypair
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
            - BranchSide:      'kexgen.c:111,22'
              BranchSideFuncs:
                - kex_dh_keypair
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
            - BranchSide:      'kexgen.c:111,22'
              BranchSideFuncs:
                - kex_dh_keypair
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
            - BranchSide:      'kexgen.c:111,22'
              BranchSideFuncs:
                - kex_dh_keypair
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
            - BranchSide:      'kexgen.c:111,22'
              BranchSideFuncs:
                - kex_dh_keypair
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
            - BranchSide:      'kexgen.c:114,24'
              BranchSideFuncs:
                - kex_ecdh_keypair
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
            - BranchSide:      'kexgen.c:118,26'
              BranchSideFuncs:
                - kex_c25519_keypair
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
            - BranchSide:      'kexgen.c:121,39'
              BranchSideFuncs:
                - kex_kem_sntrup761x25519_keypair
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
            - BranchSide:      'kexgen.c:124,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
        - Branch String:   'kexgen.c:127,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:128,10'
              BranchSideFuncs: []
            - BranchSide:      'kexgen.c:129,24'
              BranchSideFuncs:
                - sshpkt_start
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_send
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_dispatch_set
        - Branch String:   'kexgen.c:129,59'
          Branch Sides:
            - BranchSide:      'kexgen.c:130,30'
              BranchSideFuncs: []
            - BranchSide:      'kexgen.c:132,10'
              BranchSideFuncs: []
        - Branch String:   'kexgen.c:130,58'
          Branch Sides:
            - BranchSide:      'kexgen.c:131,23'
              BranchSideFuncs: []
            - BranchSide:      'kexgen.c:132,10'
              BranchSideFuncs: []
        - Branch String:   'kexgen.c:129,6'
          Branch Sides:
            - BranchSide:      'kexgen.c:132,10'
              BranchSideFuncs: []
            - BranchSide:      'kexgen.c:133,2'
              BranchSideFuncs:
                - sshlog
                - ssh_dispatch_set
      Callsites:
        - Src:             'kexgen.c:111,7'
          Dst:             kex_dh_keypair
        - Src:             'kexgen.c:114,7'
          Dst:             kex_ecdh_keypair
        - Src:             'kexgen.c:118,7'
          Dst:             kex_c25519_keypair
        - Src:             'kexgen.c:121,7'
          Dst:             kex_kem_sntrup761x25519_keypair
        - Src:             'kexgen.c:129,11'
          Dst:             sshpkt_start
        - Src:             'kexgen.c:130,11'
          Dst:             sshpkt_put_stringb
        - Src:             'kexgen.c:131,11'
          Dst:             sshpkt_send
        - Src:             'kexgen.c:133,2'
          Dst:             sshlog
        - Src:             'kexgen.c:134,2'
          Dst:             ssh_dispatch_set
        - Src:             'kexgen.c:134,2'
          Dst:             input_kex_gen_reply
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    platform_sys_dir_uid
      functionSourceFile: '/src/openssh/platform-misc.c'
      linkageType:     InternalLinkage
      functionLinenumber: 27
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         4
      ICount:          23
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'platform-misc.c:28,6'
          Branch Sides:
            - BranchSide:      'platform-misc.c:29,3'
              BranchSideFuncs: []
            - BranchSide:      'platform-misc.c:34,2'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_put_eckey
      functionSourceFile: '/src/openssh/sshbuf-getput-crypto.c'
      linkageType:     InternalLinkage
      functionLinenumber: 175
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.ec_key_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          23
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - EC_KEY_get0_group
        - EC_KEY_get0_public_key
        - sshbuf_put_ec
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'sshbuf-getput-crypto.c:176,28'
          Dst:             EC_KEY_get0_public_key
        - Src:             'sshbuf-getput-crypto.c:177,6'
          Dst:             EC_KEY_get0_group
        - Src:             'sshbuf-getput-crypto.c:176,9'
          Dst:             sshbuf_put_ec
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_put_ec
      functionSourceFile: '/src/openssh/sshbuf-getput-crypto.c'
      linkageType:     InternalLinkage
      functionLinenumber: 155
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.ec_point_st *'
        - 'struct.ec_group_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          68
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - EC_POINT_point2oct
        - explicit_bzero
        - sshbuf_put_string
      functionUses:    4
      BranchProfiles:
        - Branch String:   'sshbuf-getput-crypto.c:160,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:162,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:164,25'
              BranchSideFuncs:
                - EC_POINT_point2oct
                - __sanitizer_cov_trace_cmp8
                - sshbuf_put_string
                - explicit_bzero
        - Branch String:   'sshbuf-getput-crypto.c:164,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:166,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:168,26'
              BranchSideFuncs:
                - sshbuf_put_string
                - explicit_bzero
      Callsites:
        - Src:             'sshbuf-getput-crypto.c:160,13'
          Dst:             EC_POINT_point2oct
        - Src:             'sshbuf-getput-crypto.c:164,6'
          Dst:             EC_POINT_point2oct
        - Src:             'sshbuf-getput-crypto.c:168,8'
          Dst:             sshbuf_put_string
        - Src:             'sshbuf-getput-crypto.c:169,2'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_POINT_point2oct
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        6
      argTypes:
        - 'struct.ec_group_st *'
        - 'struct.ec_point_st *'
        - 'int '
        - 'char *'
        - 'size_t '
        - 'struct.bignum_ctx *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_put_bignum2
      functionSourceFile: '/src/openssh/sshbuf-getput-crypto.c'
      linkageType:     InternalLinkage
      functionLinenumber: 132
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         18
      ICount:          121
      EdgeCount:       24
      CyclomaticComplexity: 8
      functionsReached:
        - BN_bn2bin
        - BN_num_bits
        - explicit_bzero
        - sshbuf_put_string
      functionUses:    25
      BranchProfiles:
        - Branch String:   'sshbuf-getput-crypto.c:136,14'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:136,17'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:137,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-crypto.c:136,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:137,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:138,2'
              BranchSideFuncs:
                - BN_bn2bin
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-crypto.c:139,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:140,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:142,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-crypto.c:142,14'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:142,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      'sshbuf-getput-crypto.c:144,29'
              BranchSideFuncs:
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
        - Branch String:   'sshbuf-getput-crypto.c:142,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:143,11'
              BranchSideFuncs:
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      'sshbuf-getput-crypto.c:144,29'
              BranchSideFuncs:
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
        - Branch String:   'sshbuf-getput-crypto.c:144,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:145,18'
              BranchSideFuncs:
                - explicit_bzero
            - BranchSide:      'sshbuf-getput-crypto.c:148,17'
              BranchSideFuncs:
                - explicit_bzero
      Callsites:
        - Src:             'sshbuf-getput-crypto.c:134,12'
          Dst:             BN_num_bits
        - Src:             'sshbuf-getput-crypto.c:139,6'
          Dst:             BN_bn2bin
        - Src:             'sshbuf-getput-crypto.c:144,11'
          Dst:             sshbuf_put_string
        - Src:             'sshbuf-getput-crypto.c:145,3'
          Dst:             explicit_bzero
        - Src:             'sshbuf-getput-crypto.c:148,2'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_get_eckey
      functionSourceFile: '/src/openssh/sshbuf-getput-crypto.c'
      linkageType:     InternalLinkage
      functionLinenumber: 96
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.ec_key_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         14
      ICount:          101
      EdgeCount:       19
      CyclomaticComplexity: 7
      functionsReached:
        - EC_KEY_get0_group
        - EC_KEY_set_public_key
        - EC_POINT_free
        - get_ec
        - sshbuf_get_string_direct
        - sshbuf_peek_string_direct
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sshbuf-getput-crypto.c:102,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:104,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:106,37'
              BranchSideFuncs:
                - sshbuf_peek_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_get0_group
                - get_ec
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_set_public_key
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_free
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_free
                - EC_POINT_free
                - EC_POINT_free
        - Branch String:   'sshbuf-getput-crypto.c:106,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:107,17'
              BranchSideFuncs:
                - EC_POINT_free
            - BranchSide:      'sshbuf-getput-crypto.c:110,18'
              BranchSideFuncs:
                - EC_KEY_get0_group
                - get_ec
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_set_public_key
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_free
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_free
                - EC_POINT_free
        - Branch String:   'sshbuf-getput-crypto.c:110,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:111,17'
              BranchSideFuncs:
                - EC_POINT_free
            - BranchSide:      'sshbuf-getput-crypto.c:114,28'
              BranchSideFuncs:
                - EC_KEY_set_public_key
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_free
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_free
        - Branch String:   'sshbuf-getput-crypto.c:114,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:115,17'
              BranchSideFuncs:
                - EC_POINT_free
            - BranchSide:      'sshbuf-getput-crypto.c:118,16'
              BranchSideFuncs:
                - EC_POINT_free
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-crypto.c:120,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:124,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:126,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-crypto.c:97,30'
          Dst:             EC_KEY_get0_group
        - Src:             'sshbuf-getput-crypto.c:97,17'
          Dst:             EC_POINT_new
        - Src:             'sshbuf-getput-crypto.c:106,11'
          Dst:             sshbuf_peek_string_direct
        - Src:             'sshbuf-getput-crypto.c:107,3'
          Dst:             EC_POINT_free
        - Src:             'sshbuf-getput-crypto.c:110,30'
          Dst:             EC_KEY_get0_group
        - Src:             'sshbuf-getput-crypto.c:110,11'
          Dst:             get_ec
        - Src:             'sshbuf-getput-crypto.c:111,3'
          Dst:             EC_POINT_free
        - Src:             'sshbuf-getput-crypto.c:114,6'
          Dst:             EC_KEY_set_public_key
        - Src:             'sshbuf-getput-crypto.c:115,3'
          Dst:             EC_POINT_free
        - Src:             'sshbuf-getput-crypto.c:118,2'
          Dst:             EC_POINT_free
        - Src:             'sshbuf-getput-crypto.c:120,6'
          Dst:             sshbuf_get_string_direct
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_ec
      functionSourceFile: '/src/openssh/sshbuf-getput-crypto.c'
      linkageType:     InternalLinkage
      functionLinenumber: 61
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'size_t '
        - 'struct.ec_point_st *'
        - 'struct.ec_group_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         16
      ICount:          80
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - EC_POINT_oct2point
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshbuf-getput-crypto.c:63,15'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:63,18'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:64,3'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-crypto.c:63,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:64,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:66,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_oct2point
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-crypto.c:66,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:67,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:68,6'
              BranchSideFuncs:
                - EC_POINT_oct2point
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-crypto.c:68,16'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:68,38'
              BranchSideFuncs:
                - EC_POINT_oct2point
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sshbuf-getput-crypto.c:70,2'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-crypto.c:68,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:69,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:70,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-crypto.c:68,19'
          Dst:             EC_POINT_oct2point
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_POINT_oct2point
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.ec_group_st *'
        - 'struct.ec_point_st *'
        - 'char *'
        - 'size_t '
        - 'struct.bignum_ctx *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_get_ec
      functionSourceFile: '/src/openssh/sshbuf-getput-crypto.c'
      linkageType:     InternalLinkage
      functionLinenumber: 75
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.ec_point_st *'
        - 'struct.ec_group_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         10
      ICount:          70
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - get_ec
        - sshbuf_get_string_direct
        - sshbuf_peek_string_direct
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sshbuf-getput-crypto.c:80,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:81,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:82,18'
              BranchSideFuncs:
                - get_ec
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-crypto.c:82,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:83,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:85,31'
              BranchSideFuncs:
                - sshbuf_get_string_direct
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sshbuf-getput-crypto.c:85,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:89,3'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:91,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-crypto.c:80,11'
          Dst:             sshbuf_peek_string_direct
        - Src:             'sshbuf-getput-crypto.c:82,11'
          Dst:             get_ec
        - Src:             'sshbuf-getput-crypto.c:85,6'
          Dst:             sshbuf_get_string_direct
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sshbuf_get_bignum2
      functionSourceFile: '/src/openssh/sshbuf-getput-crypto.c'
      linkageType:     InternalLinkage
      functionLinenumber: 37
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.sshbuf *'
        - 'struct.bignum_st **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         17
      ICount:          91
      EdgeCount:       22
      CyclomaticComplexity: 7
      functionsReached:
        - BN_bin2bn
        - BN_clear_free
        - BN_new
        - sshbuf_get_bignum2_bytes_direct
      functionUses:    20
      BranchProfiles:
        - Branch String:   'sshbuf-getput-crypto.c:43,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:44,4'
              BranchSideFuncs:
                - sshbuf_get_bignum2_bytes_direct
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_bin2bn
                - BN_clear_free
            - BranchSide:      'sshbuf-getput-crypto.c:45,43'
              BranchSideFuncs:
                - sshbuf_get_bignum2_bytes_direct
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_bin2bn
                - BN_clear_free
        - Branch String:   'sshbuf-getput-crypto.c:45,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:46,10'
              BranchSideFuncs: []
            - BranchSide:      'sshbuf-getput-crypto.c:47,6'
              BranchSideFuncs:
                - BN_new
                - BN_bin2bn
                - BN_clear_free
        - Branch String:   'sshbuf-getput-crypto.c:47,6'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:48,12'
              BranchSideFuncs:
                - BN_new
                - BN_bin2bn
                - BN_clear_free
            - BranchSide:      'sshbuf-getput-crypto.c:55,2'
              BranchSideFuncs: []
        - Branch String:   'sshbuf-getput-crypto.c:48,30'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:49,17'
              BranchSideFuncs:
                - BN_clear_free
            - BranchSide:      'sshbuf-getput-crypto.c:50,18'
              BranchSideFuncs:
                - BN_clear_free
        - Branch String:   'sshbuf-getput-crypto.c:48,7'
          Branch Sides:
            - BranchSide:      'sshbuf-getput-crypto.c:50,18'
              BranchSideFuncs:
                - BN_clear_free
            - BranchSide:      'sshbuf-getput-crypto.c:53,11'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sshbuf-getput-crypto.c:45,11'
          Dst:             sshbuf_get_bignum2_bytes_direct
        - Src:             'sshbuf-getput-crypto.c:48,12'
          Dst:             BN_new
        - Src:             'sshbuf-getput-crypto.c:49,7'
          Dst:             BN_bin2bn
        - Src:             'sshbuf-getput-crypto.c:50,4'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    to_byte
      functionSourceFile: '/src/openssh/xmss_commons.c'
      linkageType:     InternalLinkage
      functionLinenumber: 20
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'size_t '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         5
      ICount:          45
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    11
      BranchProfiles:
        - Branch String:   'xmss_commons.c:22,3'
          Branch Sides:
            - BranchSide:      'xmss_commons.c:23,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'xmss_commons.c:26,1'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_local_port
      functionSourceFile: '/src/openssh/canohost.c'
      linkageType:     InternalLinkage
      functionLinenumber: 207
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          16
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - get_sock_port
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'canohost.c:208,9'
          Dst:             get_sock_port
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_sock_port
      functionSourceFile: '/src/openssh/canohost.c'
      linkageType:     InternalLinkage
      functionLinenumber: 160
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         23
      ICount:          153
      EdgeCount:       30
      CyclomaticComplexity: 9
      functionsReached:
        - __errno_location
        - atoi
        - getnameinfo
        - getpeername
        - getsockname
        - memset
        - ssh_gai_strerror
        - sshfatal
        - sshlog
      functionUses:    2
      BranchProfiles:
        - Branch String:   'canohost.c:166,6'
          Branch Sides:
            - BranchSide:      'canohost.c:167,3'
              BranchSideFuncs: []
            - BranchSide:      'canohost.c:169,10'
              BranchSideFuncs:
                - memset
                - __sanitizer_cov_trace_const_cmp4
                - getpeername
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - atoi
                - ssh_gai_strerror
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
                - getsockname
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'canohost.c:171,6'
          Branch Sides:
            - BranchSide:      'canohost.c:172,19'
              BranchSideFuncs:
                - getsockname
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - atoi
                - ssh_gai_strerror
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'canohost.c:177,19'
              BranchSideFuncs:
                - getpeername
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - atoi
                - ssh_gai_strerror
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'canohost.c:172,7'
          Branch Sides:
            - BranchSide:      'canohost.c:173,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'canohost.c:176,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - atoi
                - ssh_gai_strerror
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'canohost.c:177,7'
          Branch Sides:
            - BranchSide:      'canohost.c:0,0'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'canohost.c:178,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'canohost.c:184,6'
          Branch Sides:
            - BranchSide:      'canohost.c:185,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - atoi
                - ssh_gai_strerror
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'canohost.c:188,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - atoi
                - ssh_gai_strerror
                - sshfatal
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'canohost.c:188,32'
          Branch Sides:
            - BranchSide:      'canohost.c:188,40'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - atoi
                - ssh_gai_strerror
                - sshfatal
            - BranchSide:      'canohost.c:192,23'
              BranchSideFuncs:
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - atoi
                - ssh_gai_strerror
                - sshfatal
        - Branch String:   'canohost.c:188,6'
          Branch Sides:
            - BranchSide:      'canohost.c:189,3'
              BranchSideFuncs: []
            - BranchSide:      'canohost.c:192,23'
              BranchSideFuncs:
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - atoi
                - ssh_gai_strerror
                - sshfatal
        - Branch String:   'canohost.c:192,6'
          Branch Sides:
            - BranchSide:      'canohost.c:194,3'
              BranchSideFuncs:
                - ssh_gai_strerror
                - sshfatal
            - BranchSide:      'canohost.c:196,14'
              BranchSideFuncs:
                - atoi
      Callsites:
        - Src:             'canohost.c:170,2'
          Dst:             memset
        - Src:             'canohost.c:172,7'
          Dst:             getsockname
        - Src:             'canohost.c:173,4'
          Dst:             __errno_location
        - Src:             'canohost.c:173,4'
          Dst:             strerror
        - Src:             'canohost.c:173,4'
          Dst:             sshlog
        - Src:             'canohost.c:177,7'
          Dst:             getpeername
        - Src:             'canohost.c:178,4'
          Dst:             __errno_location
        - Src:             'canohost.c:178,4'
          Dst:             strerror
        - Src:             'canohost.c:178,4'
          Dst:             sshlog
        - Src:             'canohost.c:192,11'
          Dst:             getnameinfo
        - Src:             'canohost.c:194,3'
          Dst:             ssh_gai_strerror
        - Src:             'canohost.c:194,3'
          Dst:             sshfatal
        - Src:             'canohost.c:196,9'
          Dst:             atoi
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getnameinfo
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'struct.sockaddr *'
        - 'int '
        - 'char *'
        - 'int '
        - 'char *'
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    atoi
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_peer_port
      functionSourceFile: '/src/openssh/canohost.c'
      linkageType:     InternalLinkage
      functionLinenumber: 201
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          16
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - get_sock_port
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'canohost.c:202,9'
          Dst:             get_sock_port
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_local_name
      functionSourceFile: '/src/openssh/canohost.c'
      linkageType:     InternalLinkage
      functionLinenumber: 138
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          56
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - __errno_location
        - get_socket_address
        - gethostname
        - sshlog
        - xstrdup
      functionUses:    0
      BranchProfiles:
        - Branch String:   'canohost.c:142,6'
          Branch Sides:
            - BranchSide:      'canohost.c:143,10'
              BranchSideFuncs: []
            - BranchSide:      'canohost.c:146,18'
              BranchSideFuncs:
                - gethostname
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - __errno_location
                - strerror
                - sshlog
                - xstrdup
        - Branch String:   'canohost.c:146,6'
          Branch Sides:
            - BranchSide:      'canohost.c:147,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - xstrdup
            - BranchSide:      'canohost.c:150,18'
              BranchSideFuncs:
                - xstrdup
      Callsites:
        - Src:             'canohost.c:142,14'
          Dst:             get_socket_address
        - Src:             'canohost.c:146,6'
          Dst:             gethostname
        - Src:             'canohost.c:147,3'
          Dst:             __errno_location
        - Src:             'canohost.c:147,3'
          Dst:             strerror
        - Src:             'canohost.c:147,3'
          Dst:             sshlog
        - Src:             'canohost.c:148,10'
          Dst:             xstrdup
        - Src:             'canohost.c:150,10'
          Dst:             xstrdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_socket_address
      functionSourceFile: '/src/openssh/canohost.c'
      linkageType:     InternalLinkage
      functionLinenumber: 69
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         23
      ICount:          155
      EdgeCount:       28
      CyclomaticComplexity: 7
      functionsReached:
        - getnameinfo
        - getpeername
        - getsockname
        - ipv64_normalise_mapped
        - memset
        - ssh_gai_strerror
        - sshlog
        - xstrdup
      functionUses:    3
      BranchProfiles:
        - Branch String:   'canohost.c:75,6'
          Branch Sides:
            - BranchSide:      'canohost.c:76,3'
              BranchSideFuncs: []
            - BranchSide:      'canohost.c:79,10'
              BranchSideFuncs:
                - memset
                - __sanitizer_cov_trace_const_cmp4
                - getsockname
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - ssh_gai_strerror
                - sshlog
                - ipv64_normalise_mapped
                - getpeername
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'canohost.c:82,6'
          Branch Sides:
            - BranchSide:      'canohost.c:83,19'
              BranchSideFuncs:
                - getpeername
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - ssh_gai_strerror
                - sshlog
                - ipv64_normalise_mapped
            - BranchSide:      'canohost.c:86,19'
              BranchSideFuncs:
                - getsockname
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - ssh_gai_strerror
                - sshlog
                - ipv64_normalise_mapped
        - Branch String:   'canohost.c:83,7'
          Branch Sides:
            - BranchSide:      'canohost.c:84,4'
              BranchSideFuncs: []
            - BranchSide:      'canohost.c:85,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - xstrdup
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - ssh_gai_strerror
                - sshlog
                - ipv64_normalise_mapped
        - Branch String:   'canohost.c:86,7'
          Branch Sides:
            - BranchSide:      'canohost.c:0,0'
              BranchSideFuncs: []
            - BranchSide:      'canohost.c:87,4'
              BranchSideFuncs: []
        - Branch String:   'canohost.c:91,6'
          Branch Sides:
            - BranchSide:      'canohost.c:92,11'
              BranchSideFuncs:
                - ipv64_normalise_mapped
                - __sanitizer_cov_trace_switch
                - xstrdup
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - ssh_gai_strerror
                - sshlog
            - BranchSide:      'canohost.c:96,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - xstrdup
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - ssh_gai_strerror
                - sshlog
        - Branch String:   'canohost.c:96,2'
          Branch Sides:
            - BranchSide:      'canohost.c:100,24'
              BranchSideFuncs:
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - ssh_gai_strerror
                - sshlog
            - BranchSide:      'canohost.c:100,24'
              BranchSideFuncs:
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
                - xstrdup
                - ssh_gai_strerror
                - sshlog
            - BranchSide:      'canohost.c:109,49'
              BranchSideFuncs:
                - xstrdup
            - BranchSide:      'canohost.c:112,3'
              BranchSideFuncs: []
        - Branch String:   'canohost.c:100,7'
          Branch Sides:
            - BranchSide:      'canohost.c:102,4'
              BranchSideFuncs:
                - ssh_gai_strerror
                - sshlog
            - BranchSide:      'canohost.c:106,18'
              BranchSideFuncs:
                - xstrdup
      Callsites:
        - Src:             'canohost.c:80,2'
          Dst:             memset
        - Src:             'canohost.c:83,7'
          Dst:             getpeername
        - Src:             'canohost.c:86,7'
          Dst:             getsockname
        - Src:             'canohost.c:93,3'
          Dst:             ipv64_normalise_mapped
        - Src:             'canohost.c:100,12'
          Dst:             getnameinfo
        - Src:             'canohost.c:102,4'
          Dst:             ssh_gai_strerror
        - Src:             'canohost.c:102,4'
          Dst:             sshlog
        - Src:             'canohost.c:106,10'
          Dst:             xstrdup
        - Src:             'canohost.c:109,10'
          Dst:             xstrdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    gethostname
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ipv64_normalise_mapped
      functionSourceFile: '/src/openssh/canohost.c'
      linkageType:     InternalLinkage
      functionLinenumber: 40
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.sockaddr_storage *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         14
      ICount:          128
      EdgeCount:       18
      CyclomaticComplexity: 6
      functionsReached:
        - htonl
        - memset
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'canohost.c:46,34'
          Branch Sides:
            - BranchSide:      'canohost.c:47,7'
              BranchSideFuncs: []
            - BranchSide:      'canohost.c:48,3'
              BranchSideFuncs: []
        - Branch String:   'canohost.c:47,7'
          Branch Sides:
            - BranchSide:      'canohost.c:47,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - llvm.memcpy.p0i8.p0i8.i64
                - htonl
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'canohost.c:47,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'canohost.c:47,7'
          Branch Sides:
            - BranchSide:      'canohost.c:47,7'
              BranchSideFuncs:
                - htonl
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'canohost.c:47,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'canohost.c:46,6'
          Branch Sides:
            - BranchSide:      'canohost.c:48,3'
              BranchSideFuncs:
                - sshlog
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'canohost.c:50,2'
              BranchSideFuncs:
                - sshlog
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:
        - Src:             'canohost.c:47,7'
          Dst:             htonl
        - Src:             'canohost.c:50,2'
          Dst:             sshlog
        - Src:             'canohost.c:55,2'
          Dst:             memset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_local_ipaddr
      functionSourceFile: '/src/openssh/canohost.c'
      linkageType:     InternalLinkage
      functionLinenumber: 128
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          35
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - get_socket_address
        - xstrdup
      functionUses:    1
      BranchProfiles:
        - Branch String:   'canohost.c:131,6'
          Branch Sides:
            - BranchSide:      'canohost.c:132,10'
              BranchSideFuncs: []
            - BranchSide:      'canohost.c:133,9'
              BranchSideFuncs:
                - xstrdup
      Callsites:
        - Src:             'canohost.c:131,11'
          Dst:             get_socket_address
        - Src:             'canohost.c:133,9'
          Dst:             xstrdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_peer_ipaddr
      functionSourceFile: '/src/openssh/canohost.c'
      linkageType:     InternalLinkage
      functionLinenumber: 118
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          35
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - get_socket_address
        - xstrdup
      functionUses:    1
      BranchProfiles:
        - Branch String:   'canohost.c:121,6'
          Branch Sides:
            - BranchSide:      'canohost.c:122,10'
              BranchSideFuncs: []
            - BranchSide:      'canohost.c:123,9'
              BranchSideFuncs:
                - xstrdup
      Callsites:
        - Src:             'canohost.c:121,11'
          Dst:             get_socket_address
        - Src:             'canohost.c:123,9'
          Dst:             xstrdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    cleanup_exit
      functionSourceFile: '/src/openssh/cleanup.c'
      linkageType:     InternalLinkage
      functionLinenumber: 29
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          6
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached:
        - _exit
      functionUses:    4
      BranchProfiles:  []
      Callsites:
        - Src:             'cleanup.c:31,2'
          Dst:             _exit
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_netmatch
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 495
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.xaddr *'
        - 'struct.xaddr *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         10
      ICount:          73
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - addr_and
        - addr_cmp
        - addr_netmask
      functionUses:    2
      BranchProfiles:
        - Branch String:   'addr.c:498,6'
          Branch Sides:
            - BranchSide:      'addr.c:499,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:501,19'
              BranchSideFuncs:
                - addr_netmask
                - __sanitizer_cov_trace_const_cmp4
                - addr_and
                - __sanitizer_cov_trace_const_cmp4
                - addr_cmp
        - Branch String:   'addr.c:501,6'
          Branch Sides:
            - BranchSide:      'addr.c:502,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:503,28'
              BranchSideFuncs:
                - addr_and
                - __sanitizer_cov_trace_const_cmp4
                - addr_cmp
        - Branch String:   'addr.c:503,6'
          Branch Sides:
            - BranchSide:      'addr.c:504,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:505,31'
              BranchSideFuncs:
                - addr_cmp
      Callsites:
        - Src:             'addr.c:501,6'
          Dst:             addr_netmask
        - Src:             'addr.c:503,6'
          Dst:             addr_and
        - Src:             'addr.c:505,9'
          Dst:             addr_cmp
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_netmask
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 168
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.xaddr *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         26
      ICount:          156
      EdgeCount:       32
      CyclomaticComplexity: 8
      functionsReached:
        - htonl
        - masklen_valid
        - memset
      functionUses:    2
      BranchProfiles:
        - Branch String:   'addr.c:171,32'
          Branch Sides:
            - BranchSide:      'addr.c:171,35'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:172,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:171,6'
          Branch Sides:
            - BranchSide:      'addr.c:172,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:174,9'
              BranchSideFuncs:
                - memset
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - htonl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - htonl
        - Branch String:   'addr.c:175,2'
          Branch Sides:
            - BranchSide:      'addr.c:177,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - htonl
            - BranchSide:      'addr.c:183,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - htonl
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:191,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:178,7'
          Branch Sides:
            - BranchSide:      'addr.c:179,4'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:180,45'
              BranchSideFuncs:
                - htonl
        - Branch String:   'addr.c:184,21'
          Branch Sides:
            - BranchSide:      'addr.c:184,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - htonl
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:184,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - htonl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'addr.c:184,3'
          Branch Sides:
            - BranchSide:      'addr.c:185,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - htonl
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:186,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - htonl
        - Branch String:   'addr.c:186,13'
          Branch Sides:
            - BranchSide:      'addr.c:186,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - htonl
            - BranchSide:      'addr.c:189,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:186,7'
          Branch Sides:
            - BranchSide:      'addr.c:187,46'
              BranchSideFuncs:
                - htonl
            - BranchSide:      'addr.c:189,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'addr.c:171,6'
          Dst:             masklen_valid
        - Src:             'addr.c:174,2'
          Dst:             memset
        - Src:             'addr.c:180,18'
          Dst:             htonl
        - Src:             'addr.c:187,19'
          Dst:             htonl
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_and
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 209
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.xaddr *'
        - 'struct.xaddr *'
        - 'struct.xaddr *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         18
      ICount:          130
      EdgeCount:       21
      CyclomaticComplexity: 5
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'addr.c:212,18'
          Branch Sides:
            - BranchSide:      'addr.c:212,21'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:213,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:212,31'
          Branch Sides:
            - BranchSide:      'addr.c:212,34'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:213,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:212,44'
          Branch Sides:
            - BranchSide:      'addr.c:212,47'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:213,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:212,6'
          Branch Sides:
            - BranchSide:      'addr.c:213,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:215,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'addr.c:216,2'
          Branch Sides:
            - BranchSide:      'addr.c:218,21'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:221,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:226,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:222,3'
          Branch Sides:
            - BranchSide:      'addr.c:223,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:224,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_cmp
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 254
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.xaddr *'
        - 'struct.xaddr *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         19
      ICount:          181
      EdgeCount:       23
      CyclomaticComplexity: 6
      functionsReached:
        - ntohl
      functionUses:    1
      BranchProfiles:
        - Branch String:   'addr.c:257,6'
          Branch Sides:
            - BranchSide:      'addr.c:258,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:260,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - ntohl
                - ntohl
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'addr.c:260,2'
          Branch Sides:
            - BranchSide:      'addr.c:266,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - ntohl
                - ntohl
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'addr.c:274,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:281,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:266,7'
          Branch Sides:
            - BranchSide:      'addr.c:267,4'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:268,17'
              BranchSideFuncs:
                - ntohl
                - ntohl
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'addr.c:274,3'
          Branch Sides:
            - BranchSide:      'addr.c:275,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'addr.c:277,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'addr.c:275,8'
          Branch Sides:
            - BranchSide:      'addr.c:275,37'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:276,13'
              BranchSideFuncs: []
        - Branch String:   'addr.c:277,7'
          Branch Sides:
            - BranchSide:      'addr.c:278,4'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:279,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
      Callsites:
        - Src:             'addr.c:268,11'
          Dst:             ntohl
        - Src:             'addr.c:268,33'
          Dst:             ntohl
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ntohl
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    masklen_valid
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 50
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         5
      ICount:          41
      EdgeCount:       8
      CyclomaticComplexity: 5
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'addr.c:51,2'
          Branch Sides:
            - BranchSide:      'addr.c:53,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:55,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:57,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_pton_cidr
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 458
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.xaddr *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         36
      ICount:          197
      EdgeCount:       49
      CyclomaticComplexity: 15
      functionsReached:
        - addr_host_is_all0s
        - addr_pton
        - addr_unicast_masklen
        - masklen_valid
        - strchr
        - strlcpy
        - strtoul
      functionUses:    2
      BranchProfiles:
        - Branch String:   'addr.c:464,16'
          Branch Sides:
            - BranchSide:      'addr.c:464,27'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:465,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:464,6'
          Branch Sides:
            - BranchSide:      'addr.c:465,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:467,19'
              BranchSideFuncs:
                - strchr
                - addr_pton
                - __sanitizer_cov_trace_const_cmp4
                - masklen_valid
                - __sanitizer_cov_trace_const_cmp4
                - addr_host_is_all0s
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - addr_unicast_masklen
                - strtoul
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'addr.c:467,6'
          Branch Sides:
            - BranchSide:      'addr.c:468,4'
              BranchSideFuncs:
                - strtoul
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - addr_pton
                - __sanitizer_cov_trace_const_cmp4
                - masklen_valid
                - __sanitizer_cov_trace_const_cmp4
                - addr_host_is_all0s
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - addr_unicast_masklen
            - BranchSide:      'addr.c:475,16'
              BranchSideFuncs:
                - addr_pton
                - __sanitizer_cov_trace_const_cmp4
                - masklen_valid
                - __sanitizer_cov_trace_const_cmp4
                - addr_host_is_all0s
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - addr_unicast_masklen
        - Branch String:   'addr.c:471,17'
          Branch Sides:
            - BranchSide:      'addr.c:471,21'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:472,4'
              BranchSideFuncs: []
        - Branch String:   'addr.c:471,30'
          Branch Sides:
            - BranchSide:      'addr.c:471,34'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:472,4'
              BranchSideFuncs: []
        - Branch String:   'addr.c:471,45'
          Branch Sides:
            - BranchSide:      'addr.c:471,48'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:472,4'
              BranchSideFuncs: []
        - Branch String:   'addr.c:471,7'
          Branch Sides:
            - BranchSide:      'addr.c:472,4'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:473,2'
              BranchSideFuncs:
                - addr_pton
                - __sanitizer_cov_trace_const_cmp4
                - masklen_valid
                - __sanitizer_cov_trace_const_cmp4
                - addr_host_is_all0s
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - addr_unicast_masklen
        - Branch String:   'addr.c:475,6'
          Branch Sides:
            - BranchSide:      'addr.c:476,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:478,6'
              BranchSideFuncs:
                - masklen_valid
                - __sanitizer_cov_trace_const_cmp4
                - addr_host_is_all0s
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - addr_unicast_masklen
        - Branch String:   'addr.c:478,6'
          Branch Sides:
            - BranchSide:      'addr.c:479,38'
              BranchSideFuncs:
                - addr_unicast_masklen
                - masklen_valid
                - __sanitizer_cov_trace_const_cmp4
                - addr_host_is_all0s
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'addr.c:480,24'
              BranchSideFuncs:
                - masklen_valid
                - __sanitizer_cov_trace_const_cmp4
                - addr_host_is_all0s
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'addr.c:480,6'
          Branch Sides:
            - BranchSide:      'addr.c:481,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:482,31'
              BranchSideFuncs:
                - addr_host_is_all0s
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'addr.c:482,6'
          Branch Sides:
            - BranchSide:      'addr.c:483,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:485,6'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'addr.c:485,6'
          Branch Sides:
            - BranchSide:      'addr.c:486,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'addr.c:487,6'
              BranchSideFuncs: []
        - Branch String:   'addr.c:487,6'
          Branch Sides:
            - BranchSide:      'addr.c:488,8'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:490,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'addr.c:464,19'
          Dst:             strlcpy
        - Src:             'addr.c:467,12'
          Dst:             strchr
        - Src:             'addr.c:470,13'
          Dst:             strtoul
        - Src:             'addr.c:475,6'
          Dst:             addr_pton
        - Src:             'addr.c:479,13'
          Dst:             addr_unicast_masklen
        - Src:             'addr.c:480,6'
          Dst:             masklen_valid
        - Src:             'addr.c:482,6'
          Dst:             addr_host_is_all0s
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strtoul
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char **'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_pton
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 377
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'struct.xaddr *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         18
      ICount:          98
      EdgeCount:       24
      CyclomaticComplexity: 8
      functionsReached:
        - addr_sa_to_xaddr
        - freeaddrinfo
        - getaddrinfo
        - memset
      functionUses:    3
      BranchProfiles:
        - Branch String:   'addr.c:383,16'
          Branch Sides:
            - BranchSide:      'addr.c:383,31'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:384,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:383,6'
          Branch Sides:
            - BranchSide:      'addr.c:384,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:386,6'
              BranchSideFuncs:
                - freeaddrinfo
                - addr_sa_to_xaddr
                - __sanitizer_cov_trace_const_cmp4
                - freeaddrinfo
                - freeaddrinfo
        - Branch String:   'addr.c:386,6'
          Branch Sides:
            - BranchSide:      'addr.c:387,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:389,6'
              BranchSideFuncs:
                - freeaddrinfo
                - addr_sa_to_xaddr
                - __sanitizer_cov_trace_const_cmp4
                - freeaddrinfo
                - freeaddrinfo
        - Branch String:   'addr.c:389,6'
          Branch Sides:
            - BranchSide:      'addr.c:390,16'
              BranchSideFuncs:
                - freeaddrinfo
            - BranchSide:      'addr.c:394,6'
              BranchSideFuncs:
                - freeaddrinfo
                - addr_sa_to_xaddr
                - __sanitizer_cov_trace_const_cmp4
                - freeaddrinfo
        - Branch String:   'addr.c:394,16'
          Branch Sides:
            - BranchSide:      'addr.c:394,36'
              BranchSideFuncs:
                - addr_sa_to_xaddr
                - __sanitizer_cov_trace_const_cmp4
                - freeaddrinfo
                - freeaddrinfo
            - BranchSide:      'addr.c:400,15'
              BranchSideFuncs:
                - freeaddrinfo
        - Branch String:   'addr.c:394,6'
          Branch Sides:
            - BranchSide:      'addr.c:396,16'
              BranchSideFuncs:
                - freeaddrinfo
            - BranchSide:      'addr.c:400,15'
              BranchSideFuncs:
                - freeaddrinfo
      Callsites:
        - Src:             'addr.c:380,2'
          Dst:             memset
        - Src:             'addr.c:383,19'
          Dst:             getaddrinfo
        - Src:             'addr.c:390,3'
          Dst:             freeaddrinfo
        - Src:             'addr.c:394,19'
          Dst:             addr_sa_to_xaddr
        - Src:             'addr.c:396,3'
          Dst:             freeaddrinfo
        - Src:             'addr.c:400,2'
          Dst:             freeaddrinfo
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_unicast_masklen
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 37
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         5
      ICount:          28
      EdgeCount:       8
      CyclomaticComplexity: 5
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'addr.c:38,2'
          Branch Sides:
            - BranchSide:      'addr.c:40,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:42,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:44,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_host_is_all0s
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 334
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.xaddr *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          58
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - addr_and
        - addr_hostmask
        - addr_is_all0s
      functionUses:    1
      BranchProfiles:
        - Branch String:   'addr.c:338,6'
          Branch Sides:
            - BranchSide:      'addr.c:339,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:340,6'
              BranchSideFuncs:
                - addr_and
                - __sanitizer_cov_trace_const_cmp4
                - addr_is_all0s
        - Branch String:   'addr.c:340,6'
          Branch Sides:
            - BranchSide:      'addr.c:341,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:342,9'
              BranchSideFuncs:
                - addr_is_all0s
      Callsites:
        - Src:             'addr.c:338,6'
          Dst:             addr_hostmask
        - Src:             'addr.c:340,6'
          Dst:             addr_and
        - Src:             'addr.c:342,9'
          Dst:             addr_is_all0s
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_hostmask
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 197
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.xaddr *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         9
      ICount:          49
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - addr_netmask
      functionUses:    2
      BranchProfiles:
        - Branch String:   'addr.c:198,35'
          Branch Sides:
            - BranchSide:      'addr.c:198,50'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:199,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:198,6'
          Branch Sides:
            - BranchSide:      'addr.c:199,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:200,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'addr.c:198,6'
          Dst:             addr_netmask
        - Src:             'addr.c:198,38'
          Dst:             addr_invert
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_is_all0s
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 287
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.xaddr *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         11
      ICount:          71
      EdgeCount:       11
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'addr.c:290,2'
          Branch Sides:
            - BranchSide:      'addr.c:292,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:294,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:299,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:294,3'
          Branch Sides:
            - BranchSide:      'addr.c:295,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:297,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:295,8'
          Branch Sides:
            - BranchSide:      'addr.c:295,24'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:296,5'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_invert
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 142
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.xaddr *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         11
      ICount:          81
      EdgeCount:       11
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'addr.c:145,6'
          Branch Sides:
            - BranchSide:      'addr.c:146,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:148,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'addr.c:148,2'
          Branch Sides:
            - BranchSide:      'addr.c:150,19'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:153,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:157,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:153,3'
          Branch Sides:
            - BranchSide:      'addr.c:154,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:155,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getaddrinfo
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'struct.addrinfo *'
        - 'struct.addrinfo **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    freeaddrinfo
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.addrinfo *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    6
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_sa_to_xaddr
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 111
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.sockaddr *'
        - 'int '
        - 'struct.xaddr *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          103
      EdgeCount:       13
      CyclomaticComplexity: 3
      functionsReached:
        - memset
      functionUses:    1
      BranchProfiles:
        - Branch String:   'addr.c:117,2'
          Branch Sides:
            - BranchSide:      'addr.c:119,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'addr.c:125,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'addr.c:134,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:119,7'
          Branch Sides:
            - BranchSide:      'addr.c:120,4'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:121,3'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'addr.c:125,7'
          Branch Sides:
            - BranchSide:      'addr.c:126,4'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:127,3'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:
        - Src:             'addr.c:115,2'
          Dst:             memset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_ntop
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 437
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.xaddr *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         13
      ICount:          74
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - addr_xaddr_to_sa
        - getnameinfo
      functionUses:    0
      BranchProfiles:
        - Branch String:   'addr.c:441,6'
          Branch Sides:
            - BranchSide:      'addr.c:442,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:443,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'addr.c:443,16'
          Branch Sides:
            - BranchSide:      'addr.c:443,19'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:444,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:443,6'
          Branch Sides:
            - BranchSide:      'addr.c:444,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:445,18'
              BranchSideFuncs:
                - getnameinfo
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'addr.c:445,6'
          Branch Sides:
            - BranchSide:      'addr.c:447,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:449,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'addr.c:441,6'
          Dst:             addr_xaddr_to_sa
        - Src:             'addr.c:445,6'
          Dst:             getnameinfo
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_xaddr_to_sa
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 64
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.xaddr *'
        - 'struct.sockaddr *'
        - 'int *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         19
      ICount:          150
      EdgeCount:       23
      CyclomaticComplexity: 6
      functionsReached:
        - htons
        - memset
      functionUses:    1
      BranchProfiles:
        - Branch String:   'addr.c:68,17'
          Branch Sides:
            - BranchSide:      'addr.c:68,20'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:69,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:68,31'
          Branch Sides:
            - BranchSide:      'addr.c:68,34'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:69,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:68,6'
          Branch Sides:
            - BranchSide:      'addr.c:69,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:71,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - memset
                - htons
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp8
                - memset
                - htons
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'addr.c:71,2'
          Branch Sides:
            - BranchSide:      'addr.c:73,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - memset
                - htons
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'addr.c:85,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - memset
                - htons
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'addr.c:100,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:73,7'
          Branch Sides:
            - BranchSide:      'addr.c:74,4'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:75,10'
              BranchSideFuncs:
                - memset
                - htons
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'addr.c:85,7'
          Branch Sides:
            - BranchSide:      'addr.c:86,4'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:87,10'
              BranchSideFuncs:
                - memset
                - htons
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:
        - Src:             'addr.c:75,3'
          Dst:             memset
        - Src:             'addr.c:81,19'
          Dst:             htons
        - Src:             'addr.c:87,3'
          Dst:             memset
        - Src:             'addr.c:93,20'
          Dst:             htons
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    htons
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_sa_pton
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 406
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'struct.sockaddr *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         18
      ICount:          111
      EdgeCount:       24
      CyclomaticComplexity: 8
      functionsReached:
        - freeaddrinfo
        - getaddrinfo
        - memset
      functionUses:    0
      BranchProfiles:
        - Branch String:   'addr.c:412,16'
          Branch Sides:
            - BranchSide:      'addr.c:412,31'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:413,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:412,6'
          Branch Sides:
            - BranchSide:      'addr.c:413,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:415,6'
              BranchSideFuncs:
                - freeaddrinfo
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - freeaddrinfo
                - freeaddrinfo
        - Branch String:   'addr.c:415,6'
          Branch Sides:
            - BranchSide:      'addr.c:416,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:418,6'
              BranchSideFuncs:
                - freeaddrinfo
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - freeaddrinfo
                - freeaddrinfo
        - Branch String:   'addr.c:418,6'
          Branch Sides:
            - BranchSide:      'addr.c:419,16'
              BranchSideFuncs:
                - freeaddrinfo
            - BranchSide:      'addr.c:423,6'
              BranchSideFuncs:
                - freeaddrinfo
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - freeaddrinfo
        - Branch String:   'addr.c:423,6'
          Branch Sides:
            - BranchSide:      'addr.c:424,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - freeaddrinfo
                - freeaddrinfo
            - BranchSide:      'addr.c:431,15'
              BranchSideFuncs:
                - freeaddrinfo
        - Branch String:   'addr.c:424,7'
          Branch Sides:
            - BranchSide:      'addr.c:425,17'
              BranchSideFuncs:
                - freeaddrinfo
            - BranchSide:      'addr.c:428,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - freeaddrinfo
      Callsites:
        - Src:             'addr.c:409,2'
          Dst:             memset
        - Src:             'addr.c:412,19'
          Dst:             getaddrinfo
        - Src:             'addr.c:419,3'
          Dst:             freeaddrinfo
        - Src:             'addr.c:425,4'
          Dst:             freeaddrinfo
        - Src:             'addr.c:431,2'
          Dst:             freeaddrinfo
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_host_to_all1s
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 361
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.xaddr *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          51
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - addr_hostmask
        - addr_or
      functionUses:    0
      BranchProfiles:
        - Branch String:   'addr.c:364,6'
          Branch Sides:
            - BranchSide:      'addr.c:365,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:366,14'
              BranchSideFuncs:
                - addr_or
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'addr.c:366,6'
          Branch Sides:
            - BranchSide:      'addr.c:367,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:368,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'addr.c:364,6'
          Dst:             addr_hostmask
        - Src:             'addr.c:366,6'
          Dst:             addr_or
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_or
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 232
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.xaddr *'
        - 'struct.xaddr *'
        - 'struct.xaddr *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         18
      ICount:          124
      EdgeCount:       21
      CyclomaticComplexity: 5
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'addr.c:235,18'
          Branch Sides:
            - BranchSide:      'addr.c:235,21'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:236,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:235,31'
          Branch Sides:
            - BranchSide:      'addr.c:235,34'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:236,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:235,44'
          Branch Sides:
            - BranchSide:      'addr.c:235,47'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:236,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:235,6'
          Branch Sides:
            - BranchSide:      'addr.c:236,3'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:238,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'addr.c:239,2'
          Branch Sides:
            - BranchSide:      'addr.c:241,21'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:244,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:248,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:244,3'
          Branch Sides:
            - BranchSide:      'addr.c:245,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:246,3'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    addr_increment
      functionSourceFile: '/src/openssh/addr.c'
      linkageType:     InternalLinkage
      functionLinenumber: 306
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.xaddr *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         14
      ICount:          94
      EdgeCount:       15
      CyclomaticComplexity: 3
      functionsReached:
        - htonl
        - ntohl
      functionUses:    0
      BranchProfiles:
        - Branch String:   'addr.c:310,2'
          Branch Sides:
            - BranchSide:      'addr.c:310,2'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:312,30'
              BranchSideFuncs:
                - ntohl
                - htonl
            - BranchSide:      'addr.c:315,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ntohl
                - htonl
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'addr.c:315,3'
          Branch Sides:
            - BranchSide:      'addr.c:317,14'
              BranchSideFuncs:
                - ntohl
                - htonl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'addr.c:322,3'
              BranchSideFuncs: []
        - Branch String:   'addr.c:319,8'
          Branch Sides:
            - BranchSide:      'addr.c:320,5'
              BranchSideFuncs: []
            - BranchSide:      'addr.c:321,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ntohl
                - htonl
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'addr.c:312,24'
          Dst:             ntohl
        - Src:             'addr.c:312,18'
          Dst:             htonl
        - Src:             'addr.c:317,8'
          Dst:             ntohl
        - Src:             'addr.c:318,23'
          Dst:             htonl
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dispatch_run_fatal
      functionSourceFile: '/src/openssh/dispatch.c'
      linkageType:     InternalLinkage
      functionLinenumber: 129
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.ssh.349 *'
        - 'int '
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         5
      ICount:          40
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached:
        - ssh_dispatch_run
        - sshpkt_fatal
      functionUses:    0
      BranchProfiles:
        - Branch String:   'dispatch.c:132,6'
          Branch Sides:
            - BranchSide:      'dispatch.c:133,16'
              BranchSideFuncs:
                - sshpkt_fatal
            - BranchSide:      'dispatch.c:134,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'dispatch.c:132,11'
          Dst:             ssh_dispatch_run
        - Src:             'dispatch.c:133,3'
          Dst:             sshpkt_fatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dispatch_run
      functionSourceFile: '/src/openssh/dispatch.c'
      linkageType:     InternalLinkage
      functionLinenumber: 88
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.ssh.349 *'
        - 'int '
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         33
      ICount:          193
      EdgeCount:       45
      CyclomaticComplexity: 14
      functionsReached:
        - ssh_packet_read_poll_seqnr
        - ssh_packet_read_seqnr
        - sshlog
        - sshpkt_disconnect
      functionUses:    1
      BranchProfiles:
        - Branch String:   'dispatch.c:94,7'
          Branch Sides:
            - BranchSide:      'dispatch.c:95,30'
              BranchSideFuncs:
                - ssh_packet_read_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'dispatch.c:99,35'
              BranchSideFuncs:
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'dispatch.c:96,8'
          Branch Sides:
            - BranchSide:      'dispatch.c:97,12'
              BranchSideFuncs: []
            - BranchSide:      'dispatch.c:98,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'dispatch.c:100,8'
          Branch Sides:
            - BranchSide:      'dispatch.c:101,12'
              BranchSideFuncs: []
            - BranchSide:      'dispatch.c:102,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'dispatch.c:102,8'
          Branch Sides:
            - BranchSide:      'dispatch.c:0,0'
              BranchSideFuncs: []
            - BranchSide:      'dispatch.c:103,5'
              BranchSideFuncs: []
        - Branch String:   'dispatch.c:105,16'
          Branch Sides:
            - BranchSide:      'dispatch.c:105,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'dispatch.c:116,26'
              BranchSideFuncs:
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dispatch.c:105,39'
          Branch Sides:
            - BranchSide:      'dispatch.c:106,7'
              BranchSideFuncs:
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'dispatch.c:116,26'
              BranchSideFuncs:
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dispatch.c:105,7'
          Branch Sides:
            - BranchSide:      'dispatch.c:107,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
            - BranchSide:      'dispatch.c:116,26'
              BranchSideFuncs:
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dispatch.c:107,8'
          Branch Sides:
            - BranchSide:      'dispatch.c:108,5'
              BranchSideFuncs:
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_seqnr
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'dispatch.c:112,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_read_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dispatch.c:113,8'
          Branch Sides:
            - BranchSide:      'dispatch.c:114,12'
              BranchSideFuncs: []
            - BranchSide:      'dispatch.c:115,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_read_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dispatch.c:118,8'
          Branch Sides:
            - BranchSide:      'dispatch.c:119,12'
              BranchSideFuncs: []
            - BranchSide:      'dispatch.c:120,4'
              BranchSideFuncs: []
        - Branch String:   'dispatch.c:122,20'
          Branch Sides:
            - BranchSide:      'dispatch.c:93,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_read_seqnr
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'dispatch.c:122,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ssh_packet_read_poll_seqnr
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshpkt_disconnect
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_pc_indir
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - ssh_packet_read_seqnr
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dispatch.c:122,7'
          Branch Sides:
            - BranchSide:      'dispatch.c:93,2'
              BranchSideFuncs: []
            - BranchSide:      'dispatch.c:123,4'
              BranchSideFuncs: []
      Callsites:
        - Src:             'dispatch.c:95,8'
          Dst:             ssh_packet_read_seqnr
        - Src:             'dispatch.c:99,8'
          Dst:             ssh_packet_read_poll_seqnr
        - Src:             'dispatch.c:108,5'
          Dst:             sshlog
        - Src:             'dispatch.c:116,8'
          Dst:             sshpkt_disconnect
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dispatch_set
      functionSourceFile: '/src/openssh/dispatch.c'
      linkageType:     InternalLinkage
      functionLinenumber: 82
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.ssh.349 *'
        - 'int '
        - 'func_type *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          21
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dispatch_range
      functionSourceFile: '/src/openssh/dispatch.c'
      linkageType:     InternalLinkage
      functionLinenumber: 70
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'struct.ssh.349 *'
        - 'int '
        - 'int '
        - 'func_type *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          54
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'dispatch.c:73,2'
          Branch Sides:
            - BranchSide:      'dispatch.c:73,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dispatch.c:74,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'dispatch.c:74,7'
          Branch Sides:
            - BranchSide:      'dispatch.c:75,4'
              BranchSideFuncs: []
            - BranchSide:      'dispatch.c:76,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_dispatch_init
      functionSourceFile: '/src/openssh/dispatch.c'
      linkageType:     InternalLinkage
      functionLinenumber: 62
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.ssh.349 *'
        - 'func_type *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         5
      ICount:          37
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'dispatch.c:64,2'
          Branch Sides:
            - BranchSide:      'dispatch.c:65,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'dispatch.c:66,1'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dispatch_protocol_ignore
      functionSourceFile: '/src/openssh/dispatch.c'
      linkageType:     InternalLinkage
      functionLinenumber: 55
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh.349 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          23
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - sshlog
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'dispatch.c:56,2'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dispatch_protocol_error
      functionSourceFile: '/src/openssh/dispatch.c'
      linkageType:     InternalLinkage
      functionLinenumber: 41
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'struct.ssh.349 *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         12
      ICount:          73
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - ssh_packet_write_wait
        - sshlog
        - sshpkt_fatal
        - sshpkt_put_u32
        - sshpkt_send
        - sshpkt_start
      functionUses:    0
      BranchProfiles:
        - Branch String:   'dispatch.c:45,59'
          Branch Sides:
            - BranchSide:      'dispatch.c:46,26'
              BranchSideFuncs:
                - sshpkt_fatal
            - BranchSide:      'dispatch.c:49,16'
              BranchSideFuncs:
                - sshpkt_fatal
        - Branch String:   'dispatch.c:46,42'
          Branch Sides:
            - BranchSide:      'dispatch.c:47,23'
              BranchSideFuncs:
                - sshpkt_fatal
            - BranchSide:      'dispatch.c:49,16'
              BranchSideFuncs:
                - sshpkt_fatal
        - Branch String:   'dispatch.c:47,34'
          Branch Sides:
            - BranchSide:      'dispatch.c:48,33'
              BranchSideFuncs:
                - sshpkt_fatal
            - BranchSide:      'dispatch.c:49,16'
              BranchSideFuncs:
                - sshpkt_fatal
        - Branch String:   'dispatch.c:45,6'
          Branch Sides:
            - BranchSide:      'dispatch.c:49,16'
              BranchSideFuncs:
                - sshpkt_fatal
            - BranchSide:      'dispatch.c:50,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'dispatch.c:44,2'
          Dst:             sshlog
        - Src:             'dispatch.c:45,11'
          Dst:             sshpkt_start
        - Src:             'dispatch.c:46,11'
          Dst:             sshpkt_put_u32
        - Src:             'dispatch.c:47,11'
          Dst:             sshpkt_send
        - Src:             'dispatch.c:48,11'
          Dst:             ssh_packet_write_wait
        - Src:             'dispatch.c:49,3'
          Dst:             sshpkt_fatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dh_estimate
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 495
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         8
      ICount:          41
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'dh.c:496,6'
          Branch Sides:
            - BranchSide:      'dh.c:497,3'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:498,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dh.c:498,6'
          Branch Sides:
            - BranchSide:      'dh.c:499,3'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:500,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dh.c:500,6'
          Branch Sides:
            - BranchSide:      'dh.c:501,3'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:502,2'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dh_new_group18
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 421
      functionDepth:   0
      returnType:      'struct.dh_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         3
      ICount:          14
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - dh_new_group_asc
      functionUses:    2
      BranchProfiles:
        - Branch String:   'dh.c:467,27'
          Branch Sides:
            - BranchSide:      'dh.c:467,27'
              BranchSideFuncs:
                - dh_new_group_asc
            - BranchSide:      'dh.c:467,27'
              BranchSideFuncs:
                - dh_new_group_asc
      Callsites:
        - Src:             'dh.c:467,10'
          Dst:             dh_new_group_asc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dh_new_group_asc
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 314
      functionDepth:   0
      returnType:      'struct.dh_st *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         14
      ICount:          81
      EdgeCount:       18
      CyclomaticComplexity: 6
      functionsReached:
        - BN_clear_free
        - BN_hex2bn
        - DH_free
        - DH_new
        - DH_set0_pqg
      functionUses:    4
      BranchProfiles:
        - Branch String:   'dh.c:318,6'
          Branch Sides:
            - BranchSide:      'dh.c:319,3'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:320,23'
              BranchSideFuncs:
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - DH_set0_pqg
                - __sanitizer_cov_trace_const_cmp4
                - DH_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:320,37'
          Branch Sides:
            - BranchSide:      'dh.c:321,23'
              BranchSideFuncs:
                - DH_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:322,3'
              BranchSideFuncs:
                - DH_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:320,6'
          Branch Sides:
            - BranchSide:      'dh.c:322,3'
              BranchSideFuncs:
                - DH_free
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:323,19'
              BranchSideFuncs:
                - DH_set0_pqg
                - __sanitizer_cov_trace_const_cmp4
                - DH_free
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:323,6'
          Branch Sides:
            - BranchSide:      'dh.c:324,3'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:325,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'dh.c:318,12'
          Dst:             DH_new
        - Src:             'dh.c:320,6'
          Dst:             BN_hex2bn
        - Src:             'dh.c:321,6'
          Dst:             BN_hex2bn
        - Src:             'dh.c:323,7'
          Dst:             DH_set0_pqg
        - Src:             'dh.c:327,2'
          Dst:             DH_free
        - Src:             'dh.c:328,2'
          Dst:             BN_clear_free
        - Src:             'dh.c:329,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DH_new
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.dh_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_hex2bn
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.bignum_st **'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DH_set0_pqg
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.dh_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dh_new_group16
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 390
      functionDepth:   0
      returnType:      'struct.dh_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         3
      ICount:          14
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - dh_new_group_asc
      functionUses:    2
      BranchProfiles:
        - Branch String:   'dh.c:415,27'
          Branch Sides:
            - BranchSide:      'dh.c:415,27'
              BranchSideFuncs:
                - dh_new_group_asc
            - BranchSide:      'dh.c:415,27'
              BranchSideFuncs:
                - dh_new_group_asc
      Callsites:
        - Src:             'dh.c:415,10'
          Dst:             dh_new_group_asc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dh_new_group14
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 370
      functionDepth:   0
      returnType:      'struct.dh_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         3
      ICount:          14
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - dh_new_group_asc
      functionUses:    2
      BranchProfiles:
        - Branch String:   'dh.c:384,27'
          Branch Sides:
            - BranchSide:      'dh.c:384,27'
              BranchSideFuncs:
                - dh_new_group_asc
            - BranchSide:      'dh.c:384,27'
              BranchSideFuncs:
                - dh_new_group_asc
      Callsites:
        - Src:             'dh.c:384,10'
          Dst:             dh_new_group_asc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dh_new_group1
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 355
      functionDepth:   0
      returnType:      'struct.dh_st *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         3
      ICount:          14
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - dh_new_group_asc
      functionUses:    1
      BranchProfiles:
        - Branch String:   'dh.c:364,27'
          Branch Sides:
            - BranchSide:      'dh.c:364,27'
              BranchSideFuncs:
                - dh_new_group_asc
            - BranchSide:      'dh.c:364,27'
              BranchSideFuncs:
                - dh_new_group_asc
      Callsites:
        - Src:             'dh.c:364,10'
          Dst:             dh_new_group_asc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dh_gen_key
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 285
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.dh_st *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         27
      ICount:          144
      EdgeCount:       37
      CyclomaticComplexity: 12
      functionsReached:
        - BN_num_bits
        - DH_generate_key
        - DH_get0_key
        - DH_get0_pqg
        - DH_set_length
        - dh_pub_is_valid
      functionUses:    3
      BranchProfiles:
        - Branch String:   'dh.c:291,15'
          Branch Sides:
            - BranchSide:      'dh.c:291,18'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:294,3'
              BranchSideFuncs: []
        - Branch String:   'dh.c:291,31'
          Branch Sides:
            - BranchSide:      'dh.c:292,27'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:294,3'
              BranchSideFuncs: []
        - Branch String:   'dh.c:292,39'
          Branch Sides:
            - BranchSide:      'dh.c:293,6'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:294,3'
              BranchSideFuncs: []
        - Branch String:   'dh.c:293,25'
          Branch Sides:
            - BranchSide:      'dh.c:293,32'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:294,3'
              BranchSideFuncs: []
        - Branch String:   'dh.c:291,6'
          Branch Sides:
            - BranchSide:      'dh.c:294,3'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:295,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - DH_set_length
                - __sanitizer_cov_trace_const_cmp4
                - DH_generate_key
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - dh_pub_is_valid
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dh.c:295,6'
          Branch Sides:
            - BranchSide:      'dh.c:296,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - DH_set_length
                - __sanitizer_cov_trace_const_cmp4
                - DH_generate_key
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - dh_pub_is_valid
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'dh.c:301,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - DH_set_length
                - __sanitizer_cov_trace_const_cmp4
                - DH_generate_key
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - dh_pub_is_valid
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dh.c:301,25'
          Branch Sides:
            - BranchSide:      'dh.c:301,25'
              BranchSideFuncs:
                - DH_set_length
                - __sanitizer_cov_trace_const_cmp4
                - DH_generate_key
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - dh_pub_is_valid
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'dh.c:301,25'
              BranchSideFuncs:
                - DH_set_length
                - __sanitizer_cov_trace_const_cmp4
                - DH_generate_key
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - dh_pub_is_valid
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dh.c:301,6'
          Branch Sides:
            - BranchSide:      'dh.c:302,3'
              BranchSideFuncs:
                - DH_generate_key
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - dh_pub_is_valid
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'dh.c:304,22'
              BranchSideFuncs:
                - DH_generate_key
                - __sanitizer_cov_trace_const_cmp4
                - DH_get0_key
                - dh_pub_is_valid
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dh.c:304,6'
          Branch Sides:
            - BranchSide:      'dh.c:305,3'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:306,14'
              BranchSideFuncs:
                - DH_get0_key
                - dh_pub_is_valid
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dh.c:307,6'
          Branch Sides:
            - BranchSide:      'dh.c:308,3'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:309,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'dh.c:289,2'
          Dst:             DH_get0_pqg
        - Src:             'dh.c:292,15'
          Dst:             BN_num_bits
        - Src:             'dh.c:301,7'
          Dst:             DH_set_length
        - Src:             'dh.c:304,6'
          Dst:             DH_generate_key
        - Src:             'dh.c:306,2'
          Dst:             DH_get0_key
        - Src:             'dh.c:307,7'
          Dst:             dh_pub_is_valid
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DH_set_length
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.dh_st *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DH_generate_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.dh_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dh_pub_is_valid
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 237
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.dh_st *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         24
      ICount:          150
      EdgeCount:       32
      CyclomaticComplexity: 10
      functionsReached:
        - BN_clear_free
        - BN_cmp
        - BN_is_bit_set
        - BN_is_negative
        - BN_new
        - BN_num_bits
        - BN_value_one
        - DH_get0_pqg
        - sshlog
      functionUses:    2
      BranchProfiles:
        - Branch String:   'dh.c:246,6'
          Branch Sides:
            - BranchSide:      'dh.c:247,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'dh.c:250,13'
              BranchSideFuncs:
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - sshlog
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - BN_num_bits
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - sshlog
                - BN_is_bit_set
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - sshlog
        - Branch String:   'dh.c:250,6'
          Branch Sides:
            - BranchSide:      'dh.c:251,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'dh.c:255,13'
              BranchSideFuncs:
                - BN_new
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - sshlog
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - BN_num_bits
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - sshlog
                - BN_is_bit_set
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
        - Branch String:   'dh.c:255,6'
          Branch Sides:
            - BranchSide:      'dh.c:256,3'
              BranchSideFuncs:
                - sshlog
            - BranchSide:      'dh.c:259,14'
              BranchSideFuncs:
                - BN_value_one
                - BN_sub
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - sshlog
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - BN_num_bits
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - sshlog
                - BN_is_bit_set
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dh.c:259,41'
          Branch Sides:
            - BranchSide:      'dh.c:260,13'
              BranchSideFuncs:
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - BN_num_bits
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - sshlog
                - BN_is_bit_set
                - __sanitizer_cov_trace_const_cmp4
                - BN_clear_free
                - sshlog
            - BranchSide:      'dh.c:261,17'
              BranchSideFuncs:
                - BN_clear_free
                - sshlog
        - Branch String:   'dh.c:259,6'
          Branch Sides:
            - BranchSide:      'dh.c:261,17'
              BranchSideFuncs:
                - BN_clear_free
                - sshlog
            - BranchSide:      'dh.c:265,16'
              BranchSideFuncs:
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - BN_num_bits
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - sshlog
                - BN_is_bit_set
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dh.c:267,2'
          Branch Sides:
            - BranchSide:      'dh.c:268,21'
              BranchSideFuncs:
                - BN_is_bit_set
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_num_bits
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - sshlog
            - BranchSide:      'dh.c:270,2'
              BranchSideFuncs:
                - BN_num_bits
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - sshlog
        - Branch String:   'dh.c:268,7'
          Branch Sides:
            - BranchSide:      'dh.c:268,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - BN_num_bits
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - sshlog
                - BN_is_bit_set
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'dh.c:269,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - BN_num_bits
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - sshlog
                - BN_is_bit_set
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'dh.c:275,6'
          Branch Sides:
            - BranchSide:      'dh.c:276,3'
              BranchSideFuncs:
                - BN_num_bits
                - sshlog
            - BranchSide:      'dh.c:280,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'dh.c:239,10'
          Dst:             BN_num_bits
        - Src:             'dh.c:244,2'
          Dst:             DH_get0_pqg
        - Src:             'dh.c:246,6'
          Dst:             BN_is_negative
        - Src:             'dh.c:247,3'
          Dst:             sshlog
        - Src:             'dh.c:250,21'
          Dst:             BN_value_one
        - Src:             'dh.c:250,6'
          Dst:             BN_cmp
        - Src:             'dh.c:251,3'
          Dst:             sshlog
        - Src:             'dh.c:255,13'
          Dst:             BN_new
        - Src:             'dh.c:256,3'
          Dst:             sshlog
        - Src:             'dh.c:259,25'
          Dst:             BN_value_one
        - Src:             'dh.c:259,7'
          Dst:             BN_sub
        - Src:             'dh.c:260,6'
          Dst:             BN_cmp
        - Src:             'dh.c:261,3'
          Dst:             BN_clear_free
        - Src:             'dh.c:262,3'
          Dst:             sshlog
        - Src:             'dh.c:265,2'
          Dst:             BN_clear_free
        - Src:             'dh.c:268,7'
          Dst:             BN_is_bit_set
        - Src:             'dh.c:270,2'
          Dst:             BN_num_bits
        - Src:             'dh.c:270,2'
          Dst:             sshlog
        - Src:             'dh.c:276,3'
          Dst:             BN_num_bits
        - Src:             'dh.c:276,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_is_negative
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    BN_is_bit_set
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.bignum_st *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dh_new_group
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 339
      functionDepth:   0
      returnType:      'struct.dh_st *'
      argCount:        2
      argTypes:
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          50
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - DH_free
        - DH_new
        - DH_set0_pqg
      functionUses:    2
      BranchProfiles:
        - Branch String:   'dh.c:342,6'
          Branch Sides:
            - BranchSide:      'dh.c:343,3'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:344,19'
              BranchSideFuncs:
                - DH_set0_pqg
                - __sanitizer_cov_trace_const_cmp4
                - DH_free
        - Branch String:   'dh.c:344,6'
          Branch Sides:
            - BranchSide:      'dh.c:345,11'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:349,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'dh.c:342,12'
          Dst:             DH_new
        - Src:             'dh.c:344,7'
          Dst:             DH_set0_pqg
        - Src:             'dh.c:345,3'
          Dst:             DH_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    parse_prime
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 62
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'char *'
        - 'struct.dhgroup *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         87
      ICount:          448
      EdgeCount:       121
      CyclomaticComplexity: 36
      functionsReached:
        - BN_clear_free
        - BN_hex2bn
        - BN_new
        - BN_num_bits
        - BN_value_one
        - sshlog
        - strdelim
        - strsep
        - strtonum
      functionUses:    2
      BranchProfiles:
        - Branch String:   'dh.c:70,6'
          Branch Sides:
            - BranchSide:      'dh.c:71,3'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:73,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - strdelim
        - Branch String:   'dh.c:73,6'
          Branch Sides:
            - BranchSide:      'dh.c:74,9'
              BranchSideFuncs:
                - strdelim
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
            - BranchSide:      'dh.c:75,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:75,11'
          Branch Sides:
            - BranchSide:      'dh.c:75,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
            - BranchSide:      'dh.c:76,3'
              BranchSideFuncs: []
        - Branch String:   'dh.c:75,20'
          Branch Sides:
            - BranchSide:      'dh.c:75,24'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
            - BranchSide:      'dh.c:76,3'
              BranchSideFuncs: []
        - Branch String:   'dh.c:75,6'
          Branch Sides:
            - BranchSide:      'dh.c:76,3'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:79,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:79,17'
          Branch Sides:
            - BranchSide:      'dh.c:79,21'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:80,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:79,6'
          Branch Sides:
            - BranchSide:      'dh.c:80,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:81,8'
              BranchSideFuncs:
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:82,17'
          Branch Sides:
            - BranchSide:      'dh.c:82,21'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:83,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:82,6'
          Branch Sides:
            - BranchSide:      'dh.c:83,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:85,15'
              BranchSideFuncs:
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:86,21'
          Branch Sides:
            - BranchSide:      'dh.c:86,24'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:87,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:86,6'
          Branch Sides:
            - BranchSide:      'dh.c:87,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:90,8'
              BranchSideFuncs:
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:91,17'
          Branch Sides:
            - BranchSide:      'dh.c:91,21'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:92,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:91,6'
          Branch Sides:
            - BranchSide:      'dh.c:92,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:94,15'
              BranchSideFuncs:
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:95,21'
          Branch Sides:
            - BranchSide:      'dh.c:96,7'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:97,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:96,35'
          Branch Sides:
            - BranchSide:      'dh.c:96,40'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:97,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:95,6'
          Branch Sides:
            - BranchSide:      'dh.c:97,3'
              BranchSideFuncs:
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
            - BranchSide:      'dh.c:100,8'
              BranchSideFuncs:
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:101,17'
          Branch Sides:
            - BranchSide:      'dh.c:101,21'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:102,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:101,6'
          Branch Sides:
            - BranchSide:      'dh.c:102,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:103,15'
              BranchSideFuncs:
                - strtonum
                - __sanitizer_cov_trace_const_cmp8
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:104,21'
          Branch Sides:
            - BranchSide:      'dh.c:104,24'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:105,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:104,6'
          Branch Sides:
            - BranchSide:      'dh.c:105,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:108,12'
              BranchSideFuncs:
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strtonum
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:109,17'
          Branch Sides:
            - BranchSide:      'dh.c:109,21'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:112,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:109,37'
          Branch Sides:
            - BranchSide:      'dh.c:110,33'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:112,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:110,69'
          Branch Sides:
            - BranchSide:      'dh.c:111,6'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:112,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:109,6'
          Branch Sides:
            - BranchSide:      'dh.c:112,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:116,2'
              BranchSideFuncs:
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:118,17'
          Branch Sides:
            - BranchSide:      'dh.c:118,21'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:119,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:118,6'
          Branch Sides:
            - BranchSide:      'dh.c:119,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:120,10'
              BranchSideFuncs:
                - strsep
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:121,17'
          Branch Sides:
            - BranchSide:      'dh.c:121,36'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:121,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:121,6'
          Branch Sides:
            - BranchSide:      'dh.c:121,36'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:127,16'
              BranchSideFuncs:
                - BN_new
                - BN_new
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:127,34'
          Branch Sides:
            - BranchSide:      'dh.c:128,16'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:129,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:127,6'
          Branch Sides:
            - BranchSide:      'dh.c:129,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:132,17'
              BranchSideFuncs:
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - BN_num_bits
                - sshlog
                - sshlog
                - sshlog
        - Branch String:   'dh.c:132,6'
          Branch Sides:
            - BranchSide:      'dh.c:133,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:136,17'
              BranchSideFuncs:
                - BN_hex2bn
                - __sanitizer_cov_trace_const_cmp4
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - BN_num_bits
                - sshlog
                - sshlog
        - Branch String:   'dh.c:136,6'
          Branch Sides:
            - BranchSide:      'dh.c:137,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:140,18'
              BranchSideFuncs:
                - BN_num_bits
                - __sanitizer_cov_trace_cmp4
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_clear_free
                - BN_clear_free
                - BN_num_bits
                - sshlog
        - Branch String:   'dh.c:140,6'
          Branch Sides:
            - BranchSide:      'dh.c:141,3'
              BranchSideFuncs:
                - BN_num_bits
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:145,13'
              BranchSideFuncs:
                - BN_value_one
                - BN_cmp
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:145,6'
          Branch Sides:
            - BranchSide:      'dh.c:146,3'
              BranchSideFuncs:
                - sshlog
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:149,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'dh.c:70,13'
          Dst:             strdelim
        - Src:             'dh.c:74,9'
          Dst:             strdelim
        - Src:             'dh.c:81,8'
          Dst:             strsep
        - Src:             'dh.c:85,6'
          Dst:             strtonum
        - Src:             'dh.c:87,3'
          Dst:             sshlog
        - Src:             'dh.c:90,8'
          Dst:             strsep
        - Src:             'dh.c:94,6'
          Dst:             strtonum
        - Src:             'dh.c:97,3'
          Dst:             sshlog
        - Src:             'dh.c:100,8'
          Dst:             strsep
        - Src:             'dh.c:103,6'
          Dst:             strtonum
        - Src:             'dh.c:105,3'
          Dst:             sshlog
        - Src:             'dh.c:108,12'
          Dst:             strsep
        - Src:             'dh.c:110,24'
          Dst:             strtonum
        - Src:             'dh.c:112,3'
          Dst:             sshlog
        - Src:             'dh.c:117,8'
          Dst:             strsep
        - Src:             'dh.c:120,10'
          Dst:             strsep
        - Src:             'dh.c:123,3'
          Dst:             sshlog
        - Src:             'dh.c:127,16'
          Dst:             BN_new
        - Src:             'dh.c:128,16'
          Dst:             BN_new
        - Src:             'dh.c:129,3'
          Dst:             sshlog
        - Src:             'dh.c:132,6'
          Dst:             BN_hex2bn
        - Src:             'dh.c:133,3'
          Dst:             sshlog
        - Src:             'dh.c:136,6'
          Dst:             BN_hex2bn
        - Src:             'dh.c:137,3'
          Dst:             sshlog
        - Src:             'dh.c:140,6'
          Dst:             BN_num_bits
        - Src:             'dh.c:141,3'
          Dst:             BN_num_bits
        - Src:             'dh.c:141,3'
          Dst:             sshlog
        - Src:             'dh.c:145,21'
          Dst:             BN_value_one
        - Src:             'dh.c:145,6'
          Dst:             BN_cmp
        - Src:             'dh.c:146,3'
          Dst:             sshlog
        - Src:             'dh.c:152,2'
          Dst:             BN_clear_free
        - Src:             'dh.c:153,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dh_new_group_fallback
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 473
      functionDepth:   0
      returnType:      'struct.dh_st *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          48
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - dh_new_group14
        - dh_new_group16
        - dh_new_group18
        - sshlog
      functionUses:    3
      BranchProfiles:
        - Branch String:   'dh.c:475,6'
          Branch Sides:
            - BranchSide:      'dh.c:476,3'
              BranchSideFuncs:
                - sshlog
                - dh_new_group14
            - BranchSide:      'dh.c:478,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - dh_new_group18
                - sshlog
                - dh_new_group16
      Callsites:
        - Src:             'dh.c:474,2'
          Dst:             sshlog
        - Src:             'dh.c:476,3'
          Dst:             sshlog
        - Src:             'dh.c:477,10'
          Dst:             dh_new_group14
        - Src:             'dh.c:479,3'
          Dst:             sshlog
        - Src:             'dh.c:480,10'
          Dst:             dh_new_group16
        - Src:             'dh.c:482,2'
          Dst:             sshlog
        - Src:             'dh.c:483,9'
          Dst:             dh_new_group18
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    get_moduli_filename
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 56
      functionDepth:   0
      returnType:      'char *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         4
      ICount:          17
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:
        - Branch String:   'dh.c:57,9'
          Branch Sides:
            - BranchSide:      'dh.c:57,27'
              BranchSideFuncs: []
            - BranchSide:      'dh.c:57,9'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    choose_dh
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 160
      functionDepth:   0
      returnType:      'struct.dh_st *'
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         49
      ICount:          305
      EdgeCount:       67
      CyclomaticComplexity: 20
      functionsReached:
        - BN_clear_free
        - __errno_location
        - arc4random_uniform
        - dh_new_group
        - dh_new_group_fallback
        - fclose
        - fopen
        - get_moduli_filename
        - getline
        - parse_prime
        - rewind
        - sshlog
      functionUses:    1
      BranchProfiles:
        - Branch String:   'dh.c:167,6'
          Branch Sides:
            - BranchSide:      'dh.c:168,3'
              BranchSideFuncs:
                - get_moduli_filename
                - __errno_location
                - strerror
                - sshlog
                - dh_new_group_fallback
            - BranchSide:      'dh.c:173,10'
              BranchSideFuncs:
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'dh.c:175,2'
          Branch Sides:
            - BranchSide:      'dh.c:176,10'
              BranchSideFuncs:
                - parse_prime
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dh.c:193,7'
              BranchSideFuncs:
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
        - Branch String:   'dh.c:177,7'
          Branch Sides:
            - BranchSide:      'dh.c:178,4'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dh.c:179,21'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'dh.c:182,22'
          Branch Sides:
            - BranchSide:      'dh.c:182,29'
              BranchSideFuncs:
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dh.c:183,4'
              BranchSideFuncs:
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'dh.c:182,7'
          Branch Sides:
            - BranchSide:      'dh.c:183,4'
              BranchSideFuncs:
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dh.c:185,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'dh.c:185,28'
          Branch Sides:
            - BranchSide:      'dh.c:185,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dh.c:186,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'dh.c:185,48'
          Branch Sides:
            - BranchSide:      'dh.c:186,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dh.c:187,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'dh.c:186,24'
          Branch Sides:
            - BranchSide:      'dh.c:186,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dh.c:190,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'dh.c:185,7'
          Branch Sides:
            - BranchSide:      'dh.c:187,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dh.c:190,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'dh.c:190,7'
          Branch Sides:
            - BranchSide:      'dh.c:175,2'
              BranchSideFuncs:
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dh.c:191,13'
              BranchSideFuncs:
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - rewind
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - BN_clear_free
                - BN_clear_free
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'dh.c:198,6'
          Branch Sides:
            - BranchSide:      'dh.c:199,10'
              BranchSideFuncs:
                - fclose
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
            - BranchSide:      'dh.c:204,29'
              BranchSideFuncs:
                - arc4random_uniform
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
        - Branch String:   'dh.c:208,2'
          Branch Sides:
            - BranchSide:      'dh.c:209,10'
              BranchSideFuncs:
                - parse_prime
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - BN_clear_free
                - BN_clear_free
            - BranchSide:      'dh.c:221,7'
              BranchSideFuncs:
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
        - Branch String:   'dh.c:210,7'
          Branch Sides:
            - BranchSide:      'dh.c:211,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - BN_clear_free
                - BN_clear_free
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - parse_prime
            - BranchSide:      'dh.c:212,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - BN_clear_free
                - BN_clear_free
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - parse_prime
        - Branch String:   'dh.c:212,23'
          Branch Sides:
            - BranchSide:      'dh.c:212,30'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dh.c:215,22'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'dh.c:212,42'
          Branch Sides:
            - BranchSide:      'dh.c:213,11'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dh.c:215,22'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'dh.c:213,24'
          Branch Sides:
            - BranchSide:      'dh.c:214,16'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dh.c:215,22'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'dh.c:212,7'
          Branch Sides:
            - BranchSide:      'dh.c:215,22'
              BranchSideFuncs:
                - BN_clear_free
                - BN_clear_free
                - getline
                - __sanitizer_cov_trace_const_cmp8
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
                - parse_prime
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'dh.c:219,3'
              BranchSideFuncs:
                - free
                - fclose
                - __sanitizer_cov_trace_cmp4
                - dh_new_group
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
        - Branch String:   'dh.c:224,6'
          Branch Sides:
            - BranchSide:      'dh.c:225,3'
              BranchSideFuncs:
                - get_moduli_filename
                - sshlog
                - dh_new_group_fallback
            - BranchSide:      'dh.c:230,27'
              BranchSideFuncs:
                - dh_new_group
      Callsites:
        - Src:             'dh.c:167,17'
          Dst:             get_moduli_filename
        - Src:             'dh.c:167,11'
          Dst:             fopen
        - Src:             'dh.c:168,3'
          Dst:             get_moduli_filename
        - Src:             'dh.c:168,3'
          Dst:             __errno_location
        - Src:             'dh.c:168,3'
          Dst:             strerror
        - Src:             'dh.c:168,3'
          Dst:             sshlog
        - Src:             'dh.c:170,11'
          Dst:             dh_new_group_fallback
        - Src:             'dh.c:175,9'
          Dst:             getline
        - Src:             'dh.c:177,8'
          Dst:             parse_prime
        - Src:             'dh.c:179,3'
          Dst:             BN_clear_free
        - Src:             'dh.c:180,3'
          Dst:             BN_clear_free
        - Src:             'dh.c:196,2'
          Dst:             rewind
        - Src:             'dh.c:199,3'
          Dst:             fclose
        - Src:             'dh.c:200,3'
          Dst:             get_moduli_filename
        - Src:             'dh.c:200,3'
          Dst:             sshlog
        - Src:             'dh.c:202,11'
          Dst:             dh_new_group_fallback
        - Src:             'dh.c:204,10'
          Dst:             arc4random_uniform
        - Src:             'dh.c:208,9'
          Dst:             getline
        - Src:             'dh.c:210,8'
          Dst:             parse_prime
        - Src:             'dh.c:215,4'
          Dst:             BN_clear_free
        - Src:             'dh.c:216,4'
          Dst:             BN_clear_free
        - Src:             'dh.c:223,2'
          Dst:             fclose
        - Src:             'dh.c:225,3'
          Dst:             get_moduli_filename
        - Src:             'dh.c:225,3'
          Dst:             sshlog
        - Src:             'dh.c:227,11'
          Dst:             dh_new_group_fallback
        - Src:             'dh.c:230,10'
          Dst:             dh_new_group
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fopen
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct._IO_FILE *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getline
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'char **'
        - 'size_t *'
        - 'struct._IO_FILE *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    rewind
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct._IO_FILE *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    fclose
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct._IO_FILE *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dh_set_moduli_file
      functionSourceFile: '/src/openssh/dh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 51
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          9
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    poly1305_auth
      functionSourceFile: '/src/openssh/poly1305.c'
      linkageType:     InternalLinkage
      functionLinenumber: 34
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         27
      ICount:          1309
      EdgeCount:       31
      CyclomaticComplexity: 6
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'poly1305.c:73,6'
          Branch Sides:
            - BranchSide:      'poly1305.c:73,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'poly1305.c:73,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'poly1305.c:104,6'
          Branch Sides:
            - BranchSide:      'poly1305.c:104,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'poly1305.c:104,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'poly1305.c:108,6'
          Branch Sides:
            - BranchSide:      'poly1305.c:108,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'poly1305.c:110,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'poly1305.c:110,2'
          Branch Sides:
            - BranchSide:      'poly1305.c:110,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'poly1305.c:111,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'poly1305.c:112,2'
          Branch Sides:
            - BranchSide:      'poly1305.c:112,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'poly1305.c:113,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_dh_dec
      functionSourceFile: '/src/openssh/kexdh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 177
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.kex *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         13
      ICount:          96
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - BN_free
        - DH_free
        - kex_dh_compute_key
        - sshbuf_free
        - sshbuf_get_bignum2
        - sshbuf_new
        - sshbuf_put_stringb
        - sshbuf_reset
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kexdh.c:184,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:185,5'
              BranchSideFuncs:
                - BN_free
                - DH_free
                - sshbuf_free
            - BranchSide:      'kexdh.c:188,30'
              BranchSideFuncs:
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - kex_dh_compute_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_free
                - DH_free
                - sshbuf_free
        - Branch String:   'kexdh.c:188,50'
          Branch Sides:
            - BranchSide:      'kexdh.c:189,30'
              BranchSideFuncs:
                - BN_free
                - DH_free
                - sshbuf_free
            - BranchSide:      'kexdh.c:190,3'
              BranchSideFuncs:
                - BN_free
                - DH_free
                - sshbuf_free
        - Branch String:   'kexdh.c:188,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:190,3'
              BranchSideFuncs:
                - BN_free
                - DH_free
                - sshbuf_free
            - BranchSide:      'kexdh.c:191,15'
              BranchSideFuncs:
                - sshbuf_reset
                - kex_dh_compute_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_free
                - DH_free
                - sshbuf_free
        - Branch String:   'kexdh.c:192,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:193,3'
              BranchSideFuncs:
                - BN_free
                - DH_free
                - sshbuf_free
            - BranchSide:      'kexdh.c:194,20'
              BranchSideFuncs:
                - BN_free
                - DH_free
                - sshbuf_free
      Callsites:
        - Src:             'kexdh.c:184,13'
          Dst:             sshbuf_new
        - Src:             'kexdh.c:188,11'
          Dst:             sshbuf_put_stringb
        - Src:             'kexdh.c:189,11'
          Dst:             sshbuf_get_bignum2
        - Src:             'kexdh.c:191,2'
          Dst:             sshbuf_reset
        - Src:             'kexdh.c:192,11'
          Dst:             kex_dh_compute_key
        - Src:             'kexdh.c:197,2'
          Dst:             BN_free
        - Src:             'kexdh.c:198,2'
          Dst:             DH_free
        - Src:             'kexdh.c:200,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_dh_compute_key
      functionSourceFile: '/src/openssh/kexdh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 74
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.kex *'
        - 'struct.bignum_st *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         16
      ICount:          112
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - BN_bin2bn
        - BN_clear_free
        - BN_new
        - DH_compute_key
        - DH_size
        - dh_pub_is_valid
        - freezero
        - sshbuf_put_bignum2
      functionUses:    1
      BranchProfiles:
        - Branch String:   'kexdh.c:89,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:90,5'
              BranchSideFuncs:
                - DH_size
                - malloc
                - BN_new
                - DH_compute_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_bin2bn
                - sshbuf_put_bignum2
                - freezero
                - BN_clear_free
            - BranchSide:      'kexdh.c:93,17'
              BranchSideFuncs:
                - DH_size
                - malloc
                - BN_new
                - DH_compute_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_bin2bn
                - sshbuf_put_bignum2
                - freezero
                - BN_clear_free
        - Branch String:   'kexdh.c:94,36'
          Branch Sides:
            - BranchSide:      'kexdh.c:95,23'
              BranchSideFuncs:
                - freezero
                - BN_clear_free
            - BranchSide:      'kexdh.c:96,5'
              BranchSideFuncs:
                - freezero
                - BN_clear_free
        - Branch String:   'kexdh.c:94,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:96,5'
              BranchSideFuncs:
                - freezero
                - BN_clear_free
            - BranchSide:      'kexdh.c:99,29'
              BranchSideFuncs:
                - DH_compute_key
                - __sanitizer_cov_trace_const_cmp4
                - BN_bin2bn
                - sshbuf_put_bignum2
                - freezero
                - BN_clear_free
        - Branch String:   'kexdh.c:99,57'
          Branch Sides:
            - BranchSide:      'kexdh.c:100,16'
              BranchSideFuncs:
                - freezero
                - BN_clear_free
            - BranchSide:      'kexdh.c:101,5'
              BranchSideFuncs:
                - freezero
                - BN_clear_free
        - Branch String:   'kexdh.c:99,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:101,5'
              BranchSideFuncs:
                - freezero
                - BN_clear_free
            - BranchSide:      'kexdh.c:107,25'
              BranchSideFuncs:
                - sshbuf_put_bignum2
                - freezero
                - BN_clear_free
      Callsites:
        - Src:             'kexdh.c:89,7'
          Dst:             dh_pub_is_valid
        - Src:             'kexdh.c:93,9'
          Dst:             DH_size
        - Src:             'kexdh.c:95,23'
          Dst:             BN_new
        - Src:             'kexdh.c:99,14'
          Dst:             DH_compute_key
        - Src:             'kexdh.c:100,6'
          Dst:             BN_bin2bn
        - Src:             'kexdh.c:107,6'
          Dst:             sshbuf_put_bignum2
        - Src:             'kexdh.c:109,2'
          Dst:             freezero
        - Src:             'kexdh.c:110,2'
          Dst:             BN_clear_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DH_size
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.dh_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    DH_compute_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'struct.bignum_st *'
        - 'struct.dh_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_dh_enc
      functionSourceFile: '/src/openssh/kexdh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 145
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.kex *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf **'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         15
      ICount:          110
      EdgeCount:       20
      CyclomaticComplexity: 7
      functionsReached:
        - DH_free
        - DH_get0_key
        - kex_dh_dec
        - kex_dh_keygen
        - sshbuf_free
        - sshbuf_get_u32
        - sshbuf_new
        - sshbuf_put_bignum2
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kexdh.c:153,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:154,3'
              BranchSideFuncs:
                - DH_free
                - sshbuf_free
            - BranchSide:      'kexdh.c:155,14'
              BranchSideFuncs:
                - DH_get0_key
                - sshbuf_new
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - kex_dh_dec
                - __sanitizer_cov_trace_const_cmp4
                - DH_free
                - sshbuf_free
        - Branch String:   'kexdh.c:156,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:157,5'
              BranchSideFuncs:
                - DH_free
                - sshbuf_free
            - BranchSide:      'kexdh.c:160,30'
              BranchSideFuncs:
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - kex_dh_dec
                - __sanitizer_cov_trace_const_cmp4
                - DH_free
                - sshbuf_free
        - Branch String:   'kexdh.c:160,58'
          Branch Sides:
            - BranchSide:      'kexdh.c:161,26'
              BranchSideFuncs:
                - DH_free
                - sshbuf_free
            - BranchSide:      'kexdh.c:162,3'
              BranchSideFuncs:
                - DH_free
                - sshbuf_free
        - Branch String:   'kexdh.c:160,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:162,3'
              BranchSideFuncs:
                - DH_free
                - sshbuf_free
            - BranchSide:      'kexdh.c:163,22'
              BranchSideFuncs:
                - kex_dh_dec
                - __sanitizer_cov_trace_const_cmp4
                - DH_free
                - sshbuf_free
        - Branch String:   'kexdh.c:163,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:164,3'
              BranchSideFuncs:
                - DH_free
                - sshbuf_free
            - BranchSide:      'kexdh.c:165,18'
              BranchSideFuncs:
                - DH_free
                - sshbuf_free
      Callsites:
        - Src:             'kexdh.c:153,11'
          Dst:             kex_dh_keygen
        - Src:             'kexdh.c:155,2'
          Dst:             DH_get0_key
        - Src:             'kexdh.c:156,21'
          Dst:             sshbuf_new
        - Src:             'kexdh.c:160,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'kexdh.c:161,11'
          Dst:             sshbuf_get_u32
        - Src:             'kexdh.c:163,11'
          Dst:             kex_dh_dec
        - Src:             'kexdh.c:168,2'
          Dst:             DH_free
        - Src:             'kexdh.c:170,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_dh_keygen
      functionSourceFile: '/src/openssh/kexdh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 49
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.kex *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         14
      ICount:          87
      EdgeCount:       14
      CyclomaticComplexity: 2
      functionsReached:
        - dh_gen_key
        - dh_new_group1
        - dh_new_group14
        - dh_new_group16
        - dh_new_group18
      functionUses:    2
      BranchProfiles:
        - Branch String:   'kexdh.c:50,2'
          Branch Sides:
            - BranchSide:      'kexdh.c:52,13'
              BranchSideFuncs:
                - dh_new_group1
                - dh_gen_key
            - BranchSide:      'kexdh.c:56,13'
              BranchSideFuncs:
                - dh_new_group14
                - dh_gen_key
            - BranchSide:      'kexdh.c:56,13'
              BranchSideFuncs:
                - dh_new_group14
                - dh_gen_key
            - BranchSide:      'kexdh.c:59,13'
              BranchSideFuncs:
                - dh_new_group16
                - dh_gen_key
            - BranchSide:      'kexdh.c:62,13'
              BranchSideFuncs:
                - dh_new_group18
                - dh_gen_key
            - BranchSide:      'kexdh.c:65,3'
              BranchSideFuncs: []
        - Branch String:   'kexdh.c:67,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:68,3'
              BranchSideFuncs: []
            - BranchSide:      'kexdh.c:69,21'
              BranchSideFuncs:
                - dh_gen_key
      Callsites:
        - Src:             'kexdh.c:52,13'
          Dst:             dh_new_group1
        - Src:             'kexdh.c:56,13'
          Dst:             dh_new_group14
        - Src:             'kexdh.c:59,13'
          Dst:             dh_new_group16
        - Src:             'kexdh.c:62,13'
          Dst:             dh_new_group18
        - Src:             'kexdh.c:69,10'
          Dst:             dh_gen_key
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_dh_keypair
      functionSourceFile: '/src/openssh/kexdh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 116
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.kex *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         14
      ICount:          85
      EdgeCount:       18
      CyclomaticComplexity: 6
      functionsReached:
        - DH_get0_key
        - kex_dh_keygen
        - sshbuf_free
        - sshbuf_get_u32
        - sshbuf_new
        - sshbuf_put_bignum2
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kexdh.c:121,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:122,10'
              BranchSideFuncs: []
            - BranchSide:      'kexdh.c:123,14'
              BranchSideFuncs:
                - DH_get0_key
                - sshbuf_new
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
        - Branch String:   'kexdh.c:124,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:125,3'
              BranchSideFuncs: []
            - BranchSide:      'kexdh.c:126,30'
              BranchSideFuncs:
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
        - Branch String:   'kexdh.c:126,50'
          Branch Sides:
            - BranchSide:      'kexdh.c:127,26'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexdh.c:128,3'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexdh.c:126,6'
          Branch Sides:
            - BranchSide:      'kexdh.c:128,3'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexdh.c:135,20'
              BranchSideFuncs:
                - sshbuf_free
      Callsites:
        - Src:             'kexdh.c:121,11'
          Dst:             kex_dh_keygen
        - Src:             'kexdh.c:123,2'
          Dst:             DH_get0_key
        - Src:             'kexdh.c:124,13'
          Dst:             sshbuf_new
        - Src:             'kexdh.c:126,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'kexdh.c:127,11'
          Dst:             sshbuf_get_u32
        - Src:             'kexdh.c:138,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kexgex_hash
      functionSourceFile: '/src/openssh/kexgex.c'
      linkageType:     InternalLinkage
      functionLinenumber: 61
      functionDepth:   0
      returnType:      'int '
      argCount:        17
      argTypes:
        - 'int '
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf *'
        - 'int '
        - 'int '
        - 'int '
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
        - 'struct.bignum_st *'
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         51
      ICount:          336
      EdgeCount:       73
      CyclomaticComplexity: 24
      functionsReached:
        - ssh_digest_buffer
        - ssh_digest_bytes
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_put
        - sshbuf_put_bignum2
        - sshbuf_put_stringb
        - sshbuf_put_u32
        - sshbuf_put_u8
        - sshbuf_putb
      functionUses:    2
      BranchProfiles:
        - Branch String:   'kexgex.c:65,6'
          Branch Sides:
            - BranchSide:      'kexgex.c:66,3'
              BranchSideFuncs: []
            - BranchSide:      'kexgex.c:67,11'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - ssh_digest_bytes
                - sshbuf_free
                - sshbuf_free
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgex.c:67,6'
          Branch Sides:
            - BranchSide:      'kexgex.c:68,3'
              BranchSideFuncs: []
            - BranchSide:      'kexgex.c:69,30'
              BranchSideFuncs:
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_len
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u8
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_putb
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - ssh_digest_bytes
                - sshbuf_free
                - sshbuf_free
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgex.c:69,54'
          Branch Sides:
            - BranchSide:      'kexgex.c:70,30'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:70,54'
          Branch Sides:
            - BranchSide:      'kexgex.c:72,26'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:72,67'
          Branch Sides:
            - BranchSide:      'kexgex.c:73,25'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:73,52'
          Branch Sides:
            - BranchSide:      'kexgex.c:74,23'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:74,48'
          Branch Sides:
            - BranchSide:      'kexgex.c:75,26'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:75,67'
          Branch Sides:
            - BranchSide:      'kexgex.c:76,25'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:76,52'
          Branch Sides:
            - BranchSide:      'kexgex.c:77,23'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:77,48'
          Branch Sides:
            - BranchSide:      'kexgex.c:78,30'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:78,61'
          Branch Sides:
            - BranchSide:      'kexgex.c:79,7'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:79,17'
          Branch Sides:
            - BranchSide:      'kexgex.c:79,40'
              BranchSideFuncs:
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - ssh_digest_bytes
                - sshbuf_free
                - sshbuf_free
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'kexgex.c:80,26'
              BranchSideFuncs:
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - ssh_digest_bytes
                - sshbuf_free
                - sshbuf_free
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'kexgex.c:79,55'
          Branch Sides:
            - BranchSide:      'kexgex.c:80,26'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:80,45'
          Branch Sides:
            - BranchSide:      'kexgex.c:81,7'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:81,17'
          Branch Sides:
            - BranchSide:      'kexgex.c:81,40'
              BranchSideFuncs:
                - sshbuf_put_u32
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - ssh_digest_bytes
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexgex.c:82,30'
              BranchSideFuncs:
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - ssh_digest_bytes
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexgex.c:81,55'
          Branch Sides:
            - BranchSide:      'kexgex.c:82,30'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:82,46'
          Branch Sides:
            - BranchSide:      'kexgex.c:83,30'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:83,44'
          Branch Sides:
            - BranchSide:      'kexgex.c:84,30'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:84,54'
          Branch Sides:
            - BranchSide:      'kexgex.c:85,30'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:85,54'
          Branch Sides:
            - BranchSide:      'kexgex.c:86,22'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
        - Branch String:   'kexgex.c:69,6'
          Branch Sides:
            - BranchSide:      'kexgex.c:87,15'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:93,24'
              BranchSideFuncs:
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
                - ssh_digest_bytes
                - sshbuf_free
        - Branch String:   'kexgex.c:93,6'
          Branch Sides:
            - BranchSide:      'kexgex.c:94,15'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexgex.c:97,14'
              BranchSideFuncs:
                - sshbuf_free
                - ssh_digest_bytes
      Callsites:
        - Src:             'kexgex.c:65,17'
          Dst:             ssh_digest_bytes
        - Src:             'kexgex.c:67,11'
          Dst:             sshbuf_new
        - Src:             'kexgex.c:69,11'
          Dst:             sshbuf_put_stringb
        - Src:             'kexgex.c:70,11'
          Dst:             sshbuf_put_stringb
        - Src:             'kexgex.c:72,29'
          Dst:             sshbuf_len
        - Src:             'kexgex.c:72,11'
          Dst:             sshbuf_put_u32
        - Src:             'kexgex.c:73,11'
          Dst:             sshbuf_put_u8
        - Src:             'kexgex.c:74,11'
          Dst:             sshbuf_putb
        - Src:             'kexgex.c:75,29'
          Dst:             sshbuf_len
        - Src:             'kexgex.c:75,11'
          Dst:             sshbuf_put_u32
        - Src:             'kexgex.c:76,11'
          Dst:             sshbuf_put_u8
        - Src:             'kexgex.c:77,11'
          Dst:             sshbuf_putb
        - Src:             'kexgex.c:78,11'
          Dst:             sshbuf_put_stringb
        - Src:             'kexgex.c:79,25'
          Dst:             sshbuf_put_u32
        - Src:             'kexgex.c:80,11'
          Dst:             sshbuf_put_u32
        - Src:             'kexgex.c:81,25'
          Dst:             sshbuf_put_u32
        - Src:             'kexgex.c:82,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'kexgex.c:83,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'kexgex.c:84,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'kexgex.c:85,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'kexgex.c:86,11'
          Dst:             sshbuf_put
        - Src:             'kexgex.c:87,3'
          Dst:             sshbuf_free
        - Src:             'kexgex.c:93,6'
          Dst:             ssh_digest_buffer
        - Src:             'kexgex.c:94,3'
          Dst:             sshbuf_free
        - Src:             'kexgex.c:97,2'
          Dst:             sshbuf_free
        - Src:             'kexgex.c:98,13'
          Dst:             ssh_digest_bytes
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_ecdh_dec
      functionSourceFile: '/src/openssh/kexecdh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 202
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.kex *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          41
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - EC_KEY_free
        - kex_ecdh_dec_key_group
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'kexecdh.c:205,6'
          Dst:             kex_ecdh_dec_key_group
        - Src:             'kexecdh.c:207,2'
          Dst:             EC_KEY_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_ecdh_dec_key_group
      functionSourceFile: '/src/openssh/kexecdh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 140
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'struct.kex *'
        - 'struct.sshbuf *'
        - 'struct.ec_key_st *'
        - 'struct.ec_group_st *'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         26
      ICount:          182
      EdgeCount:       36
      CyclomaticComplexity: 12
      functionsReached:
        - BN_bin2bn
        - BN_clear_free
        - BN_new
        - ECDH_compute_key
        - EC_GROUP_get_degree
        - EC_POINT_clear_free
        - EC_POINT_new
        - freezero
        - sshbuf_free
        - sshbuf_get_ec
        - sshbuf_new
        - sshbuf_put_bignum2
        - sshbuf_put_stringb
        - sshbuf_reset
        - sshkey_ec_validate_public
      functionUses:    2
      BranchProfiles:
        - Branch String:   'kexecdh.c:150,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:151,5'
              BranchSideFuncs:
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
            - BranchSide:      'kexecdh.c:154,30'
              BranchSideFuncs:
                - sshbuf_put_stringb
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_new
                - sshbuf_get_ec
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_get_degree
                - malloc
                - BN_new
                - ECDH_compute_key
                - __sanitizer_cov_trace_cmp4
                - BN_bin2bn
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
        - Branch String:   'kexecdh.c:154,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:155,3'
              BranchSideFuncs:
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
            - BranchSide:      'kexecdh.c:156,29'
              BranchSideFuncs:
                - EC_POINT_new
                - sshbuf_get_ec
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_get_degree
                - malloc
                - BN_new
                - ECDH_compute_key
                - __sanitizer_cov_trace_cmp4
                - BN_bin2bn
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
        - Branch String:   'kexecdh.c:156,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:157,5'
              BranchSideFuncs:
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
            - BranchSide:      'kexecdh.c:160,25'
              BranchSideFuncs:
                - sshbuf_get_ec
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_get_degree
                - malloc
                - BN_new
                - ECDH_compute_key
                - __sanitizer_cov_trace_cmp4
                - BN_bin2bn
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
        - Branch String:   'kexecdh.c:160,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:161,3'
              BranchSideFuncs:
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
            - BranchSide:      'kexecdh.c:163,15'
              BranchSideFuncs:
                - sshbuf_reset
                - sshkey_ec_validate_public
                - __sanitizer_cov_trace_const_cmp4
                - EC_GROUP_get_degree
                - malloc
                - BN_new
                - ECDH_compute_key
                - __sanitizer_cov_trace_cmp4
                - BN_bin2bn
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
        - Branch String:   'kexecdh.c:169,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:170,5'
              BranchSideFuncs:
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
            - BranchSide:      'kexecdh.c:173,30'
              BranchSideFuncs:
                - EC_GROUP_get_degree
                - malloc
                - BN_new
                - ECDH_compute_key
                - __sanitizer_cov_trace_cmp4
                - BN_bin2bn
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
        - Branch String:   'kexecdh.c:174,36'
          Branch Sides:
            - BranchSide:      'kexecdh.c:175,23'
              BranchSideFuncs:
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
            - BranchSide:      'kexecdh.c:176,5'
              BranchSideFuncs:
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
        - Branch String:   'kexecdh.c:174,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:176,5'
              BranchSideFuncs:
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
            - BranchSide:      'kexecdh.c:179,23'
              BranchSideFuncs:
                - ECDH_compute_key
                - __sanitizer_cov_trace_cmp4
                - BN_bin2bn
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
        - Branch String:   'kexecdh.c:179,67'
          Branch Sides:
            - BranchSide:      'kexecdh.c:180,16'
              BranchSideFuncs:
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
            - BranchSide:      'kexecdh.c:181,5'
              BranchSideFuncs:
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
        - Branch String:   'kexecdh.c:179,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:181,5'
              BranchSideFuncs:
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
            - BranchSide:      'kexecdh.c:187,30'
              BranchSideFuncs:
                - sshbuf_put_bignum2
                - __sanitizer_cov_trace_const_cmp4
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
        - Branch String:   'kexecdh.c:187,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:188,3'
              BranchSideFuncs:
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
            - BranchSide:      'kexecdh.c:189,20'
              BranchSideFuncs:
                - EC_POINT_clear_free
                - BN_clear_free
                - freezero
                - sshbuf_free
      Callsites:
        - Src:             'kexecdh.c:150,13'
          Dst:             sshbuf_new
        - Src:             'kexecdh.c:154,11'
          Dst:             sshbuf_put_stringb
        - Src:             'kexecdh.c:156,16'
          Dst:             EC_POINT_new
        - Src:             'kexecdh.c:160,11'
          Dst:             sshbuf_get_ec
        - Src:             'kexecdh.c:163,2'
          Dst:             sshbuf_reset
        - Src:             'kexecdh.c:169,6'
          Dst:             sshkey_ec_validate_public
        - Src:             'kexecdh.c:173,10'
          Dst:             EC_GROUP_get_degree
        - Src:             'kexecdh.c:175,23'
          Dst:             BN_new
        - Src:             'kexecdh.c:179,6'
          Dst:             ECDH_compute_key
        - Src:             'kexecdh.c:180,6'
          Dst:             BN_bin2bn
        - Src:             'kexecdh.c:187,11'
          Dst:             sshbuf_put_bignum2
        - Src:             'kexecdh.c:192,2'
          Dst:             EC_POINT_clear_free
        - Src:             'kexecdh.c:193,2'
          Dst:             BN_clear_free
        - Src:             'kexecdh.c:194,2'
          Dst:             freezero
        - Src:             'kexecdh.c:195,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_GROUP_get_degree
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.ec_group_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ECDH_compute_key
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        5
      argTypes:
        - 'char *'
        - 'size_t '
        - 'struct.ec_point_st *'
        - 'struct.ec_key_st *'
        - 'func_type *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EC_POINT_clear_free
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.ec_point_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_ecdh_enc
      functionSourceFile: '/src/openssh/kexecdh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 94
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.kex *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf **'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         17
      ICount:          127
      EdgeCount:       23
      CyclomaticComplexity: 8
      functionsReached:
        - EC_KEY_free
        - EC_KEY_generate_key
        - EC_KEY_get0_group
        - EC_KEY_get0_public_key
        - EC_KEY_new_by_curve_name
        - kex_ecdh_dec_key_group
        - sshbuf_free
        - sshbuf_get_u32
        - sshbuf_new
        - sshbuf_put_ec
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kexecdh.c:104,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:105,5'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
            - BranchSide:      'kexecdh.c:108,26'
              BranchSideFuncs:
                - EC_KEY_generate_key
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshbuf_new
                - sshbuf_put_ec
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - kex_ecdh_dec_key_group
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
                - sshbuf_free
        - Branch String:   'kexecdh.c:108,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:109,5'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
            - BranchSide:      'kexecdh.c:112,28'
              BranchSideFuncs:
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshbuf_new
                - sshbuf_put_ec
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - kex_ecdh_dec_key_group
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
                - sshbuf_free
        - Branch String:   'kexecdh.c:119,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:120,5'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
            - BranchSide:      'kexecdh.c:123,25'
              BranchSideFuncs:
                - sshbuf_put_ec
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - kex_ecdh_dec_key_group
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
                - sshbuf_free
        - Branch String:   'kexecdh.c:123,60'
          Branch Sides:
            - BranchSide:      'kexecdh.c:124,26'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
            - BranchSide:      'kexecdh.c:125,3'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
        - Branch String:   'kexecdh.c:123,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:125,3'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
            - BranchSide:      'kexecdh.c:126,34'
              BranchSideFuncs:
                - kex_ecdh_dec_key_group
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
                - sshbuf_free
        - Branch String:   'kexecdh.c:126,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:128,3'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
            - BranchSide:      'kexecdh.c:129,18'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
      Callsites:
        - Src:             'kexecdh.c:104,20'
          Dst:             EC_KEY_new_by_curve_name
        - Src:             'kexecdh.c:108,6'
          Dst:             EC_KEY_generate_key
        - Src:             'kexecdh.c:112,10'
          Dst:             EC_KEY_get0_group
        - Src:             'kexecdh.c:118,12'
          Dst:             EC_KEY_get0_public_key
        - Src:             'kexecdh.c:119,21'
          Dst:             sshbuf_new
        - Src:             'kexecdh.c:123,11'
          Dst:             sshbuf_put_ec
        - Src:             'kexecdh.c:124,11'
          Dst:             sshbuf_get_u32
        - Src:             'kexecdh.c:126,11'
          Dst:             kex_ecdh_dec_key_group
        - Src:             'kexecdh.c:132,2'
          Dst:             EC_KEY_free
        - Src:             'kexecdh.c:133,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_ecdh_keypair
      functionSourceFile: '/src/openssh/kexecdh.c'
      linkageType:     InternalLinkage
      functionLinenumber: 51
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.kex *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         15
      ICount:          110
      EdgeCount:       20
      CyclomaticComplexity: 7
      functionsReached:
        - EC_KEY_free
        - EC_KEY_generate_key
        - EC_KEY_get0_group
        - EC_KEY_get0_public_key
        - EC_KEY_new_by_curve_name
        - sshbuf_free
        - sshbuf_get_u32
        - sshbuf_new
        - sshbuf_put_ec
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kexecdh.c:58,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:59,5'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
            - BranchSide:      'kexecdh.c:62,26'
              BranchSideFuncs:
                - EC_KEY_generate_key
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshbuf_new
                - sshbuf_put_ec
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
                - sshbuf_free
        - Branch String:   'kexecdh.c:62,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:63,5'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
            - BranchSide:      'kexecdh.c:66,28'
              BranchSideFuncs:
                - EC_KEY_get0_group
                - EC_KEY_get0_public_key
                - sshbuf_new
                - sshbuf_put_ec
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
                - sshbuf_free
        - Branch String:   'kexecdh.c:69,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:70,5'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
            - BranchSide:      'kexecdh.c:73,25'
              BranchSideFuncs:
                - sshbuf_put_ec
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_get_u32
                - __sanitizer_cov_trace_const_cmp4
                - EC_KEY_free
                - sshbuf_free
        - Branch String:   'kexecdh.c:73,55'
          Branch Sides:
            - BranchSide:      'kexecdh.c:74,26'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
            - BranchSide:      'kexecdh.c:75,3'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
        - Branch String:   'kexecdh.c:73,6'
          Branch Sides:
            - BranchSide:      'kexecdh.c:75,3'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
            - BranchSide:      'kexecdh.c:80,23'
              BranchSideFuncs:
                - EC_KEY_free
                - sshbuf_free
      Callsites:
        - Src:             'kexecdh.c:58,20'
          Dst:             EC_KEY_new_by_curve_name
        - Src:             'kexecdh.c:62,6'
          Dst:             EC_KEY_generate_key
        - Src:             'kexecdh.c:66,10'
          Dst:             EC_KEY_get0_group
        - Src:             'kexecdh.c:67,15'
          Dst:             EC_KEY_get0_public_key
        - Src:             'kexecdh.c:69,13'
          Dst:             sshbuf_new
        - Src:             'kexecdh.c:73,11'
          Dst:             sshbuf_put_ec
        - Src:             'kexecdh.c:74,11'
          Dst:             sshbuf_get_u32
        - Src:             'kexecdh.c:86,2'
          Dst:             EC_KEY_free
        - Src:             'kexecdh.c:87,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_c25519_dec
      functionSourceFile: '/src/openssh/kexc25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 168
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.kex *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         10
      ICount:          77
      EdgeCount:       13
      CyclomaticComplexity: 5
      functionsReached:
        - kexc25519_shared_key_ext
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kexc25519.c:175,6'
          Branch Sides:
            - BranchSide:      'kexc25519.c:176,5'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexc25519.c:179,26'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_new
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
        - Branch String:   'kexc25519.c:184,6'
          Branch Sides:
            - BranchSide:      'kexc25519.c:185,5'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexc25519.c:188,36'
              BranchSideFuncs:
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_free
        - Branch String:   'kexc25519.c:188,6'
          Branch Sides:
            - BranchSide:      'kexc25519.c:190,3'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexc25519.c:194,20'
              BranchSideFuncs:
                - sshbuf_free
      Callsites:
        - Src:             'kexc25519.c:175,6'
          Dst:             sshbuf_len
        - Src:             'kexc25519.c:179,15'
          Dst:             sshbuf_ptr
        - Src:             'kexc25519.c:184,13'
          Dst:             sshbuf_new
        - Src:             'kexc25519.c:188,11'
          Dst:             kexc25519_shared_key_ext
        - Src:             'kexc25519.c:197,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kexc25519_shared_key_ext
      functionSourceFile: '/src/openssh/kexc25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 61
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'struct.sshbuf *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         9
      ICount:          73
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - crypto_scalarmult_curve25519
        - explicit_bzero
        - sshbuf_put
        - sshbuf_put_bignum2_bytes
        - timingsafe_bcmp
      functionUses:    5
      BranchProfiles:
        - Branch String:   'kexc25519.c:70,6'
          Branch Sides:
            - BranchSide:      'kexc25519.c:71,3'
              BranchSideFuncs: []
            - BranchSide:      'kexc25519.c:76,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_put_bignum2_bytes
                - explicit_bzero
                - sshbuf_put
        - Branch String:   'kexc25519.c:76,6'
          Branch Sides:
            - BranchSide:      'kexc25519.c:77,18'
              BranchSideFuncs:
                - sshbuf_put
                - explicit_bzero
            - BranchSide:      'kexc25519.c:79,32'
              BranchSideFuncs:
                - sshbuf_put_bignum2_bytes
                - explicit_bzero
      Callsites:
        - Src:             'kexc25519.c:66,2'
          Dst:             crypto_scalarmult_curve25519
        - Src:             'kexc25519.c:69,2'
          Dst:             explicit_bzero
        - Src:             'kexc25519.c:70,6'
          Dst:             timingsafe_bcmp
        - Src:             'kexc25519.c:77,7'
          Dst:             sshbuf_put
        - Src:             'kexc25519.c:79,7'
          Dst:             sshbuf_put_bignum2_bytes
        - Src:             'kexc25519.c:80,2'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_c25519_enc
      functionSourceFile: '/src/openssh/kexc25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 116
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.kex *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf **'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         14
      ICount:          117
      EdgeCount:       19
      CyclomaticComplexity: 7
      functionsReached:
        - explicit_bzero
        - kexc25519_keygen
        - kexc25519_shared_key_ext
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_reserve
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kexc25519.c:127,6'
          Branch Sides:
            - BranchSide:      'kexc25519.c:128,5'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexc25519.c:131,26'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_new
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - kexc25519_keygen
                - sshbuf_new
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexc25519.c:136,6'
          Branch Sides:
            - BranchSide:      'kexc25519.c:137,5'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexc25519.c:140,26'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - kexc25519_keygen
                - sshbuf_new
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexc25519.c:140,6'
          Branch Sides:
            - BranchSide:      'kexc25519.c:141,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexc25519.c:142,19'
              BranchSideFuncs:
                - kexc25519_keygen
                - sshbuf_new
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexc25519.c:144,6'
          Branch Sides:
            - BranchSide:      'kexc25519.c:145,5'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexc25519.c:148,36'
              BranchSideFuncs:
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexc25519.c:148,6'
          Branch Sides:
            - BranchSide:      'kexc25519.c:149,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexc25519.c:154,18'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
      Callsites:
        - Src:             'kexc25519.c:127,6'
          Dst:             sshbuf_len
        - Src:             'kexc25519.c:131,15'
          Dst:             sshbuf_ptr
        - Src:             'kexc25519.c:136,21'
          Dst:             sshbuf_new
        - Src:             'kexc25519.c:140,11'
          Dst:             sshbuf_reserve
        - Src:             'kexc25519.c:142,2'
          Dst:             kexc25519_keygen
        - Src:             'kexc25519.c:144,13'
          Dst:             sshbuf_new
        - Src:             'kexc25519.c:148,11'
          Dst:             kexc25519_shared_key_ext
        - Src:             'kexc25519.c:159,2'
          Dst:             explicit_bzero
        - Src:             'kexc25519.c:160,2'
          Dst:             sshbuf_free
        - Src:             'kexc25519.c:161,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kexc25519_keygen
      functionSourceFile: '/src/openssh/kexc25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 51
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          22
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - arc4random_buf
        - crypto_scalarmult_curve25519
      functionUses:    4
      BranchProfiles:  []
      Callsites:
        - Src:             'kexc25519.c:54,2'
          Dst:             arc4random_buf
        - Src:             'kexc25519.c:55,2'
          Dst:             crypto_scalarmult_curve25519
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_c25519_keypair
      functionSourceFile: '/src/openssh/kexc25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 93
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.kex *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          63
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - kexc25519_keygen
        - sshbuf_free
        - sshbuf_new
        - sshbuf_reserve
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kexc25519.c:98,6'
          Branch Sides:
            - BranchSide:      'kexc25519.c:99,3'
              BranchSideFuncs: []
            - BranchSide:      'kexc25519.c:100,26'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - kexc25519_keygen
                - sshbuf_free
        - Branch String:   'kexc25519.c:100,6'
          Branch Sides:
            - BranchSide:      'kexc25519.c:101,3'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexc25519.c:102,19'
              BranchSideFuncs:
                - kexc25519_keygen
                - sshbuf_free
      Callsites:
        - Src:             'kexc25519.c:98,13'
          Dst:             sshbuf_new
        - Src:             'kexc25519.c:100,11'
          Dst:             sshbuf_reserve
        - Src:             'kexc25519.c:102,2'
          Dst:             kexc25519_keygen
        - Src:             'kexc25519.c:109,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kexc25519_shared_key
      functionSourceFile: '/src/openssh/kexc25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 87
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'struct.sshbuf *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - kexc25519_shared_key_ext
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'kexc25519.c:88,9'
          Dst:             kexc25519_shared_key_ext
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_kem_sntrup761x25519_dec
      functionSourceFile: '/src/openssh/kexsntrup761x25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 162
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.kex *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         18
      ICount:          152
      EdgeCount:       25
      CyclomaticComplexity: 9
      functionsReached:
        - crypto_kem_sntrup761_dec
        - explicit_bzero
        - kexc25519_shared_key_ext
        - ssh_digest_buffer
        - ssh_digest_bytes
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put_string
        - sshbuf_reserve
        - sshbuf_reset
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kexsntrup761x25519.c:173,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:174,5'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:177,26'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_new
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - crypto_kem_sntrup761_dec
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_digest_bytes
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:185,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:186,5'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:189,26'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - crypto_kem_sntrup761_dec
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_digest_bytes
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:189,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:191,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:192,37'
              BranchSideFuncs:
                - crypto_kem_sntrup761_dec
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_digest_bytes
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:194,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:196,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:197,29'
              BranchSideFuncs:
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_digest_bytes
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:197,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:198,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:204,15'
              BranchSideFuncs:
                - sshbuf_reset
                - ssh_digest_bytes
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:205,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:207,3'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:211,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:211,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:212,5'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:215,20'
              BranchSideFuncs:
                - explicit_bzero
                - sshbuf_free
      Callsites:
        - Src:             'kexsntrup761x25519.c:173,6'
          Dst:             sshbuf_len
        - Src:             'kexsntrup761x25519.c:177,15'
          Dst:             sshbuf_ptr
        - Src:             'kexsntrup761x25519.c:185,13'
          Dst:             sshbuf_new
        - Src:             'kexsntrup761x25519.c:189,11'
          Dst:             sshbuf_reserve
        - Src:             'kexsntrup761x25519.c:192,12'
          Dst:             crypto_kem_sntrup761_dec
        - Src:             'kexsntrup761x25519.c:194,11'
          Dst:             kexc25519_shared_key_ext
        - Src:             'kexsntrup761x25519.c:197,11'
          Dst:             ssh_digest_buffer
        - Src:             'kexsntrup761x25519.c:204,2'
          Dst:             sshbuf_reset
        - Src:             'kexsntrup761x25519.c:206,6'
          Dst:             ssh_digest_bytes
        - Src:             'kexsntrup761x25519.c:205,11'
          Dst:             sshbuf_put_string
        - Src:             'kexsntrup761x25519.c:218,2'
          Dst:             explicit_bzero
        - Src:             'kexsntrup761x25519.c:219,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_kem_sntrup761x25519_enc
      functionSourceFile: '/src/openssh/kexsntrup761x25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 76
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.kex *'
        - 'struct.sshbuf *'
        - 'struct.sshbuf **'
        - 'struct.sshbuf **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         20
      ICount:          182
      EdgeCount:       28
      CyclomaticComplexity: 10
      functionsReached:
        - crypto_kem_sntrup761_enc
        - explicit_bzero
        - kexc25519_keygen
        - kexc25519_shared_key_ext
        - ssh_digest_buffer
        - ssh_digest_bytes
        - sshbuf_free
        - sshbuf_len
        - sshbuf_new
        - sshbuf_ptr
        - sshbuf_put_string
        - sshbuf_reserve
        - sshbuf_reset
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kexsntrup761x25519.c:91,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:92,5'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:95,26'
              BranchSideFuncs:
                - sshbuf_ptr
                - sshbuf_new
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - crypto_kem_sntrup761_enc
                - kexc25519_keygen
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_digest_bytes
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:105,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:106,5'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:109,26'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_new
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - crypto_kem_sntrup761_enc
                - kexc25519_keygen
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_digest_bytes
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:109,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:111,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:113,21'
              BranchSideFuncs:
                - sshbuf_new
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - crypto_kem_sntrup761_enc
                - kexc25519_keygen
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_digest_bytes
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:113,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:114,5'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:117,7'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - crypto_kem_sntrup761_enc
                - kexc25519_keygen
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_digest_bytes
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:118,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:119,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:121,27'
              BranchSideFuncs:
                - crypto_kem_sntrup761_enc
                - kexc25519_keygen
                - kexc25519_shared_key_ext
                - __sanitizer_cov_trace_const_cmp4
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_digest_bytes
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:127,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:128,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:129,29'
              BranchSideFuncs:
                - ssh_digest_buffer
                - __sanitizer_cov_trace_const_cmp4
                - sshbuf_reset
                - ssh_digest_bytes
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:129,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:130,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:140,15'
              BranchSideFuncs:
                - sshbuf_reset
                - ssh_digest_bytes
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:141,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:143,3'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:147,18'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - sshbuf_free
                - sshbuf_free
      Callsites:
        - Src:             'kexsntrup761x25519.c:91,6'
          Dst:             sshbuf_len
        - Src:             'kexsntrup761x25519.c:95,15'
          Dst:             sshbuf_ptr
        - Src:             'kexsntrup761x25519.c:105,13'
          Dst:             sshbuf_new
        - Src:             'kexsntrup761x25519.c:109,11'
          Dst:             sshbuf_reserve
        - Src:             'kexsntrup761x25519.c:113,21'
          Dst:             sshbuf_new
        - Src:             'kexsntrup761x25519.c:118,11'
          Dst:             sshbuf_reserve
        - Src:             'kexsntrup761x25519.c:121,2'
          Dst:             crypto_kem_sntrup761_enc
        - Src:             'kexsntrup761x25519.c:124,2'
          Dst:             kexc25519_keygen
        - Src:             'kexsntrup761x25519.c:127,11'
          Dst:             kexc25519_shared_key_ext
        - Src:             'kexsntrup761x25519.c:129,11'
          Dst:             ssh_digest_buffer
        - Src:             'kexsntrup761x25519.c:140,2'
          Dst:             sshbuf_reset
        - Src:             'kexsntrup761x25519.c:142,6'
          Dst:             ssh_digest_bytes
        - Src:             'kexsntrup761x25519.c:141,11'
          Dst:             sshbuf_put_string
        - Src:             'kexsntrup761x25519.c:152,2'
          Dst:             explicit_bzero
        - Src:             'kexsntrup761x25519.c:153,2'
          Dst:             explicit_bzero
        - Src:             'kexsntrup761x25519.c:154,2'
          Dst:             sshbuf_free
        - Src:             'kexsntrup761x25519.c:155,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    kex_kem_sntrup761x25519_keypair
      functionSourceFile: '/src/openssh/kexsntrup761x25519.c'
      linkageType:     InternalLinkage
      functionLinenumber: 44
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.kex *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          75
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - crypto_kem_sntrup761_keypair
        - kexc25519_keygen
        - sshbuf_free
        - sshbuf_new
        - sshbuf_reserve
      functionUses:    0
      BranchProfiles:
        - Branch String:   'kexsntrup761x25519.c:50,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:51,3'
              BranchSideFuncs: []
            - BranchSide:      'kexsntrup761x25519.c:52,7'
              BranchSideFuncs:
                - sshbuf_reserve
                - __sanitizer_cov_trace_const_cmp4
                - crypto_kem_sntrup761_keypair
                - kexc25519_keygen
                - sshbuf_free
        - Branch String:   'kexsntrup761x25519.c:53,6'
          Branch Sides:
            - BranchSide:      'kexsntrup761x25519.c:54,3'
              BranchSideFuncs:
                - sshbuf_free
            - BranchSide:      'kexsntrup761x25519.c:55,31'
              BranchSideFuncs:
                - crypto_kem_sntrup761_keypair
                - kexc25519_keygen
                - sshbuf_free
      Callsites:
        - Src:             'kexsntrup761x25519.c:50,13'
          Dst:             sshbuf_new
        - Src:             'kexsntrup761x25519.c:53,11'
          Dst:             sshbuf_reserve
        - Src:             'kexsntrup761x25519.c:55,2'
          Dst:             crypto_kem_sntrup761_keypair
        - Src:             'kexsntrup761x25519.c:61,2'
          Dst:             kexc25519_keygen
        - Src:             'kexsntrup761x25519.c:68,2'
          Dst:             sshbuf_free
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Weightw_mask
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 485
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         7
      ICount:          50
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - int16_nonzero_mask
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:489,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:489,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
            - BranchSide:      'sntrup761.c:490,29'
              BranchSideFuncs:
                - int16_nonzero_mask
      Callsites:
        - Src:             'sntrup761.c:490,10'
          Dst:             int16_nonzero_mask
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    int16_nonzero_mask
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 401
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          24
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    R3_mult
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 502
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         27
      ICount:          222
      EdgeCount:       33
      CyclomaticComplexity: 8
      functionsReached:
        - F3_freeze
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:507,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:508,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
            - BranchSide:      'sntrup761.c:512,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
        - Branch String:   'sntrup761.c:509,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:509,47'
              BranchSideFuncs:
                - F3_freeze
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
            - BranchSide:      'sntrup761.c:510,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - __sanitizer_cov_trace_cmp4
                - F3_freeze
        - Branch String:   'sntrup761.c:512,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:513,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
                - F3_freeze
            - BranchSide:      'sntrup761.c:518,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
        - Branch String:   'sntrup761.c:514,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:514,50'
              BranchSideFuncs:
                - F3_freeze
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
            - BranchSide:      'sntrup761.c:515,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
        - Branch String:   'sntrup761.c:518,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:519,28'
              BranchSideFuncs:
                - F3_freeze
                - F3_freeze
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:523,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sntrup761.c:523,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:523,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:524,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sntrup761.c:509,37'
          Dst:             F3_freeze
        - Src:             'sntrup761.c:514,40'
          Dst:             F3_freeze
        - Src:             'sntrup761.c:519,15'
          Dst:             F3_freeze
        - Src:             'sntrup761.c:520,17'
          Dst:             F3_freeze
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    F3_freeze
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 430
      functionDepth:   0
      returnType:      'char '
      argCount:        1
      argTypes:
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          21
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - int32_mod_uint14
      functionUses:    8
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:431,10'
          Dst:             int32_mod_uint14
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    int32_mod_uint14
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 195
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int '
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          25
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - int32_divmod_uint14
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:198,3'
          Dst:             int32_divmod_uint14
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    int32_divmod_uint14
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 180
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'int *'
        - 'N/A'
        - 'int '
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          74
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - uint32_divmod_uint14
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:185,3'
          Dst:             uint32_divmod_uint14
        - Src:             'sntrup761.c:186,3'
          Dst:             uint32_divmod_uint14
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    uint32_divmod_uint14
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 126
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'int *'
        - 'N/A'
        - 'int '
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          99
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    R3_fromRq
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 495
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         7
      ICount:          47
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - F3_freeze
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:497,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:497,44'
              BranchSideFuncs:
                - F3_freeze
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:498,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sntrup761.c:497,34'
          Dst:             F3_freeze
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Rq_mult3
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 604
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'N/A'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         7
      ICount:          49
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - Fq_freeze
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:607,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:607,44'
              BranchSideFuncs:
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:608,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sntrup761.c:607,32'
          Dst:             Fq_freeze
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Fq_freeze
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 443
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - int32_mod_uint14
      functionUses:    9
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:444,10'
          Dst:             int32_mod_uint14
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Decrypt
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 763
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'char *'
        - 'N/A'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          113
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - R3_fromRq
        - R3_mult
        - Rq_mult3
        - Rq_mult_small
        - Weightw_mask
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:777,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:777,37'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:778,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sntrup761.c:778,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:778,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:779,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sntrup761.c:771,3'
          Dst:             Rq_mult_small
        - Src:             'sntrup761.c:772,3'
          Dst:             Rq_mult3
        - Src:             'sntrup761.c:773,3'
          Dst:             R3_fromRq
        - Src:             'sntrup761.c:774,3'
          Dst:             R3_mult
        - Src:             'sntrup761.c:776,10'
          Dst:             Weightw_mask
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Rq_mult_small
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 576
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'N/A'
        - 'N/A'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         27
      ICount:          218
      EdgeCount:       33
      CyclomaticComplexity: 8
      functionsReached:
        - Fq_freeze
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sntrup761.c:581,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:582,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
            - BranchSide:      'sntrup761.c:586,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
        - Branch String:   'sntrup761.c:583,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:583,47'
              BranchSideFuncs:
                - Fq_freeze
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
            - BranchSide:      'sntrup761.c:584,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - __sanitizer_cov_trace_cmp4
                - Fq_freeze
        - Branch String:   'sntrup761.c:586,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:587,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
                - Fq_freeze
            - BranchSide:      'sntrup761.c:592,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
        - Branch String:   'sntrup761.c:588,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:588,50'
              BranchSideFuncs:
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
            - BranchSide:      'sntrup761.c:589,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
        - Branch String:   'sntrup761.c:592,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:593,28'
              BranchSideFuncs:
                - Fq_freeze
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:597,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sntrup761.c:597,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:597,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:598,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sntrup761.c:583,37'
          Dst:             Fq_freeze
        - Src:             'sntrup761.c:588,40'
          Dst:             Fq_freeze
        - Src:             'sntrup761.c:593,15'
          Dst:             Fq_freeze
        - Src:             'sntrup761.c:594,17'
          Dst:             Fq_freeze
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Rounded_decode
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1008
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'N/A'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          75
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - Decode
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:1012,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:1012,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Decode
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:1013,10'
              BranchSideFuncs:
                - Decode
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sntrup761.c:1014,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:1014,34'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:1015,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sntrup761.c:1013,3'
          Dst:             Decode
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Decode
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 290
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'N/A'
        - 'char *'
        - 'N/A'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         35
      ICount:          369
      EdgeCount:       45
      CyclomaticComplexity: 12
      functionsReached:
        - Decode
        - uint32_divmod_uint14
        - uint32_mod_uint14
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sntrup761.c:291,7'
          Branch Sides:
            - BranchSide:      'sntrup761.c:292,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp8
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - uint32_mod_uint14
            - BranchSide:      'sntrup761.c:299,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sntrup761.c:292,9'
          Branch Sides:
            - BranchSide:      'sntrup761.c:293,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:294,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp8
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - uint32_mod_uint14
        - Branch String:   'sntrup761.c:294,14'
          Branch Sides:
            - BranchSide:      'sntrup761.c:295,32'
              BranchSideFuncs:
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp8
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:297,32'
              BranchSideFuncs:
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp8
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sntrup761.c:299,7'
          Branch Sides:
            - BranchSide:      'sntrup761.c:299,7'
              BranchSideFuncs:
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:300,16'
              BranchSideFuncs:
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sntrup761.c:305,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:306,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
            - BranchSide:      'sntrup761.c:323,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
        - Branch String:   'sntrup761.c:307,11'
          Branch Sides:
            - BranchSide:      'sntrup761.c:308,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:312,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sntrup761.c:312,18'
          Branch Sides:
            - BranchSide:      'sntrup761.c:313,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:318,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sntrup761.c:323,9'
          Branch Sides:
            - BranchSide:      'sntrup761.c:324,17'
              BranchSideFuncs:
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
            - BranchSide:      'sntrup761.c:325,15'
              BranchSideFuncs:
                - Decode
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
                - uint32_divmod_uint14
                - uint32_mod_uint14
        - Branch String:   'sntrup761.c:326,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:327,26'
              BranchSideFuncs:
                - uint32_divmod_uint14
                - uint32_mod_uint14
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
            - BranchSide:      'sntrup761.c:336,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.stackrestore
        - Branch String:   'sntrup761.c:336,9'
          Branch Sides:
            - BranchSide:      'sntrup761.c:337,19'
              BranchSideFuncs:
                - llvm.stackrestore
            - BranchSide:      'sntrup761.c:338,3'
              BranchSideFuncs:
                - llvm.stackrestore
      Callsites:
        - Src:             'sntrup761.c:295,14'
          Dst:             uint32_mod_uint14
        - Src:             'sntrup761.c:297,14'
          Dst:             uint32_mod_uint14
        - Src:             'sntrup761.c:325,5'
          Dst:             Decode
        - Src:             'sntrup761.c:331,7'
          Dst:             uint32_divmod_uint14
        - Src:             'sntrup761.c:332,12'
          Dst:             uint32_mod_uint14
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    uint32_mod_uint14
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 170
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int '
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          25
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - uint32_divmod_uint14
      functionUses:    3
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:173,3'
          Dst:             uint32_divmod_uint14
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Small_decode
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 954
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         5
      ICount:          111
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sntrup761.c:958,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:959,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:965,9'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Ciphertexts_diff_mask
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1226
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         4
      ICount:          51
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:1230,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:1230,41'
              BranchSideFuncs: []
            - BranchSide:      'sntrup761.c:1231,15'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ZDecrypt
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1078
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          43
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - Decrypt
        - Rounded_decode
        - Small_decode
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:1082,3'
          Dst:             Small_decode
        - Src:             'sntrup761.c:1083,3'
          Dst:             Small_decode
        - Src:             'sntrup761.c:1084,3'
          Dst:             Rounded_decode
        - Src:             'sntrup761.c:1085,3'
          Dst:             Decrypt
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Round
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 663
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'N/A'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         7
      ICount:          56
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - F3_freeze
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:665,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:665,34'
              BranchSideFuncs:
                - F3_freeze
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:666,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sntrup761.c:665,39'
          Dst:             F3_freeze
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Rounded_encode
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 998
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          76
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - Encode
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:1002,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:1002,34'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Encode
            - BranchSide:      'sntrup761.c:1003,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Encode
        - Branch String:   'sntrup761.c:1003,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:1003,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Encode
            - BranchSide:      'sntrup761.c:1004,10'
              BranchSideFuncs:
                - Encode
      Callsites:
        - Src:             'sntrup761.c:1004,3'
          Dst:             Encode
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Encode
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 355
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'char *'
        - 'N/A'
        - 'N/A'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         22
      ICount:          224
      EdgeCount:       28
      CyclomaticComplexity: 8
      functionsReached:
        - Encode
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sntrup761.c:356,7'
          Branch Sides:
            - BranchSide:      'sntrup761.c:357,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Encode
                - llvm.stackrestore
            - BranchSide:      'sntrup761.c:365,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Encode
                - llvm.stackrestore
        - Branch String:   'sntrup761.c:359,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:360,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Encode
                - llvm.stackrestore
            - BranchSide:      'sntrup761.c:364,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Encode
                - llvm.stackrestore
        - Branch String:   'sntrup761.c:365,7'
          Branch Sides:
            - BranchSide:      'sntrup761.c:365,7'
              BranchSideFuncs:
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Encode
                - llvm.stackrestore
            - BranchSide:      'sntrup761.c:366,16'
              BranchSideFuncs:
                - llvm.stacksave
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Encode
                - llvm.stackrestore
        - Branch String:   'sntrup761.c:369,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:370,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Encode
                - llvm.stackrestore
            - BranchSide:      'sntrup761.c:381,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - Encode
                - llvm.stackrestore
        - Branch String:   'sntrup761.c:373,7'
          Branch Sides:
            - BranchSide:      'sntrup761.c:374,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Encode
                - llvm.stackrestore
            - BranchSide:      'sntrup761.c:378,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - Encode
                - llvm.stackrestore
        - Branch String:   'sntrup761.c:381,9'
          Branch Sides:
            - BranchSide:      'sntrup761.c:382,17'
              BranchSideFuncs:
                - Encode
                - llvm.stackrestore
            - BranchSide:      'sntrup761.c:385,12'
              BranchSideFuncs:
                - Encode
                - llvm.stackrestore
      Callsites:
        - Src:             'sntrup761.c:385,5'
          Dst:             Encode
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Encrypt
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 754
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'N/A'
        - 'char *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          29
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - Round
        - Rq_mult_small
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:757,3'
          Dst:             Rq_mult_small
        - Src:             'sntrup761.c:758,3'
          Dst:             Round
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Rq_decode
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 984
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'N/A'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          74
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - Decode
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:988,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:988,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Decode
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:989,10'
              BranchSideFuncs:
                - Decode
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sntrup761.c:990,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:990,39'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:991,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sntrup761.c:989,3'
          Dst:             Decode
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    HashConfirm
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1152
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          60
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - Hash_prefix
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:1158,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:1158,52'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Hash_prefix
            - BranchSide:      'sntrup761.c:1166,15'
              BranchSideFuncs:
                - Hash_prefix
      Callsites:
        - Src:             'sntrup761.c:1157,3'
          Dst:             Hash_prefix
        - Src:             'sntrup761.c:1166,3'
          Dst:             Hash_prefix
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Hash_prefix
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 687
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'char *'
        - 'int '
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          100
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - crypto_hash_sha512
      functionUses:    6
      BranchProfiles:
        - Branch String:   'sntrup761.c:693,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:693,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - crypto_hash_sha512
                - __sanitizer_cov_trace_const_cmp4
                - llvm.stackrestore
            - BranchSide:      'sntrup761.c:694,22'
              BranchSideFuncs:
                - crypto_hash_sha512
                - __sanitizer_cov_trace_const_cmp4
                - llvm.stackrestore
        - Branch String:   'sntrup761.c:695,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:695,37'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - llvm.stackrestore
            - BranchSide:      'sntrup761.c:696,1'
              BranchSideFuncs:
                - llvm.stackrestore
      Callsites:
        - Src:             'sntrup761.c:694,3'
          Dst:             crypto_hash_sha512
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ZEncrypt
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1068
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          34
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - Encrypt
        - Rounded_encode
        - Rq_decode
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:1071,3'
          Dst:             Rq_decode
        - Src:             'sntrup761.c:1072,3'
          Dst:             Encrypt
        - Src:             'sntrup761.c:1073,3'
          Dst:             Rounded_encode
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    HashSession
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1173
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'char *'
        - 'int '
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          61
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - Hash_prefix
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sntrup761.c:1179,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:1179,73'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Hash_prefix
            - BranchSide:      'sntrup761.c:1187,15'
              BranchSideFuncs:
                - Hash_prefix
      Callsites:
        - Src:             'sntrup761.c:1178,3'
          Dst:             Hash_prefix
        - Src:             'sntrup761.c:1187,3'
          Dst:             Hash_prefix
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Hide
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1205
      functionDepth:   0
      returnType:      'N/A'
      argCount:        5
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          41
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - HashConfirm
        - Small_encode
        - ZEncrypt
      functionUses:    2
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:1206,3'
          Dst:             Small_encode
        - Src:             'sntrup761.c:1207,3'
          Dst:             ZEncrypt
        - Src:             'sntrup761.c:1208,3'
          Dst:             HashConfirm
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Small_encode
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 938
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         5
      ICount:          93
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:
        - Branch String:   'sntrup761.c:942,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:943,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:949,9'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Fq_recip
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 450
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          43
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - Fq_freeze
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sntrup761.c:454,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:455,20'
              BranchSideFuncs:
                - Fq_freeze
            - BranchSide:      'sntrup761.c:458,10'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sntrup761.c:455,10'
          Dst:             Fq_freeze
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sort_int32
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 43
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         68
      ICount:          687
      EdgeCount:       83
      CyclomaticComplexity: 17
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:47,7'
          Branch Sides:
            - BranchSide:      'sntrup761.c:47,14'
              BranchSideFuncs: []
            - BranchSide:      'sntrup761.c:48,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:49,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:49,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:51,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:51,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:51,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:52,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:53,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:54,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:58,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:54,7'
          Branch Sides:
            - BranchSide:      'sntrup761.c:55,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:56,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:58,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:59,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:61,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:63,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:64,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:97,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:64,11'
          Branch Sides:
            - BranchSide:      'sntrup761.c:64,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:76,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:65,13'
          Branch Sides:
            - BranchSide:      'sntrup761.c:65,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:66,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:67,9'
          Branch Sides:
            - BranchSide:      'sntrup761.c:68,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:69,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:71,13'
          Branch Sides:
            - BranchSide:      'sntrup761.c:64,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:72,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:76,7'
          Branch Sides:
            - BranchSide:      'sntrup761.c:77,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:86,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:77,9'
          Branch Sides:
            - BranchSide:      'sntrup761.c:78,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:83,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:79,11'
          Branch Sides:
            - BranchSide:      'sntrup761.c:80,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:81,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:87,7'
          Branch Sides:
            - BranchSide:      'sntrup761.c:88,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:96,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:89,9'
          Branch Sides:
            - BranchSide:      'sntrup761.c:90,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:91,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_sort_uint32
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 106
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          72
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - crypto_sort_int32
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:109,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:109,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - crypto_sort_int32
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:110,21'
              BranchSideFuncs:
                - crypto_sort_int32
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'sntrup761.c:111,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:111,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'sntrup761.c:112,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sntrup761.c:110,3'
          Dst:             crypto_sort_int32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Short_fromlist
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 671
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         15
      ICount:          102
      EdgeCount:       18
      CyclomaticComplexity: 5
      functionsReached:
        - crypto_sort_uint32
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:675,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:675,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sort_uint32
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:676,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sort_uint32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sntrup761.c:676,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:676,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - crypto_sort_uint32
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:677,22'
              BranchSideFuncs:
                - crypto_sort_uint32
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'sntrup761.c:678,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:678,37'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:679,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sntrup761.c:677,3'
          Dst:             crypto_sort_uint32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    int16_negative_mask
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 413
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          19
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    urandom32
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 701
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         3
      ICount:          51
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - arc4random_buf
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sntrup761.c:702,17'
          Branch Sides:
            - BranchSide:      'sntrup761.c:702,17'
              BranchSideFuncs:
                - arc4random_buf
            - BranchSide:      'sntrup761.c:705,3'
              BranchSideFuncs:
                - arc4random_buf
      Callsites:
        - Src:             'sntrup761.c:705,3'
          Dst:             arc4random_buf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Rq_recip3
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 613
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'N/A'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         47
      ICount:          410
      EdgeCount:       58
      CyclomaticComplexity: 13
      functionsReached:
        - Fq_freeze
        - Fq_recip
        - int16_negative_mask
        - int16_nonzero_mask
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:620,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:620,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
            - BranchSide:      'sntrup761.c:621,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
        - Branch String:   'sntrup761.c:621,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:621,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
            - BranchSide:      'sntrup761.c:622,10'
              BranchSideFuncs:
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
        - Branch String:   'sntrup761.c:623,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:623,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
            - BranchSide:      'sntrup761.c:624,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
        - Branch String:   'sntrup761.c:625,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:625,36'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
            - BranchSide:      'sntrup761.c:626,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
        - Branch String:   'sntrup761.c:630,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:631,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - Fq_freeze
                - Fq_freeze
            - BranchSide:      'sntrup761.c:652,20'
              BranchSideFuncs:
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
        - Branch String:   'sntrup761.c:631,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:631,36'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - Fq_freeze
                - Fq_freeze
            - BranchSide:      'sntrup761.c:632,5'
              BranchSideFuncs:
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
        - Branch String:   'sntrup761.c:638,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:639,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - Fq_freeze
                - Fq_freeze
            - BranchSide:      'sntrup761.c:643,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
        - Branch String:   'sntrup761.c:645,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:645,46'
              BranchSideFuncs:
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
            - BranchSide:      'sntrup761.c:646,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
        - Branch String:   'sntrup761.c:646,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:646,46'
              BranchSideFuncs:
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
            - BranchSide:      'sntrup761.c:648,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
        - Branch String:   'sntrup761.c:648,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:648,36'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
            - BranchSide:      'sntrup761.c:649,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Fq_recip
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Fq_freeze
                - Fq_freeze
        - Branch String:   'sntrup761.c:653,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:653,44'
              BranchSideFuncs:
                - Fq_freeze
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
            - BranchSide:      'sntrup761.c:655,29'
              BranchSideFuncs:
                - int16_nonzero_mask
      Callsites:
        - Src:             'sntrup761.c:622,10'
          Dst:             Fq_recip
        - Src:             'sntrup761.c:634,12'
          Dst:             int16_negative_mask
        - Src:             'sntrup761.c:634,42'
          Dst:             int16_nonzero_mask
        - Src:             'sntrup761.c:645,36'
          Dst:             Fq_freeze
        - Src:             'sntrup761.c:646,36'
          Dst:             Fq_freeze
        - Src:             'sntrup761.c:652,11'
          Dst:             Fq_recip
        - Src:             'sntrup761.c:653,34'
          Dst:             Fq_freeze
        - Src:             'sntrup761.c:655,10'
          Dst:             int16_nonzero_mask
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Short_random
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 714
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         7
      ICount:          43
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - Short_fromlist
        - urandom32
      functionUses:    2
      BranchProfiles:
        - Branch String:   'sntrup761.c:718,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:718,32'
              BranchSideFuncs:
                - urandom32
                - __sanitizer_cov_trace_const_cmp4
                - Short_fromlist
            - BranchSide:      'sntrup761.c:719,18'
              BranchSideFuncs:
                - Short_fromlist
      Callsites:
        - Src:             'sntrup761.c:718,32'
          Dst:             urandom32
        - Src:             'sntrup761.c:719,3'
          Dst:             Short_fromlist
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    R3_recip
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 528
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         47
      ICount:          403
      EdgeCount:       58
      CyclomaticComplexity: 13
      functionsReached:
        - F3_freeze
        - int16_negative_mask
        - int16_nonzero_mask
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:533,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:533,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
            - BranchSide:      'sntrup761.c:534,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
        - Branch String:   'sntrup761.c:534,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:534,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
            - BranchSide:      'sntrup761.c:535,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
        - Branch String:   'sntrup761.c:536,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:536,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
            - BranchSide:      'sntrup761.c:537,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
        - Branch String:   'sntrup761.c:538,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:538,36'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
            - BranchSide:      'sntrup761.c:539,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
        - Branch String:   'sntrup761.c:543,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:544,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - F3_freeze
                - F3_freeze
            - BranchSide:      'sntrup761.c:564,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
        - Branch String:   'sntrup761.c:544,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:544,36'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - F3_freeze
                - F3_freeze
            - BranchSide:      'sntrup761.c:545,5'
              BranchSideFuncs:
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
        - Branch String:   'sntrup761.c:552,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:553,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - F3_freeze
                - F3_freeze
            - BranchSide:      'sntrup761.c:557,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
        - Branch String:   'sntrup761.c:557,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:557,48'
              BranchSideFuncs:
                - F3_freeze
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
            - BranchSide:      'sntrup761.c:558,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
        - Branch String:   'sntrup761.c:558,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:558,48'
              BranchSideFuncs:
                - F3_freeze
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
            - BranchSide:      'sntrup761.c:560,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
        - Branch String:   'sntrup761.c:560,5'
          Branch Sides:
            - BranchSide:      'sntrup761.c:560,36'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
            - BranchSide:      'sntrup761.c:561,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - int16_negative_mask
                - int16_nonzero_mask
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - F3_freeze
                - F3_freeze
        - Branch String:   'sntrup761.c:565,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:565,34'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - int16_nonzero_mask
            - BranchSide:      'sntrup761.c:567,29'
              BranchSideFuncs:
                - int16_nonzero_mask
      Callsites:
        - Src:             'sntrup761.c:548,12'
          Dst:             int16_negative_mask
        - Src:             'sntrup761.c:548,42'
          Dst:             int16_nonzero_mask
        - Src:             'sntrup761.c:557,36'
          Dst:             F3_freeze
        - Src:             'sntrup761.c:558,36'
          Dst:             F3_freeze
        - Src:             'sntrup761.c:567,10'
          Dst:             int16_nonzero_mask
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Small_random
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 725
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         7
      ICount:          44
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - urandom32
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:728,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:728,37'
              BranchSideFuncs:
                - urandom32
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'sntrup761.c:729,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'sntrup761.c:728,37'
          Dst:             urandom32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Rq_encode
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 974
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          74
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - Encode
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:978,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:978,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Encode
            - BranchSide:      'sntrup761.c:979,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Encode
        - Branch String:   'sntrup761.c:979,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:979,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Encode
            - BranchSide:      'sntrup761.c:980,10'
              BranchSideFuncs:
                - Encode
      Callsites:
        - Src:             'sntrup761.c:980,3'
          Dst:             Encode
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    KeyGen
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 739
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'N/A'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          49
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - R3_recip
        - Rq_mult_small
        - Rq_recip3
        - Short_random
        - Small_random
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:745,9'
          Branch Sides:
            - BranchSide:      'sntrup761.c:743,3'
              BranchSideFuncs:
                - Short_random
                - Rq_recip3
                - Rq_mult_small
            - BranchSide:      'sntrup761.c:745,32'
              BranchSideFuncs:
                - Short_random
                - Rq_recip3
                - Rq_mult_small
      Callsites:
        - Src:             'sntrup761.c:744,5'
          Dst:             Small_random
        - Src:             'sntrup761.c:745,9'
          Dst:             R3_recip
        - Src:             'sntrup761.c:747,3'
          Dst:             Short_random
        - Src:             'sntrup761.c:748,3'
          Dst:             Rq_recip3
        - Src:             'sntrup761.c:749,3'
          Dst:             Rq_mult_small
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ZKeyGen
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1056
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          39
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - KeyGen
        - Rq_encode
        - Small_encode
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:1060,3'
          Dst:             KeyGen
        - Src:             'sntrup761.c:1061,3'
          Dst:             Rq_encode
        - Src:             'sntrup761.c:1062,3'
          Dst:             Small_encode
        - Src:             'sntrup761.c:1063,3'
          Dst:             Small_encode
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Decap
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1236
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          104
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - Ciphertexts_diff_mask
        - HashSession
        - Hide
        - ZDecrypt
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:1249,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:1249,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - HashSession
            - BranchSide:      'sntrup761.c:1250,15'
              BranchSideFuncs:
                - HashSession
      Callsites:
        - Src:             'sntrup761.c:1246,3'
          Dst:             ZDecrypt
        - Src:             'sntrup761.c:1247,3'
          Dst:             Hide
        - Src:             'sntrup761.c:1248,10'
          Dst:             Ciphertexts_diff_mask
        - Src:             'sntrup761.c:1250,3'
          Dst:             HashSession
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_kem_sntrup761_dec
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1269
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - Decap
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:1270,3'
          Dst:             Decap
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Encap
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1213
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          41
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - HashSession
        - Hash_prefix
        - Hide
        - Short_random
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:1218,3'
          Dst:             Hash_prefix
        - Src:             'sntrup761.c:1219,3'
          Dst:             Short_random
        - Src:             'sntrup761.c:1220,3'
          Dst:             Hide
        - Src:             'sntrup761.c:1221,3'
          Dst:             HashSession
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_kem_sntrup761_enc
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1263
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - Encap
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:1264,3'
          Dst:             Encap
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    KEM_KeyGen
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1194
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         7
      ICount:          59
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - Hash_prefix
        - ZKeyGen
        - arc4random_buf
      functionUses:    1
      BranchProfiles:
        - Branch String:   'sntrup761.c:1198,3'
          Branch Sides:
            - BranchSide:      'sntrup761.c:1198,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - arc4random_buf
                - Hash_prefix
            - BranchSide:      'sntrup761.c:1199,3'
              BranchSideFuncs:
                - arc4random_buf
                - Hash_prefix
      Callsites:
        - Src:             'sntrup761.c:1197,3'
          Dst:             ZKeyGen
        - Src:             'sntrup761.c:1199,3'
          Dst:             arc4random_buf
        - Src:             'sntrup761.c:1200,3'
          Dst:             Hash_prefix
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_kem_sntrup761_keypair
      functionSourceFile: '/src/openssh/sntrup761.c'
      linkageType:     InternalLinkage
      functionLinenumber: 1257
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - KEM_KeyGen
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'sntrup761.c:1258,3'
          Dst:             KEM_KeyGen
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    squeeze
      functionSourceFile: '/src/openssh/smult_curve25519_ref.c'
      linkageType:     InternalLinkage
      functionLinenumber: 35
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         9
      ICount:          104
      EdgeCount:       10
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'smult_curve25519_ref.c:39,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:39,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:40,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'smult_curve25519_ref.c:42,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:42,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:43,8'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mult121665
      functionSourceFile: '/src/openssh/smult_curve25519_ref.c'
      linkageType:     InternalLinkage
      functionLinenumber: 78
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         9
      ICount:          113
      EdgeCount:       10
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'smult_curve25519_ref.c:83,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:83,42'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:84,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'smult_curve25519_ref.c:86,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:86,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:87,8'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    square
      functionSourceFile: '/src/openssh/smult_curve25519_ref.c'
      linkageType:     InternalLinkage
      functionLinenumber: 91
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         18
      ICount:          171
      EdgeCount:       22
      CyclomaticComplexity: 6
      functionsReached:
        - squeeze
      functionUses:    42
      BranchProfiles:
        - Branch String:   'smult_curve25519_ref.c:96,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:97,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - squeeze
            - BranchSide:      'smult_curve25519_ref.c:107,11'
              BranchSideFuncs:
                - squeeze
        - Branch String:   'smult_curve25519_ref.c:98,5'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:98,36'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - squeeze
            - BranchSide:      'smult_curve25519_ref.c:99,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - squeeze
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'smult_curve25519_ref.c:99,5'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:99,50'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - squeeze
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'smult_curve25519_ref.c:100,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - squeeze
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'smult_curve25519_ref.c:101,9'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:102,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - squeeze
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:105,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - squeeze
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'smult_curve25519_ref.c:107,3'
          Dst:             squeeze
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sub
      functionSourceFile: '/src/openssh/smult_curve25519_ref.c'
      linkageType:     InternalLinkage
      functionLinenumber: 21
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'int *'
        - 'int *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         5
      ICount:          74
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:
        - Branch String:   'smult_curve25519_ref.c:25,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:26,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:30,8'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    add
      functionSourceFile: '/src/openssh/smult_curve25519_ref.c'
      linkageType:     InternalLinkage
      functionLinenumber: 12
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'int *'
        - 'int *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         5
      ICount:          73
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:
        - Branch String:   'smult_curve25519_ref.c:16,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:16,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:17,8'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    select
      functionSourceFile: '/src/openssh/smult_curve25519_ref.c'
      linkageType:     InternalLinkage
      functionLinenumber: 111
      functionDepth:   0
      returnType:      'N/A'
      argCount:        5
      argTypes:
        - 'int *'
        - 'int *'
        - 'int *'
        - 'int *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         5
      ICount:          83
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'smult_curve25519_ref.c:117,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:118,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:122,1'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    freeze
      functionSourceFile: '/src/openssh/smult_curve25519_ref.c'
      linkageType:     InternalLinkage
      functionLinenumber: 51
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         11
      ICount:          89
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - add
      functionUses:    1
      BranchProfiles:
        - Branch String:   'smult_curve25519_ref.c:56,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:56,37'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - add
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:57,7'
              BranchSideFuncs:
                - add
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'smult_curve25519_ref.c:59,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:59,34'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:60,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'smult_curve25519_ref.c:57,3'
          Dst:             add
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mult
      functionSourceFile: '/src/openssh/smult_curve25519_ref.c'
      linkageType:     InternalLinkage
      functionLinenumber: 63
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'int *'
        - 'int *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         15
      ICount:          117
      EdgeCount:       18
      CyclomaticComplexity: 5
      functionsReached:
        - squeeze
      functionUses:    17
      BranchProfiles:
        - Branch String:   'smult_curve25519_ref.c:68,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:69,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - squeeze
            - BranchSide:      'smult_curve25519_ref.c:74,11'
              BranchSideFuncs:
                - squeeze
        - Branch String:   'smult_curve25519_ref.c:70,5'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:70,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - squeeze
            - BranchSide:      'smult_curve25519_ref.c:71,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - squeeze
                - __sanitizer_cov_trace_cmp4
        - Branch String:   'smult_curve25519_ref.c:71,5'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:71,42'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - squeeze
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'smult_curve25519_ref.c:72,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - squeeze
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'smult_curve25519_ref.c:74,3'
          Dst:             squeeze
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    recip
      functionSourceFile: '/src/openssh/smult_curve25519_ref.c'
      linkageType:     InternalLinkage
      functionLinenumber: 181
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         27
      ICount:          284
      EdgeCount:       33
      CyclomaticComplexity: 8
      functionsReached:
        - mult
        - square
      functionUses:    1
      BranchProfiles:
        - Branch String:   'smult_curve25519_ref.c:211,21'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:211,56'
              BranchSideFuncs:
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - square
                - square
                - square
                - mult
                - square
                - square
                - square
                - square
                - square
                - square
                - square
                - square
                - square
                - square
            - BranchSide:      'smult_curve25519_ref.c:212,25'
              BranchSideFuncs:
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - square
                - square
                - square
                - mult
                - square
                - square
                - square
                - square
                - square
                - square
                - square
                - square
                - square
                - square
        - Branch String:   'smult_curve25519_ref.c:216,21'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:216,56'
              BranchSideFuncs:
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - square
                - square
                - square
                - mult
                - square
                - square
                - square
                - square
                - square
                - square
                - square
                - square
            - BranchSide:      'smult_curve25519_ref.c:217,25'
              BranchSideFuncs:
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - square
                - square
                - square
                - mult
                - square
                - square
                - square
                - square
                - square
                - square
                - square
                - square
        - Branch String:   'smult_curve25519_ref.c:221,21'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:221,56'
              BranchSideFuncs:
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - square
                - square
                - square
                - mult
                - square
                - square
                - square
                - square
                - square
                - square
            - BranchSide:      'smult_curve25519_ref.c:222,25'
              BranchSideFuncs:
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - square
                - square
                - square
                - mult
                - square
                - square
                - square
                - square
                - square
                - square
        - Branch String:   'smult_curve25519_ref.c:226,22'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:226,57'
              BranchSideFuncs:
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - square
                - square
                - square
                - mult
                - square
                - square
                - square
                - square
            - BranchSide:      'smult_curve25519_ref.c:227,26'
              BranchSideFuncs:
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - square
                - square
                - square
                - mult
                - square
                - square
                - square
                - square
        - Branch String:   'smult_curve25519_ref.c:231,23'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:231,59'
              BranchSideFuncs:
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - square
                - square
                - square
                - mult
                - square
                - square
            - BranchSide:      'smult_curve25519_ref.c:232,26'
              BranchSideFuncs:
                - mult
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - square
                - square
                - square
                - mult
                - square
                - square
        - Branch String:   'smult_curve25519_ref.c:236,22'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:236,57'
              BranchSideFuncs:
                - square
                - square
                - __sanitizer_cov_trace_const_cmp4
                - mult
                - square
                - square
                - square
                - square
                - square
                - mult
            - BranchSide:      'smult_curve25519_ref.c:237,26'
              BranchSideFuncs:
                - mult
                - square
                - square
                - square
                - square
                - square
                - mult
      Callsites:
        - Src:             'smult_curve25519_ref.c:194,11'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:195,11'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:196,11'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:197,11'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:198,12'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:199,12'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:200,24'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:202,19'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:203,19'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:204,19'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:205,19'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:206,20'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:207,20'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:209,20'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:210,20'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:211,49'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:211,64'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:212,20'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:214,20'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:215,20'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:216,49'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:216,64'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:217,20'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:219,20'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:220,20'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:221,49'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:221,64'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:222,20'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:224,20'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:225,20'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:226,50'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:226,65'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:227,21'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:229,21'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:230,21'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:231,52'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:231,67'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:232,21'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:234,21'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:235,21'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:236,50'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:236,65'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:237,21'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:239,21'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:240,21'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:241,21'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:242,21'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:243,21'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:244,20'
          Dst:             mult
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mainloop
      functionSourceFile: '/src/openssh/smult_curve25519_ref.c'
      linkageType:     InternalLinkage
      functionLinenumber: 125
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'int *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         23
      ICount:          268
      EdgeCount:       28
      CyclomaticComplexity: 7
      functionsReached:
        - add
        - mult
        - mult121665
        - select
        - square
        - sub
      functionUses:    1
      BranchProfiles:
        - Branch String:   'smult_curve25519_ref.c:145,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:145,36'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - select
                - add
                - sub
                - add
                - sub
                - square
                - square
                - mult
                - mult
                - add
                - sub
                - square
                - sub
                - mult121665
                - add
                - mult
                - mult
                - square
                - mult
                - select
            - BranchSide:      'smult_curve25519_ref.c:146,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - select
                - add
                - sub
                - add
                - sub
                - square
                - square
                - mult
                - mult
                - add
                - sub
                - square
                - sub
                - mult121665
                - add
                - mult
                - mult
                - square
                - mult
                - select
        - Branch String:   'smult_curve25519_ref.c:147,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:147,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - select
                - add
                - sub
                - add
                - sub
                - square
                - square
                - mult
                - mult
                - add
                - sub
                - square
                - sub
                - mult121665
                - add
                - mult
                - mult
                - square
                - mult
                - select
            - BranchSide:      'smult_curve25519_ref.c:149,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - select
                - add
                - sub
                - add
                - sub
                - square
                - square
                - mult
                - mult
                - add
                - sub
                - square
                - sub
                - mult121665
                - add
                - mult
                - mult
                - square
                - mult
                - select
        - Branch String:   'smult_curve25519_ref.c:150,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:150,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - select
                - add
                - sub
                - add
                - sub
                - square
                - square
                - mult
                - mult
                - add
                - sub
                - square
                - sub
                - mult121665
                - add
                - mult
                - mult
                - square
                - mult
                - select
            - BranchSide:      'smult_curve25519_ref.c:152,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - select
                - add
                - sub
                - add
                - sub
                - square
                - square
                - mult
                - mult
                - add
                - sub
                - square
                - sub
                - mult121665
                - add
                - mult
                - mult
                - square
                - mult
                - select
        - Branch String:   'smult_curve25519_ref.c:152,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:153,9'
              BranchSideFuncs:
                - select
                - add
                - sub
                - add
                - sub
                - square
                - square
                - mult
                - mult
                - add
                - sub
                - square
                - sub
                - mult121665
                - add
                - mult
                - mult
                - square
                - mult
                - select
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:177,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'smult_curve25519_ref.c:177,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:177,40'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:178,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'smult_curve25519_ref.c:155,5'
          Dst:             select
        - Src:             'smult_curve25519_ref.c:156,5'
          Dst:             add
        - Src:             'smult_curve25519_ref.c:157,5'
          Dst:             sub
        - Src:             'smult_curve25519_ref.c:158,5'
          Dst:             add
        - Src:             'smult_curve25519_ref.c:159,5'
          Dst:             sub
        - Src:             'smult_curve25519_ref.c:160,5'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:161,5'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:162,5'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:163,5'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:164,5'
          Dst:             add
        - Src:             'smult_curve25519_ref.c:165,5'
          Dst:             sub
        - Src:             'smult_curve25519_ref.c:166,5'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:167,5'
          Dst:             sub
        - Src:             'smult_curve25519_ref.c:168,5'
          Dst:             mult121665
        - Src:             'smult_curve25519_ref.c:169,5'
          Dst:             add
        - Src:             'smult_curve25519_ref.c:170,5'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:171,5'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:172,5'
          Dst:             square
        - Src:             'smult_curve25519_ref.c:173,5'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:174,5'
          Dst:             select
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    crypto_scalarmult_curve25519
      functionSourceFile: '/src/openssh/smult_curve25519_ref.c'
      linkageType:     InternalLinkage
      functionLinenumber: 250
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         15
      ICount:          136
      EdgeCount:       18
      CyclomaticComplexity: 5
      functionsReached:
        - freeze
        - mainloop
        - mult
        - recip
      functionUses:    2
      BranchProfiles:
        - Branch String:   'smult_curve25519_ref.c:254,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:254,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - mainloop
                - recip
                - mult
                - freeze
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:255,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - mainloop
                - recip
                - mult
                - freeze
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'smult_curve25519_ref.c:258,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:258,36'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - mainloop
                - recip
                - mult
                - freeze
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:259,12'
              BranchSideFuncs:
                - mainloop
                - recip
                - mult
                - freeze
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'smult_curve25519_ref.c:263,3'
          Branch Sides:
            - BranchSide:      'smult_curve25519_ref.c:263,43'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'smult_curve25519_ref.c:264,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'smult_curve25519_ref.c:259,3'
          Dst:             mainloop
        - Src:             'smult_curve25519_ref.c:260,3'
          Dst:             recip
        - Src:             'smult_curve25519_ref.c:261,3'
          Dst:             mult
        - Src:             'smult_curve25519_ref.c:262,3'
          Dst:             freeze
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    closefrom_fallback
      functionSourceFile: '/src/openssh/openbsd-compat/bsd-closefrom.c'
      linkageType:     InternalLinkage
      functionLinenumber: 66
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          56
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - close
        - sysconf
      functionUses:    1
      BranchProfiles:
        - Branch String:   'bsd-closefrom.c:79,6'
          Branch Sides:
            - BranchSide:      'bsd-closefrom.c:80,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - close
            - BranchSide:      'bsd-closefrom.c:82,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - close
        - Branch String:   'bsd-closefrom.c:82,2'
          Branch Sides:
            - BranchSide:      'bsd-closefrom.c:83,22'
              BranchSideFuncs:
                - close
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'bsd-closefrom.c:84,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'bsd-closefrom.c:75,10'
          Dst:             sysconf
        - Src:             'bsd-closefrom.c:83,10'
          Dst:             close
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sysconf
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    closefrom
      functionSourceFile: '/src/openssh/openbsd-compat/bsd-closefrom.c'
      linkageType:     InternalLinkage
      functionLinenumber: 125
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         27
      ICount:          142
      EdgeCount:       37
      CyclomaticComplexity: 12
      functionsReached:
        - close
        - closedir
        - closefrom_fallback
        - dirfd
        - getpid
        - opendir
        - readdir
        - strtol
      functionUses:    1
      BranchProfiles:
        - Branch String:   'bsd-closefrom.c:139,17'
          Branch Sides:
            - BranchSide:      'bsd-closefrom.c:139,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - closefrom_fallback
                - opendir
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - close
            - BranchSide:      'bsd-closefrom.c:150,24'
              BranchSideFuncs:
                - closefrom_fallback
        - Branch String:   'bsd-closefrom.c:139,49'
          Branch Sides:
            - BranchSide:      'bsd-closefrom.c:139,68'
              BranchSideFuncs:
                - opendir
                - closefrom_fallback
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - close
            - BranchSide:      'bsd-closefrom.c:150,24'
              BranchSideFuncs:
                - closefrom_fallback
        - Branch String:   'bsd-closefrom.c:139,9'
          Branch Sides:
            - BranchSide:      'bsd-closefrom.c:140,2'
              BranchSideFuncs:
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - close
            - BranchSide:      'bsd-closefrom.c:150,24'
              BranchSideFuncs:
                - closefrom_fallback
        - Branch String:   'bsd-closefrom.c:140,2'
          Branch Sides:
            - BranchSide:      'bsd-closefrom.c:141,18'
              BranchSideFuncs:
                - strtol
                - readdir
                - closedir
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - close
            - BranchSide:      'bsd-closefrom.c:146,18'
              BranchSideFuncs:
                - closedir
        - Branch String:   'bsd-closefrom.c:142,31'
          Branch Sides:
            - BranchSide:      'bsd-closefrom.c:140,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - close
            - BranchSide:      'bsd-closefrom.c:142,35'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - close
        - Branch String:   'bsd-closefrom.c:142,48'
          Branch Sides:
            - BranchSide:      'bsd-closefrom.c:140,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - close
            - BranchSide:      'bsd-closefrom.c:143,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - close
        - Branch String:   'bsd-closefrom.c:143,11'
          Branch Sides:
            - BranchSide:      'bsd-closefrom.c:140,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - close
            - BranchSide:      'bsd-closefrom.c:143,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - close
        - Branch String:   'bsd-closefrom.c:143,27'
          Branch Sides:
            - BranchSide:      'bsd-closefrom.c:140,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - close
            - BranchSide:      'bsd-closefrom.c:143,30'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - close
        - Branch String:   'bsd-closefrom.c:143,42'
          Branch Sides:
            - BranchSide:      'bsd-closefrom.c:140,2'
              BranchSideFuncs:
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - close
            - BranchSide:      'bsd-closefrom.c:143,45'
              BranchSideFuncs:
                - dirfd
                - __sanitizer_cov_trace_cmp8
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - close
        - Branch String:   'bsd-closefrom.c:142,10'
          Branch Sides:
            - BranchSide:      'bsd-closefrom.c:140,2'
              BranchSideFuncs:
                - close
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'bsd-closefrom.c:144,22'
              BranchSideFuncs:
                - close
                - readdir
                - closedir
                - strtol
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - dirfd
                - __sanitizer_cov_trace_cmp8
      Callsites:
        - Src:             'bsd-closefrom.c:138,66'
          Dst:             getpid
        - Src:             'bsd-closefrom.c:138,11'
          Dst:             snprintf
        - Src:             'bsd-closefrom.c:139,60'
          Dst:             opendir
        - Src:             'bsd-closefrom.c:140,17'
          Dst:             readdir
        - Src:             'bsd-closefrom.c:141,11'
          Dst:             strtol
        - Src:             'bsd-closefrom.c:143,51'
          Dst:             dirfd
        - Src:             'bsd-closefrom.c:144,10'
          Dst:             close
        - Src:             'bsd-closefrom.c:146,9'
          Dst:             closedir
        - Src:             'bsd-closefrom.c:150,5'
          Dst:             closefrom_fallback
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    opendir
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.__dirstream *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    readdir
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.dirent *'
      argCount:        1
      argTypes:
        - 'struct.__dirstream *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    dirfd
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.__dirstream *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    closedir
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'struct.__dirstream *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_libcrypto_init
      functionSourceFile: '/src/openssh/openbsd-compat/openssl-compat.c'
      linkageType:     InternalLinkage
      functionLinenumber: 73
      functionDepth:   0
      returnType:      'N/A'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         3
      ICount:          12
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - OPENSSL_init_crypto
      functionUses:    1
      BranchProfiles:
        - Branch String:   'openssl-compat.c:80,2'
          Branch Sides:
            - BranchSide:      'openssl-compat.c:80,2'
              BranchSideFuncs:
                - OPENSSL_init_crypto
            - BranchSide:      'openssl-compat.c:80,2'
              BranchSideFuncs:
                - OPENSSL_init_crypto
      Callsites:
        - Src:             'openssl-compat.c:80,2'
          Dst:             OPENSSL_init_crypto
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    OPENSSL_init_crypto
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'size_t '
        - 'struct.ossl_init_settings_st *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ssh_compatible_openssl
      functionSourceFile: '/src/openssh/openbsd-compat/openssl-compat.c'
      linkageType:     InternalLinkage
      functionLinenumber: 44
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'size_t '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          85
      EdgeCount:       14
      CyclomaticComplexity: 5
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   'openssl-compat.c:48,6'
          Branch Sides:
            - BranchSide:      'openssl-compat.c:49,3'
              BranchSideFuncs: []
            - BranchSide:      'openssl-compat.c:54,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'openssl-compat.c:54,6'
          Branch Sides:
            - BranchSide:      'openssl-compat.c:55,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'openssl-compat.c:63,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'openssl-compat.c:66,45'
          Branch Sides:
            - BranchSide:      'openssl-compat.c:66,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'openssl-compat.c:68,2'
              BranchSideFuncs: []
        - Branch String:   'openssl-compat.c:66,7'
          Branch Sides:
            - BranchSide:      'openssl-compat.c:67,3'
              BranchSideFuncs: []
            - BranchSide:      'openssl-compat.c:68,2'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_CIPHER_CTX_set_iv
      functionSourceFile: '/src/openssh/openbsd-compat/libressl-api-compat.c'
      linkageType:     InternalLinkage
      functionLinenumber: 60
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.evp_cipher_ctx_st *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         17
      ICount:          88
      EdgeCount:       23
      CyclomaticComplexity: 8
      functionsReached:
        - EVP_CIPHER_CTX_iv_length
        - EVP_CIPHER_CTX_iv_noconst
      functionUses:    1
      BranchProfiles:
        - Branch String:   'libressl-api-compat.c:61,6'
          Branch Sides:
            - BranchSide:      'libressl-api-compat.c:62,3'
              BranchSideFuncs: []
            - BranchSide:      'libressl-api-compat.c:63,31'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - EVP_CIPHER_CTX_iv_noconst
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'libressl-api-compat.c:63,6'
          Branch Sides:
            - BranchSide:      'libressl-api-compat.c:64,3'
              BranchSideFuncs: []
            - BranchSide:      'libressl-api-compat.c:65,6'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - EVP_CIPHER_CTX_iv_noconst
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'libressl-api-compat.c:65,6'
          Branch Sides:
            - BranchSide:      'libressl-api-compat.c:66,3'
              BranchSideFuncs: []
            - BranchSide:      'libressl-api-compat.c:67,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - EVP_CIPHER_CTX_iv_noconst
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'libressl-api-compat.c:67,6'
          Branch Sides:
            - BranchSide:      'libressl-api-compat.c:68,3'
              BranchSideFuncs: []
            - BranchSide:      'libressl-api-compat.c:73,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - EVP_CIPHER_CTX_iv_noconst
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'libressl-api-compat.c:73,6'
          Branch Sides:
            - BranchSide:      'libressl-api-compat.c:74,7'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_iv_noconst
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'libressl-api-compat.c:82,2'
              BranchSideFuncs: []
        - Branch String:   'libressl-api-compat.c:74,7'
          Branch Sides:
            - BranchSide:      'libressl-api-compat.c:75,4'
              BranchSideFuncs: []
            - BranchSide:      'libressl-api-compat.c:77,36'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_iv_noconst
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:
        - Src:             'libressl-api-compat.c:63,6'
          Dst:             EVP_CIPHER_CTX_iv_length
        - Src:             'libressl-api-compat.c:65,21'
          Dst:             EVP_CIPHER_CTX_iv_length
        - Src:             'libressl-api-compat.c:77,10'
          Dst:             EVP_CIPHER_CTX_iv_noconst
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_CIPHER_CTX_iv_noconst
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.evp_cipher_ctx_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_CIPHER_CTX_get_iv
      functionSourceFile: '/src/openssh/openbsd-compat/libressl-api-compat.c'
      linkageType:     InternalLinkage
      functionLinenumber: 31
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'struct.evp_cipher_ctx_st *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         17
      ICount:          88
      EdgeCount:       23
      CyclomaticComplexity: 8
      functionsReached:
        - EVP_CIPHER_CTX_iv
        - EVP_CIPHER_CTX_iv_length
      functionUses:    1
      BranchProfiles:
        - Branch String:   'libressl-api-compat.c:32,6'
          Branch Sides:
            - BranchSide:      'libressl-api-compat.c:33,3'
              BranchSideFuncs: []
            - BranchSide:      'libressl-api-compat.c:34,31'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_const_cmp4
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - EVP_CIPHER_CTX_iv
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'libressl-api-compat.c:34,6'
          Branch Sides:
            - BranchSide:      'libressl-api-compat.c:35,3'
              BranchSideFuncs: []
            - BranchSide:      'libressl-api-compat.c:36,6'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_iv_length
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - EVP_CIPHER_CTX_iv
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'libressl-api-compat.c:36,6'
          Branch Sides:
            - BranchSide:      'libressl-api-compat.c:37,3'
              BranchSideFuncs: []
            - BranchSide:      'libressl-api-compat.c:38,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - EVP_CIPHER_CTX_iv
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'libressl-api-compat.c:38,6'
          Branch Sides:
            - BranchSide:      'libressl-api-compat.c:39,3'
              BranchSideFuncs: []
            - BranchSide:      'libressl-api-compat.c:44,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - EVP_CIPHER_CTX_iv
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'libressl-api-compat.c:44,6'
          Branch Sides:
            - BranchSide:      'libressl-api-compat.c:45,7'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_iv
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'libressl-api-compat.c:53,2'
              BranchSideFuncs: []
        - Branch String:   'libressl-api-compat.c:45,7'
          Branch Sides:
            - BranchSide:      'libressl-api-compat.c:46,4'
              BranchSideFuncs: []
            - BranchSide:      'libressl-api-compat.c:48,10'
              BranchSideFuncs:
                - EVP_CIPHER_CTX_iv
                - llvm.memcpy.p0i8.p0i8.i64
      Callsites:
        - Src:             'libressl-api-compat.c:34,6'
          Dst:             EVP_CIPHER_CTX_iv_length
        - Src:             'libressl-api-compat.c:36,21'
          Dst:             EVP_CIPHER_CTX_iv_length
        - Src:             'libressl-api-compat.c:48,14'
          Dst:             EVP_CIPHER_CTX_iv
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    EVP_CIPHER_CTX_iv
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.evp_cipher_ctx_st *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    chacha_ivsetup
      functionSourceFile: '/src/openssh/openbsd-compat/./chacha_private.h'
      linkageType:     InternalLinkage
      functionLinenumber: 83
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'struct.chacha_ctx *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         1
      ICount:          78
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    chacha_keysetup
      functionSourceFile: '/src/openssh/openbsd-compat/./chacha_private.h'
      linkageType:     InternalLinkage
      functionLinenumber: 58
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.chacha_ctx *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         4
      ICount:          392
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:
        - Branch String:   './chacha_private.h:65,7'
          Branch Sides:
            - BranchSide:      './chacha_private.h:66,7'
              BranchSideFuncs: []
            - BranchSide:      './chacha_private.h:69,15'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _rs_allocate
      functionSourceFile: '/src/openssh/openbsd-compat/./arc4random.h'
      linkageType:     InternalLinkage
      functionLinenumber: 65
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'struct.timeval **'
        - 'struct._rsx **'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         8
      ICount:          52
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - mmap
        - munmap
      functionUses:    1
      BranchProfiles:
        - Branch String:   './arc4random.h:67,6'
          Branch Sides:
            - BranchSide:      './arc4random.h:69,3'
              BranchSideFuncs: []
            - BranchSide:      './arc4random.h:71,15'
              BranchSideFuncs:
                - mmap
                - munmap
        - Branch String:   './arc4random.h:71,6'
          Branch Sides:
            - BranchSide:      './arc4random.h:73,11'
              BranchSideFuncs:
                - munmap
            - BranchSide:      './arc4random.h:88,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             './arc4random.h:67,14'
          Dst:             mmap
        - Src:             './arc4random.h:71,15'
          Dst:             mmap
        - Src:             './arc4random.h:73,3'
          Dst:             munmap
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    mmap
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        6
      argTypes:
        - 'char *'
        - 'size_t '
        - 'int '
        - 'int '
        - 'int '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    munmap
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    chacha_encrypt_bytes
      functionSourceFile: '/src/openssh/openbsd-compat/./chacha_private.h'
      linkageType:     InternalLinkage
      functionLinenumber: 92
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'struct.chacha_ctx *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         60
      ICount:          1593
      EdgeCount:       67
      CyclomaticComplexity: 9
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   './chacha_private.h:99,7'
          Branch Sides:
            - BranchSide:      './chacha_private.h:99,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      './chacha_private.h:101,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   './chacha_private.h:119,9'
          Branch Sides:
            - BranchSide:      './chacha_private.h:120,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      './chacha_private.h:125,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   './chacha_private.h:120,7'
          Branch Sides:
            - BranchSide:      './chacha_private.h:120,42'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      './chacha_private.h:121,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   './chacha_private.h:141,5'
          Branch Sides:
            - BranchSide:      './chacha_private.h:142,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      './chacha_private.h:151,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   './chacha_private.h:188,9'
          Branch Sides:
            - BranchSide:      './chacha_private.h:189,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      './chacha_private.h:193,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   './chacha_private.h:210,9'
          Branch Sides:
            - BranchSide:      './chacha_private.h:211,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      './chacha_private.h:218,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   './chacha_private.h:211,11'
          Branch Sides:
            - BranchSide:      './chacha_private.h:212,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      './chacha_private.h:214,22'
              BranchSideFuncs: []
        - Branch String:   './chacha_private.h:212,9'
          Branch Sides:
            - BranchSide:      './chacha_private.h:212,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      './chacha_private.h:213,7'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _rs_init
      functionSourceFile: '/src/openssh/openbsd-compat/arc4random.c'
      linkageType:     InternalLinkage
      functionLinenumber: 97
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         11
      ICount:          55
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - _exit
        - _rs_allocate
        - chacha_ivsetup
        - chacha_keysetup
      functionUses:    2
      BranchProfiles:
        - Branch String:   'arc4random.c:98,6'
          Branch Sides:
            - BranchSide:      'arc4random.c:99,3'
              BranchSideFuncs: []
            - BranchSide:      'arc4random.c:101,6'
              BranchSideFuncs:
                - chacha_keysetup
                - chacha_ivsetup
                - _rs_allocate
                - __sanitizer_cov_trace_const_cmp4
                - _exit
        - Branch String:   'arc4random.c:101,6'
          Branch Sides:
            - BranchSide:      'arc4random.c:102,7'
              BranchSideFuncs:
                - _rs_allocate
                - __sanitizer_cov_trace_const_cmp4
                - chacha_keysetup
                - chacha_ivsetup
                - _exit
            - BranchSide:      'arc4random.c:106,19'
              BranchSideFuncs:
                - chacha_keysetup
                - chacha_ivsetup
        - Branch String:   'arc4random.c:102,7'
          Branch Sides:
            - BranchSide:      'arc4random.c:103,4'
              BranchSideFuncs:
                - _exit
            - BranchSide:      'arc4random.c:104,2'
              BranchSideFuncs:
                - chacha_keysetup
                - chacha_ivsetup
      Callsites:
        - Src:             'arc4random.c:102,7'
          Dst:             _rs_allocate
        - Src:             'arc4random.c:103,4'
          Dst:             _exit
        - Src:             'arc4random.c:106,2'
          Dst:             chacha_keysetup
        - Src:             'arc4random.c:107,2'
          Dst:             chacha_ivsetup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _rs_stir
      functionSourceFile: '/src/openssh/openbsd-compat/arc4random.c'
      linkageType:     InternalLinkage
      functionLinenumber: 112
      functionDepth:   0
      returnType:      'N/A'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         9
      ICount:          66
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - _getentropy_fail
        - _rs_init
        - _rs_rekey
        - _ssh_compat_getentropy
        - chacha_encrypt_bytes
        - explicit_bzero
        - memset
      functionUses:    1
      BranchProfiles:
        - Branch String:   'arc4random.c:113,9'
          Branch Sides:
            - BranchSide:      'arc4random.c:114,11'
              BranchSideFuncs:
                - _ssh_compat_getentropy
                - __sanitizer_cov_trace_const_cmp4
                - _rs_init
                - explicit_bzero
                - memset
                - chacha_encrypt_bytes
                - _rs_rekey
                - _getentropy_fail
            - BranchSide:      'arc4random.c:114,11'
              BranchSideFuncs:
                - _ssh_compat_getentropy
                - __sanitizer_cov_trace_const_cmp4
                - _rs_init
                - explicit_bzero
                - memset
                - chacha_encrypt_bytes
                - _rs_rekey
                - _getentropy_fail
        - Branch String:   'arc4random.c:116,6'
          Branch Sides:
            - BranchSide:      'arc4random.c:117,3'
              BranchSideFuncs:
                - _getentropy_fail
                - _rs_init
                - explicit_bzero
                - memset
                - chacha_encrypt_bytes
                - _rs_rekey
            - BranchSide:      'arc4random.c:119,7'
              BranchSideFuncs:
                - _rs_init
                - explicit_bzero
                - memset
                - chacha_encrypt_bytes
                - _rs_rekey
        - Branch String:   'arc4random.c:119,6'
          Branch Sides:
            - BranchSide:      'arc4random.c:120,12'
              BranchSideFuncs:
                - _rs_rekey
                - explicit_bzero
                - memset
                - chacha_encrypt_bytes
            - BranchSide:      'arc4random.c:122,13'
              BranchSideFuncs:
                - _rs_rekey
                - explicit_bzero
                - memset
                - chacha_encrypt_bytes
      Callsites:
        - Src:             'arc4random.c:116,6'
          Dst:             _ssh_compat_getentropy
        - Src:             'arc4random.c:117,3'
          Dst:             _getentropy_fail
        - Src:             'arc4random.c:120,3'
          Dst:             _rs_init
        - Src:             'arc4random.c:122,3'
          Dst:             _rs_rekey
        - Src:             'arc4random.c:123,2'
          Dst:             explicit_bzero
        - Src:             'arc4random.c:127,2'
          Dst:             memset
        - Src:             'arc4random.c:130,2'
          Dst:             chacha_encrypt_bytes
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _getentropy_fail
      functionSourceFile: '/src/openssh/openbsd-compat/./arc4random.h'
      linkageType:     InternalLinkage
      functionLinenumber: 38
      functionDepth:   0
      returnType:      'N/A'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         1
      ICount:          2
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached:
        - sshfatal
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             './arc4random.h:38,2'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _rs_rekey
      functionSourceFile: '/src/openssh/openbsd-compat/arc4random.c'
      linkageType:     InternalLinkage
      functionLinenumber: 149
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         13
      ICount:          96
      EdgeCount:       16
      CyclomaticComplexity: 5
      functionsReached:
        - _rs_init
        - chacha_encrypt_bytes
        - memset
      functionUses:    3
      BranchProfiles:
        - Branch String:   'arc4random.c:157,6'
          Branch Sides:
            - BranchSide:      'arc4random.c:157,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - _rs_init
                - memset
            - BranchSide:      'arc4random.c:160,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - _rs_init
                - memset
        - Branch String:   'arc4random.c:160,7'
          Branch Sides:
            - BranchSide:      'arc4random.c:160,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - _rs_init
                - memset
            - BranchSide:      'arc4random.c:160,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - _rs_init
                - memset
        - Branch String:   'arc4random.c:161,3'
          Branch Sides:
            - BranchSide:      'arc4random.c:162,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - _rs_init
                - memset
            - BranchSide:      'arc4random.c:163,2'
              BranchSideFuncs:
                - _rs_init
                - memset
      Callsites:
        - Src:             'arc4random.c:154,2'
          Dst:             chacha_encrypt_bytes
        - Src:             'arc4random.c:165,2'
          Dst:             _rs_init
        - Src:             'arc4random.c:166,2'
          Dst:             memset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _rs_forkdetect
      functionSourceFile: '/src/openssh/openbsd-compat/./arc4random.h'
      linkageType:     InternalLinkage
      functionLinenumber: 51
      functionDepth:   0
      returnType:      'N/A'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         16
      ICount:          70
      EdgeCount:       21
      CyclomaticComplexity: 7
      functionsReached:
        - getpid
        - memset
      functionUses:    1
      BranchProfiles:
        - Branch String:   './arc4random.h:53,8'
          Branch Sides:
            - BranchSide:      './arc4random.h:53,14'
              BranchSideFuncs:
                - getpid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - memset
            - BranchSide:      './arc4random.h:53,14'
              BranchSideFuncs:
                - getpid
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - memset
        - Branch String:   './arc4random.h:55,19'
          Branch Sides:
            - BranchSide:      './arc4random.h:55,22'
              BranchSideFuncs:
                - memset
            - BranchSide:      './arc4random.h:56,13'
              BranchSideFuncs:
                - memset
        - Branch String:   './arc4random.h:55,35'
          Branch Sides:
            - BranchSide:      './arc4random.h:55,38'
              BranchSideFuncs:
                - memset
            - BranchSide:      './arc4random.h:56,13'
              BranchSideFuncs:
                - memset
        - Branch String:   './arc4random.h:55,53'
          Branch Sides:
            - BranchSide:      './arc4random.h:55,56'
              BranchSideFuncs:
                - memset
            - BranchSide:      './arc4random.h:56,13'
              BranchSideFuncs:
                - memset
        - Branch String:   './arc4random.h:55,6'
          Branch Sides:
            - BranchSide:      './arc4random.h:55,6'
              BranchSideFuncs:
                - memset
            - BranchSide:      './arc4random.h:56,13'
              BranchSideFuncs:
                - memset
        - Branch String:   './arc4random.h:58,7'
          Branch Sides:
            - BranchSide:      './arc4random.h:59,11'
              BranchSideFuncs:
                - memset
            - BranchSide:      './arc4random.h:60,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             './arc4random.h:53,14'
          Dst:             getpid
        - Src:             './arc4random.h:59,4'
          Dst:             memset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _rs_stir_if_needed
      functionSourceFile: '/src/openssh/openbsd-compat/arc4random.c'
      linkageType:     InternalLinkage
      functionLinenumber: 137
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         12
      ICount:          63
      EdgeCount:       15
      CyclomaticComplexity: 5
      functionsReached:
        - _rs_forkdetect
        - _rs_stir
      functionUses:    2
      BranchProfiles:
        - Branch String:   'arc4random.c:139,10'
          Branch Sides:
            - BranchSide:      'arc4random.c:139,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - _rs_stir
            - BranchSide:      'arc4random.c:140,3'
              BranchSideFuncs:
                - _rs_stir
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'arc4random.c:139,6'
          Branch Sides:
            - BranchSide:      'arc4random.c:140,3'
              BranchSideFuncs:
                - _rs_stir
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'arc4random.c:141,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'arc4random.c:141,6'
          Branch Sides:
            - BranchSide:      'arc4random.c:142,3'
              BranchSideFuncs: []
            - BranchSide:      'arc4random.c:144,19'
              BranchSideFuncs: []
      Callsites:
        - Src:             'arc4random.c:138,2'
          Dst:             _rs_forkdetect
        - Src:             'arc4random.c:140,3'
          Dst:             _rs_stir
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _rs_random_buf
      functionSourceFile: '/src/openssh/openbsd-compat/arc4random.c'
      linkageType:     InternalLinkage
      functionLinenumber: 172
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         15
      ICount:          114
      EdgeCount:       19
      CyclomaticComplexity: 6
      functionsReached:
        - _rs_rekey
        - _rs_stir_if_needed
        - memset
      functionUses:    1
      BranchProfiles:
        - Branch String:   'arc4random.c:178,2'
          Branch Sides:
            - BranchSide:      'arc4random.c:179,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - _rs_rekey
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
            - BranchSide:      'arc4random.c:192,1'
              BranchSideFuncs: []
        - Branch String:   'arc4random.c:179,7'
          Branch Sides:
            - BranchSide:      'arc4random.c:180,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - _rs_rekey
            - BranchSide:      'arc4random.c:189,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - _rs_rekey
        - Branch String:   'arc4random.c:180,8'
          Branch Sides:
            - BranchSide:      'arc4random.c:180,6'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - _rs_rekey
            - BranchSide:      'arc4random.c:180,6'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - _rs_rekey
        - Branch String:   'arc4random.c:189,7'
          Branch Sides:
            - BranchSide:      'arc4random.c:178,2'
              BranchSideFuncs:
                - _rs_rekey
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
            - BranchSide:      'arc4random.c:190,4'
              BranchSideFuncs:
                - _rs_rekey
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
      Callsites:
        - Src:             'arc4random.c:177,2'
          Dst:             _rs_stir_if_needed
        - Src:             'arc4random.c:184,4'
          Dst:             memset
        - Src:             'arc4random.c:190,4'
          Dst:             _rs_rekey
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    arc4random_buf
      functionSourceFile: '/src/openssh/openbsd-compat/arc4random.c'
      linkageType:     InternalLinkage
      functionLinenumber: 227
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         3
      ICount:          20
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - _rs_random_buf
      functionUses:    14
      BranchProfiles:  []
      Callsites:
        - Src:             'arc4random.c:229,2'
          Dst:             _rs_random_buf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _rs_random_u32
      functionSourceFile: '/src/openssh/openbsd-compat/arc4random.c'
      linkageType:     InternalLinkage
      functionLinenumber: 196
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          53
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - _rs_rekey
        - _rs_stir_if_needed
        - memset
      functionUses:    1
      BranchProfiles:
        - Branch String:   'arc4random.c:200,6'
          Branch Sides:
            - BranchSide:      'arc4random.c:200,6'
              BranchSideFuncs:
                - _rs_rekey
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
            - BranchSide:      'arc4random.c:201,3'
              BranchSideFuncs:
                - _rs_rekey
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
      Callsites:
        - Src:             'arc4random.c:199,2'
          Dst:             _rs_stir_if_needed
        - Src:             'arc4random.c:201,3'
          Dst:             _rs_rekey
        - Src:             'arc4random.c:204,2'
          Dst:             memset
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    arc4random
      functionSourceFile: '/src/openssh/openbsd-compat/arc4random.c'
      linkageType:     InternalLinkage
      functionLinenumber: 210
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         3
      ICount:          15
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - _rs_random_u32
      functionUses:    3
      BranchProfiles:
        - Branch String:   'arc4random.c:211,11'
          Branch Sides:
            - BranchSide:      'arc4random.c:211,11'
              BranchSideFuncs:
                - _rs_random_u32
            - BranchSide:      'arc4random.c:214,2'
              BranchSideFuncs:
                - _rs_random_u32
      Callsites:
        - Src:             'arc4random.c:214,2'
          Dst:             _rs_random_u32
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    arc4random_uniform
      functionSourceFile: '/src/openssh/openbsd-compat/arc4random_uniform.c'
      linkageType:     InternalLinkage
      functionLinenumber: 41
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         10
      ICount:          54
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - arc4random
      functionUses:    1
      BranchProfiles:
        - Branch String:   'arc4random_uniform.c:44,6'
          Branch Sides:
            - BranchSide:      'arc4random_uniform.c:45,3'
              BranchSideFuncs: []
            - BranchSide:      'arc4random_uniform.c:48,9'
              BranchSideFuncs:
                - arc4random
        - Branch String:   'arc4random_uniform.c:58,7'
          Branch Sides:
            - BranchSide:      'arc4random_uniform.c:56,2'
              BranchSideFuncs: []
            - BranchSide:      'arc4random_uniform.c:59,4'
              BranchSideFuncs: []
      Callsites:
        - Src:             'arc4random_uniform.c:57,7'
          Dst:             arc4random
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    __b64_pton
      functionSourceFile: '/src/openssh/openbsd-compat/base64.c'
      linkageType:     InternalLinkage
      functionLinenumber: 197
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         73
      ICount:          428
      EdgeCount:       92
      CyclomaticComplexity: 21
      functionsReached:
        - __ctype_b_loc
        - strchr
      functionUses:    1
      BranchProfiles:
        - Branch String:   'base64.c:205,2'
          Branch Sides:
            - BranchSide:      'base64.c:206,7'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'base64.c:264,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'base64.c:206,7'
          Branch Sides:
            - BranchSide:      'base64.c:207,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'base64.c:209,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:209,7'
          Branch Sides:
            - BranchSide:      'base64.c:210,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'base64.c:212,24'
              BranchSideFuncs:
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:213,7'
          Branch Sides:
            - BranchSide:      'base64.c:214,4'
              BranchSideFuncs: []
            - BranchSide:      'base64.c:216,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:216,3'
          Branch Sides:
            - BranchSide:      'base64.c:205,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'base64.c:218,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'base64.c:226,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'base64.c:237,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'base64.c:248,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:218,8'
          Branch Sides:
            - BranchSide:      'base64.c:219,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'base64.c:223,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:219,9'
          Branch Sides:
            - BranchSide:      'base64.c:220,6'
              BranchSideFuncs: []
            - BranchSide:      'base64.c:221,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:226,8'
          Branch Sides:
            - BranchSide:      'base64.c:227,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'base64.c:233,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:227,9'
          Branch Sides:
            - BranchSide:      'base64.c:228,6'
              BranchSideFuncs: []
            - BranchSide:      'base64.c:229,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:237,8'
          Branch Sides:
            - BranchSide:      'base64.c:238,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'base64.c:244,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:238,9'
          Branch Sides:
            - BranchSide:      'base64.c:239,6'
              BranchSideFuncs: []
            - BranchSide:      'base64.c:240,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:248,8'
          Branch Sides:
            - BranchSide:      'base64.c:249,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'base64.c:253,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:249,9'
          Branch Sides:
            - BranchSide:      'base64.c:250,6'
              BranchSideFuncs: []
            - BranchSide:      'base64.c:251,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:264,6'
          Branch Sides:
            - BranchSide:      'base64.c:265,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'base64.c:306,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'base64.c:266,3'
          Branch Sides:
            - BranchSide:      'base64.c:269,4'
              BranchSideFuncs: []
            - BranchSide:      'base64.c:269,4'
              BranchSideFuncs: []
            - BranchSide:      'base64.c:273,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'base64.c:288,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'base64.c:301,2'
              BranchSideFuncs: []
        - Branch String:   'base64.c:273,4'
          Branch Sides:
            - BranchSide:      'base64.c:274,10'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'base64.c:277,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'base64.c:274,9'
          Branch Sides:
            - BranchSide:      'base64.c:274,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'base64.c:275,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'base64.c:277,8'
          Branch Sides:
            - BranchSide:      'base64.c:278,5'
              BranchSideFuncs: []
            - BranchSide:      'base64.c:279,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'base64.c:288,4'
          Branch Sides:
            - BranchSide:      'base64.c:289,10'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'base64.c:298,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'base64.c:289,9'
          Branch Sides:
            - BranchSide:      'base64.c:289,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'base64.c:290,6'
              BranchSideFuncs: []
        - Branch String:   'base64.c:298,15'
          Branch Sides:
            - BranchSide:      'base64.c:298,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'base64.c:300,3'
              BranchSideFuncs: []
        - Branch String:   'base64.c:298,8'
          Branch Sides:
            - BranchSide:      'base64.c:299,5'
              BranchSideFuncs: []
            - BranchSide:      'base64.c:300,3'
              BranchSideFuncs: []
        - Branch String:   'base64.c:306,7'
          Branch Sides:
            - BranchSide:      'base64.c:0,0'
              BranchSideFuncs: []
            - BranchSide:      'base64.c:307,4'
              BranchSideFuncs: []
      Callsites:
        - Src:             'base64.c:206,7'
          Dst:             __ctype_b_loc
        - Src:             'base64.c:212,9'
          Dst:             strchr
        - Src:             'base64.c:274,10'
          Dst:             __ctype_b_loc
        - Src:             'base64.c:289,10'
          Dst:             __ctype_b_loc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    __b64_ntop
      functionSourceFile: '/src/openssh/openbsd-compat/base64.c'
      linkageType:     InternalLinkage
      functionLinenumber: 134
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         21
      ICount:          312
      EdgeCount:       27
      CyclomaticComplexity: 8
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   'base64.c:140,2'
          Branch Sides:
            - BranchSide:      'base64.c:141,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'base64.c:160,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'base64.c:151,7'
          Branch Sides:
            - BranchSide:      'base64.c:152,4'
              BranchSideFuncs: []
            - BranchSide:      'base64.c:153,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'base64.c:160,6'
          Branch Sides:
            - BranchSide:      'base64.c:162,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'base64.c:180,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:163,3'
          Branch Sides:
            - BranchSide:      'base64.c:164,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'base64.c:166,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:170,7'
          Branch Sides:
            - BranchSide:      'base64.c:171,4'
              BranchSideFuncs: []
            - BranchSide:      'base64.c:172,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:174,7'
          Branch Sides:
            - BranchSide:      'base64.c:175,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'base64.c:177,34'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'base64.c:180,6'
          Branch Sides:
            - BranchSide:      'base64.c:181,3'
              BranchSideFuncs: []
            - BranchSide:      'base64.c:182,2'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    bcrypt_hash
      functionSourceFile: '/src/openssh/openbsd-compat/bcrypt_pbkdf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 74
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         19
      ICount:          181
      EdgeCount:       23
      CyclomaticComplexity: 6
      functionsReached:
        - Blowfish_expand0state
        - Blowfish_expandstate
        - Blowfish_initstate
        - Blowfish_stream2word
        - blf_enc
        - explicit_bzero
      functionUses:    2
      BranchProfiles:
        - Branch String:   'bcrypt_pbkdf.c:86,2'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:87,33'
              BranchSideFuncs:
                - Blowfish_expand0state
                - Blowfish_expand0state
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - blf_enc
                - Blowfish_stream2word
            - BranchSide:      'bcrypt_pbkdf.c:92,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - blf_enc
                - Blowfish_stream2word
        - Branch String:   'bcrypt_pbkdf.c:93,2'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:94,35'
              BranchSideFuncs:
                - Blowfish_stream2word
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - blf_enc
            - BranchSide:      'bcrypt_pbkdf.c:96,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
                - blf_enc
        - Branch String:   'bcrypt_pbkdf.c:96,2'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:97,19'
              BranchSideFuncs:
                - blf_enc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      'bcrypt_pbkdf.c:100,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
        - Branch String:   'bcrypt_pbkdf.c:100,2'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:101,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
            - BranchSide:      'bcrypt_pbkdf.c:108,17'
              BranchSideFuncs:
                - explicit_bzero
                - explicit_bzero
                - explicit_bzero
      Callsites:
        - Src:             'bcrypt_pbkdf.c:84,2'
          Dst:             Blowfish_initstate
        - Src:             'bcrypt_pbkdf.c:85,2'
          Dst:             Blowfish_expandstate
        - Src:             'bcrypt_pbkdf.c:87,3'
          Dst:             Blowfish_expand0state
        - Src:             'bcrypt_pbkdf.c:88,3'
          Dst:             Blowfish_expand0state
        - Src:             'bcrypt_pbkdf.c:94,14'
          Dst:             Blowfish_stream2word
        - Src:             'bcrypt_pbkdf.c:97,3'
          Dst:             blf_enc
        - Src:             'bcrypt_pbkdf.c:108,2'
          Dst:             explicit_bzero
        - Src:             'bcrypt_pbkdf.c:109,2'
          Dst:             explicit_bzero
        - Src:             'bcrypt_pbkdf.c:110,2'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    bcrypt_pbkdf
      functionSourceFile: '/src/openssh/openbsd-compat/bcrypt_pbkdf.c'
      linkageType:     InternalLinkage
      functionLinenumber: 116
      functionDepth:   0
      returnType:      'int '
      argCount:        7
      argTypes:
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
        - 'char *'
        - 'size_t '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         42
      ICount:          331
      EdgeCount:       55
      CyclomaticComplexity: 15
      functionsReached:
        - arc4random_buf
        - bcrypt_hash
        - calloc
        - crypto_hash_sha512
        - explicit_bzero
        - freezero
      functionUses:    2
      BranchProfiles:
        - Branch String:   'bcrypt_pbkdf.c:127,6'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:128,3'
              BranchSideFuncs:
                - arc4random_buf
            - BranchSide:      'bcrypt_pbkdf.c:129,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - calloc
                - llvm.memcpy.p0i8.p0i8.i64
                - crypto_hash_sha512
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - crypto_hash_sha512
                - bcrypt_hash
                - __sanitizer_cov_trace_const_cmp8
                - arc4random_buf
        - Branch String:   'bcrypt_pbkdf.c:129,19'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:129,22'
              BranchSideFuncs:
                - arc4random_buf
            - BranchSide:      'bcrypt_pbkdf.c:131,3'
              BranchSideFuncs:
                - arc4random_buf
        - Branch String:   'bcrypt_pbkdf.c:129,35'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:129,38'
              BranchSideFuncs:
                - arc4random_buf
            - BranchSide:      'bcrypt_pbkdf.c:131,3'
              BranchSideFuncs:
                - arc4random_buf
        - Branch String:   'bcrypt_pbkdf.c:129,50'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:130,6'
              BranchSideFuncs:
                - arc4random_buf
            - BranchSide:      'bcrypt_pbkdf.c:131,3'
              BranchSideFuncs:
                - arc4random_buf
        - Branch String:   'bcrypt_pbkdf.c:130,41'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:130,44'
              BranchSideFuncs:
                - arc4random_buf
            - BranchSide:      'bcrypt_pbkdf.c:131,3'
              BranchSideFuncs:
                - arc4random_buf
        - Branch String:   'bcrypt_pbkdf.c:129,6'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:131,3'
              BranchSideFuncs:
                - arc4random_buf
            - BranchSide:      'bcrypt_pbkdf.c:132,29'
              BranchSideFuncs:
                - calloc
                - llvm.memcpy.p0i8.p0i8.i64
                - crypto_hash_sha512
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - crypto_hash_sha512
                - bcrypt_hash
                - __sanitizer_cov_trace_const_cmp8
                - arc4random_buf
        - Branch String:   'bcrypt_pbkdf.c:132,6'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:133,3'
              BranchSideFuncs:
                - arc4random_buf
            - BranchSide:      'bcrypt_pbkdf.c:134,12'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - crypto_hash_sha512
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - crypto_hash_sha512
                - bcrypt_hash
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'bcrypt_pbkdf.c:143,2'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:144,29'
              BranchSideFuncs:
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - __sanitizer_cov_trace_cmp8
                - crypto_hash_sha512
                - bcrypt_hash
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'bcrypt_pbkdf.c:177,11'
              BranchSideFuncs:
                - freezero
                - explicit_bzero
                - explicit_bzero
        - Branch String:   'bcrypt_pbkdf.c:155,3'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:157,23'
              BranchSideFuncs:
                - crypto_hash_sha512
                - bcrypt_hash
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'bcrypt_pbkdf.c:166,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - crypto_hash_sha512
                - bcrypt_hash
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'bcrypt_pbkdf.c:159,4'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:160,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - crypto_hash_sha512
                - bcrypt_hash
            - BranchSide:      'bcrypt_pbkdf.c:161,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - crypto_hash_sha512
                - bcrypt_hash
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'bcrypt_pbkdf.c:166,9'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:166,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - crypto_hash_sha512
                - bcrypt_hash
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'bcrypt_pbkdf.c:166,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - crypto_hash_sha512
                - bcrypt_hash
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
        - Branch String:   'bcrypt_pbkdf.c:167,3'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:168,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - crypto_hash_sha512
                - bcrypt_hash
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'bcrypt_pbkdf.c:173,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - crypto_hash_sha512
                - bcrypt_hash
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'bcrypt_pbkdf.c:169,8'
          Branch Sides:
            - BranchSide:      'bcrypt_pbkdf.c:170,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - crypto_hash_sha512
                - bcrypt_hash
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'bcrypt_pbkdf.c:171,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - freezero
                - explicit_bzero
                - explicit_bzero
                - crypto_hash_sha512
                - bcrypt_hash
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - crypto_hash_sha512
                - bcrypt_hash
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
      Callsites:
        - Src:             'bcrypt_pbkdf.c:132,19'
          Dst:             calloc
        - Src:             'bcrypt_pbkdf.c:140,2'
          Dst:             crypto_hash_sha512
        - Src:             'bcrypt_pbkdf.c:150,3'
          Dst:             crypto_hash_sha512
        - Src:             'bcrypt_pbkdf.c:152,3'
          Dst:             bcrypt_hash
        - Src:             'bcrypt_pbkdf.c:157,4'
          Dst:             crypto_hash_sha512
        - Src:             'bcrypt_pbkdf.c:158,4'
          Dst:             bcrypt_hash
        - Src:             'bcrypt_pbkdf.c:177,2'
          Dst:             freezero
        - Src:             'bcrypt_pbkdf.c:178,2'
          Dst:             explicit_bzero
        - Src:             'bcrypt_pbkdf.c:179,2'
          Dst:             explicit_bzero
        - Src:             'bcrypt_pbkdf.c:185,2'
          Dst:             arc4random_buf
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    blf_cbc_decrypt
      functionSourceFile: '/src/openssh/openbsd-compat/blowfish.c'
      linkageType:     InternalLinkage
      functionLinenumber: 608
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'struct.BlowfishContext *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         15
      ICount:          332
      EdgeCount:       18
      CyclomaticComplexity: 5
      functionsReached:
        - Blowfish_decipher
      functionUses:    0
      BranchProfiles:
        - Branch String:   'blowfish.c:615,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:616,7'
              BranchSideFuncs:
                - Blowfish_decipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_decipher
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'blowfish.c:632,6'
              BranchSideFuncs:
                - Blowfish_decipher
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'blowfish.c:627,3'
          Branch Sides:
            - BranchSide:      'blowfish.c:628,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_decipher
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_decipher
            - BranchSide:      'blowfish.c:629,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_decipher
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_decipher
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'blowfish.c:643,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:644,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'blowfish.c:645,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'blowfish.c:618,3'
          Dst:             Blowfish_decipher
        - Src:             'blowfish.c:634,2'
          Dst:             Blowfish_decipher
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Blowfish_decipher
      functionSourceFile: '/src/openssh/openbsd-compat/blowfish.c'
      linkageType:     InternalLinkage
      functionLinenumber: 97
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.BlowfishContext *'
        - 'int *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          692
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    blf_cbc_encrypt
      functionSourceFile: '/src/openssh/openbsd-compat/blowfish.c'
      linkageType:     InternalLinkage
      functionLinenumber: 583
      functionDepth:   0
      returnType:      'N/A'
      argCount:        4
      argTypes:
        - 'struct.BlowfishContext *'
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         11
      ICount:          185
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - Blowfish_encipher
      functionUses:    0
      BranchProfiles:
        - Branch String:   'blowfish.c:587,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:588,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_encipher
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'blowfish.c:604,1'
              BranchSideFuncs: []
        - Branch String:   'blowfish.c:588,3'
          Branch Sides:
            - BranchSide:      'blowfish.c:589,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_encipher
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'blowfish.c:590,7'
              BranchSideFuncs:
                - Blowfish_encipher
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             'blowfish.c:592,3'
          Dst:             Blowfish_encipher
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Blowfish_encipher
      functionSourceFile: '/src/openssh/openbsd-compat/blowfish.c'
      linkageType:     InternalLinkage
      functionLinenumber: 72
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.BlowfishContext *'
        - 'int *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         1
      ICount:          692
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    blf_ecb_decrypt
      functionSourceFile: '/src/openssh/openbsd-compat/blowfish.c'
      linkageType:     InternalLinkage
      functionLinenumber: 561
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.BlowfishContext *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          149
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - Blowfish_decipher
      functionUses:    0
      BranchProfiles:
        - Branch String:   'blowfish.c:565,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:566,7'
              BranchSideFuncs:
                - Blowfish_decipher
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'blowfish.c:579,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'blowfish.c:568,3'
          Dst:             Blowfish_decipher
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    blf_ecb_encrypt
      functionSourceFile: '/src/openssh/openbsd-compat/blowfish.c'
      linkageType:     InternalLinkage
      functionLinenumber: 539
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.BlowfishContext *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          149
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - Blowfish_encipher
      functionUses:    0
      BranchProfiles:
        - Branch String:   'blowfish.c:543,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:544,7'
              BranchSideFuncs:
                - Blowfish_encipher
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'blowfish.c:557,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'blowfish.c:546,3'
          Dst:             Blowfish_encipher
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    blf_dec
      functionSourceFile: '/src/openssh/openbsd-compat/blowfish.c'
      linkageType:     InternalLinkage
      functionLinenumber: 526
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.BlowfishContext *'
        - 'int *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          54
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - Blowfish_decipher
      functionUses:    0
      BranchProfiles:
        - Branch String:   'blowfish.c:531,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:532,21'
              BranchSideFuncs:
                - Blowfish_decipher
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'blowfish.c:535,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'blowfish.c:532,3'
          Dst:             Blowfish_decipher
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    blf_enc
      functionSourceFile: '/src/openssh/openbsd-compat/blowfish.c'
      linkageType:     InternalLinkage
      functionLinenumber: 513
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.BlowfishContext *'
        - 'int *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         7
      ICount:          54
      EdgeCount:       8
      CyclomaticComplexity: 3
      functionsReached:
        - Blowfish_encipher
      functionUses:    1
      BranchProfiles:
        - Branch String:   'blowfish.c:518,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:519,21'
              BranchSideFuncs:
                - Blowfish_encipher
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'blowfish.c:522,1'
              BranchSideFuncs: []
      Callsites:
        - Src:             'blowfish.c:519,3'
          Dst:             Blowfish_encipher
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    blf_key
      functionSourceFile: '/src/openssh/openbsd-compat/blowfish.c'
      linkageType:     InternalLinkage
      functionLinenumber: 503
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.BlowfishContext *'
        - 'char *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         3
      ICount:          26
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - Blowfish_expand0state
        - Blowfish_initstate
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             'blowfish.c:505,2'
          Dst:             Blowfish_initstate
        - Src:             'blowfish.c:508,2'
          Dst:             Blowfish_expand0state
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Blowfish_initstate
      functionSourceFile: '/src/openssh/openbsd-compat/blowfish.c'
      linkageType:     InternalLinkage
      functionLinenumber: 122
      functionDepth:   0
      returnType:      'N/A'
      argCount:        1
      argTypes:
        - 'struct.BlowfishContext *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Blowfish_expand0state
      functionSourceFile: '/src/openssh/openbsd-compat/blowfish.c'
      linkageType:     InternalLinkage
      functionLinenumber: 422
      functionDepth:   0
      returnType:      'N/A'
      argCount:        3
      argTypes:
        - 'struct.BlowfishContext *'
        - 'char *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         19
      ICount:          163
      EdgeCount:       23
      CyclomaticComplexity: 6
      functionsReached:
        - Blowfish_encipher
        - Blowfish_stream2word
      functionUses:    3
      BranchProfiles:
        - Branch String:   'blowfish.c:431,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:433,31'
              BranchSideFuncs:
                - Blowfish_stream2word
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_encipher
                - Blowfish_encipher
            - BranchSide:      'blowfish.c:437,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_encipher
                - Blowfish_encipher
        - Branch String:   'blowfish.c:440,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:441,21'
              BranchSideFuncs:
                - Blowfish_encipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_encipher
            - BranchSide:      'blowfish.c:447,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_encipher
        - Branch String:   'blowfish.c:447,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:448,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_encipher
            - BranchSide:      'blowfish.c:455,1'
              BranchSideFuncs: []
        - Branch String:   'blowfish.c:448,3'
          Branch Sides:
            - BranchSide:      'blowfish.c:449,22'
              BranchSideFuncs:
                - Blowfish_encipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'blowfish.c:454,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_encipher
      Callsites:
        - Src:             'blowfish.c:433,10'
          Dst:             Blowfish_stream2word
        - Src:             'blowfish.c:441,3'
          Dst:             Blowfish_encipher
        - Src:             'blowfish.c:449,4'
          Dst:             Blowfish_encipher
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Blowfish_stream2word
      functionSourceFile: '/src/openssh/openbsd-compat/blowfish.c'
      linkageType:     InternalLinkage
      functionLinenumber: 402
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'N/A'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          74
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached: []
      functionUses:    7
      BranchProfiles:
        - Branch String:   'blowfish.c:410,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:411,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'blowfish.c:416,13'
              BranchSideFuncs: []
        - Branch String:   'blowfish.c:411,7'
          Branch Sides:
            - BranchSide:      'blowfish.c:412,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      'blowfish.c:413,11'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    Blowfish_expandstate
      functionSourceFile: '/src/openssh/openbsd-compat/blowfish.c'
      linkageType:     InternalLinkage
      functionLinenumber: 461
      functionDepth:   0
      returnType:      'N/A'
      argCount:        5
      argTypes:
        - 'struct.BlowfishContext *'
        - 'char *'
        - 'N/A'
        - 'char *'
        - 'N/A'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
        - ''
      BBCount:         19
      ICount:          193
      EdgeCount:       23
      CyclomaticComplexity: 6
      functionsReached:
        - Blowfish_encipher
        - Blowfish_stream2word
      functionUses:    1
      BranchProfiles:
        - Branch String:   'blowfish.c:470,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:472,31'
              BranchSideFuncs:
                - Blowfish_stream2word
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_stream2word
                - Blowfish_stream2word
                - Blowfish_encipher
                - Blowfish_stream2word
                - Blowfish_stream2word
                - Blowfish_encipher
            - BranchSide:      'blowfish.c:476,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_stream2word
                - Blowfish_stream2word
                - Blowfish_encipher
                - Blowfish_stream2word
                - Blowfish_stream2word
                - Blowfish_encipher
        - Branch String:   'blowfish.c:479,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:480,33'
              BranchSideFuncs:
                - Blowfish_stream2word
                - Blowfish_stream2word
                - Blowfish_encipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_stream2word
                - Blowfish_stream2word
                - Blowfish_encipher
            - BranchSide:      'blowfish.c:488,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_stream2word
                - Blowfish_stream2word
                - Blowfish_encipher
        - Branch String:   'blowfish.c:488,2'
          Branch Sides:
            - BranchSide:      'blowfish.c:489,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_stream2word
                - Blowfish_stream2word
                - Blowfish_encipher
            - BranchSide:      'blowfish.c:499,1'
              BranchSideFuncs: []
        - Branch String:   'blowfish.c:489,3'
          Branch Sides:
            - BranchSide:      'blowfish.c:490,34'
              BranchSideFuncs:
                - Blowfish_stream2word
                - Blowfish_stream2word
                - Blowfish_encipher
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'blowfish.c:497,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - Blowfish_stream2word
                - Blowfish_stream2word
                - Blowfish_encipher
      Callsites:
        - Src:             'blowfish.c:472,10'
          Dst:             Blowfish_stream2word
        - Src:             'blowfish.c:480,12'
          Dst:             Blowfish_stream2word
        - Src:             'blowfish.c:481,12'
          Dst:             Blowfish_stream2word
        - Src:             'blowfish.c:482,3'
          Dst:             Blowfish_encipher
        - Src:             'blowfish.c:490,13'
          Dst:             Blowfish_stream2word
        - Src:             'blowfish.c:491,13'
          Dst:             Blowfish_stream2word
        - Src:             'blowfish.c:492,4'
          Dst:             Blowfish_encipher
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    freezero
      functionSourceFile: '/src/openssh/openbsd-compat/freezero.c'
      linkageType:     InternalLinkage
      functionLinenumber: 26
      functionDepth:   0
      returnType:      'N/A'
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          33
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - explicit_bzero
      functionUses:    50
      BranchProfiles:
        - Branch String:   'freezero.c:27,6'
          Branch Sides:
            - BranchSide:      'freezero.c:28,3'
              BranchSideFuncs: []
            - BranchSide:      'freezero.c:29,17'
              BranchSideFuncs:
                - explicit_bzero
                - free
      Callsites:
        - Src:             'freezero.c:29,2'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    recallocarray
      functionSourceFile: '/src/openssh/openbsd-compat/recallocarray.c'
      linkageType:     InternalLinkage
      functionLinenumber: 39
      functionDepth:   0
      returnType:      'char *'
      argCount:        4
      argTypes:
        - 'char *'
        - 'size_t '
        - 'size_t '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         39
      ICount:          234
      EdgeCount:       53
      CyclomaticComplexity: 16
      functionsReached:
        - __errno_location
        - calloc
        - explicit_bzero
        - getpagesize
        - memset
      functionUses:    6
      BranchProfiles:
        - Branch String:   'recallocarray.c:43,6'
          Branch Sides:
            - BranchSide:      'recallocarray.c:44,17'
              BranchSideFuncs:
                - calloc
            - BranchSide:      'recallocarray.c:46,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
        - Branch String:   'recallocarray.c:46,35'
          Branch Sides:
            - BranchSide:      'recallocarray.c:46,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __errno_location
            - BranchSide:      'recallocarray.c:47,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __errno_location
        - Branch String:   'recallocarray.c:46,63'
          Branch Sides:
            - BranchSide:      'recallocarray.c:47,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_cmp8
                - __errno_location
            - BranchSide:      'recallocarray.c:51,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
        - Branch String:   'recallocarray.c:47,19'
          Branch Sides:
            - BranchSide:      'recallocarray.c:47,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __errno_location
            - BranchSide:      'recallocarray.c:51,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
        - Branch String:   'recallocarray.c:46,6'
          Branch Sides:
            - BranchSide:      'recallocarray.c:48,3'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'recallocarray.c:51,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
        - Branch String:   'recallocarray.c:53,35'
          Branch Sides:
            - BranchSide:      'recallocarray.c:53,38'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
                - __sanitizer_cov_trace_cmp8
                - __errno_location
            - BranchSide:      'recallocarray.c:54,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
                - __sanitizer_cov_trace_cmp8
                - __errno_location
        - Branch String:   'recallocarray.c:53,63'
          Branch Sides:
            - BranchSide:      'recallocarray.c:54,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
                - __sanitizer_cov_trace_cmp8
                - __errno_location
            - BranchSide:      'recallocarray.c:58,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
        - Branch String:   'recallocarray.c:54,19'
          Branch Sides:
            - BranchSide:      'recallocarray.c:54,33'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
                - __errno_location
            - BranchSide:      'recallocarray.c:58,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
        - Branch String:   'recallocarray.c:53,6'
          Branch Sides:
            - BranchSide:      'recallocarray.c:55,3'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'recallocarray.c:58,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - __sanitizer_cov_trace_cmp8
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
        - Branch String:   'recallocarray.c:64,6'
          Branch Sides:
            - BranchSide:      'recallocarray.c:65,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - memset
            - BranchSide:      'recallocarray.c:73,18'
              BranchSideFuncs:
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
        - Branch String:   'recallocarray.c:67,23'
          Branch Sides:
            - BranchSide:      'recallocarray.c:67,26'
              BranchSideFuncs:
                - getpagesize
                - __sanitizer_cov_trace_cmp8
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - memset
            - BranchSide:      'recallocarray.c:71,2'
              BranchSideFuncs:
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
        - Branch String:   'recallocarray.c:67,7'
          Branch Sides:
            - BranchSide:      'recallocarray.c:68,19'
              BranchSideFuncs:
                - memset
            - BranchSide:      'recallocarray.c:71,2'
              BranchSideFuncs:
                - malloc
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
        - Branch String:   'recallocarray.c:74,6'
          Branch Sides:
            - BranchSide:      'recallocarray.c:75,3'
              BranchSideFuncs: []
            - BranchSide:      'recallocarray.c:77,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
        - Branch String:   'recallocarray.c:77,6'
          Branch Sides:
            - BranchSide:      'recallocarray.c:78,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - memset
                - explicit_bzero
                - free
            - BranchSide:      'recallocarray.c:81,10'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - explicit_bzero
                - free
      Callsites:
        - Src:             'recallocarray.c:44,10'
          Dst:             calloc
        - Src:             'recallocarray.c:48,3'
          Dst:             __errno_location
        - Src:             'recallocarray.c:55,3'
          Dst:             __errno_location
        - Src:             'recallocarray.c:67,38'
          Dst:             getpagesize
        - Src:             'recallocarray.c:68,4'
          Dst:             memset
        - Src:             'recallocarray.c:79,3'
          Dst:             memset
        - Src:             'recallocarray.c:83,2'
          Dst:             explicit_bzero
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    getpagesize
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strlcat
      functionSourceFile: '/src/openssh/openbsd-compat/strlcat.c'
      linkageType:     InternalLinkage
      functionLinenumber: 36
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         18
      ICount:          134
      EdgeCount:       23
      CyclomaticComplexity: 7
      functionsReached:
        - strlen
      functionUses:    10
      BranchProfiles:
        - Branch String:   'strlcat.c:43,18'
          Branch Sides:
            - BranchSide:      'strlcat.c:43,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'strlcat.c:43,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'strlcat.c:43,2'
          Branch Sides:
            - BranchSide:      'strlcat.c:44,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'strlcat.c:45,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - strlen
        - Branch String:   'strlcat.c:48,6'
          Branch Sides:
            - BranchSide:      'strlcat.c:49,10'
              BranchSideFuncs:
                - strlen
            - BranchSide:      'strlcat.c:50,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'strlcat.c:50,2'
          Branch Sides:
            - BranchSide:      'strlcat.c:51,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'strlcat.c:57,3'
              BranchSideFuncs: []
        - Branch String:   'strlcat.c:51,7'
          Branch Sides:
            - BranchSide:      'strlcat.c:52,12'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'strlcat.c:55,4'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
      Callsites:
        - Src:             'strlcat.c:49,17'
          Dst:             strlen
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strlcpy
      functionSourceFile: '/src/openssh/openbsd-compat/strlcpy.c'
      linkageType:     InternalLinkage
      functionLinenumber: 34
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         19
      ICount:          107
      EdgeCount:       24
      CyclomaticComplexity: 7
      functionsReached: []
      functionUses:    12
      BranchProfiles:
        - Branch String:   'strlcpy.c:40,6'
          Branch Sides:
            - BranchSide:      'strlcpy.c:41,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'strlcpy.c:48,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'strlcpy.c:41,3'
          Branch Sides:
            - BranchSide:      'strlcpy.c:42,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'strlcpy.c:45,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'strlcpy.c:42,8'
          Branch Sides:
            - BranchSide:      'strlcpy.c:41,3'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'strlcpy.c:43,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'strlcpy.c:48,6'
          Branch Sides:
            - BranchSide:      'strlcpy.c:48,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'strlcpy.c:49,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'strlcpy.c:49,7'
          Branch Sides:
            - BranchSide:      'strlcpy.c:50,5'
              BranchSideFuncs: []
            - BranchSide:      'strlcpy.c:51,3'
              BranchSideFuncs: []
        - Branch String:   'strlcpy.c:51,3'
          Branch Sides:
            - BranchSide:      'strlcpy.c:51,12'
              BranchSideFuncs: []
            - BranchSide:      'strlcpy.c:53,2'
              BranchSideFuncs: []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strtonum
      functionSourceFile: '/src/openssh/openbsd-compat/strtonum.c'
      linkageType:     InternalLinkage
      functionLinenumber: 36
      functionDepth:   0
      returnType:      'size_t '
      argCount:        4
      argTypes:
        - 'char *'
        - 'size_t '
        - 'size_t '
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         36
      ICount:          201
      EdgeCount:       47
      CyclomaticComplexity: 13
      functionsReached:
        - __errno_location
        - strtoll
      functionUses:    7
      BranchProfiles:
        - Branch String:   'strtonum.c:52,6'
          Branch Sides:
            - BranchSide:      'strtonum.c:53,9'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'strtonum.c:55,16'
              BranchSideFuncs:
                - strtoll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'strtonum.c:56,20'
          Branch Sides:
            - BranchSide:      'strtonum.c:56,24'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'strtonum.c:57,10'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'strtonum.c:56,7'
          Branch Sides:
            - BranchSide:      'strtonum.c:57,10'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'strtonum.c:58,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'strtonum.c:58,29'
          Branch Sides:
            - BranchSide:      'strtonum.c:58,32'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'strtonum.c:58,52'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'strtonum.c:58,49'
          Branch Sides:
            - BranchSide:      'strtonum.c:58,52'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'strtonum.c:59,10'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'strtonum.c:58,12'
          Branch Sides:
            - BranchSide:      'strtonum.c:59,10'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'strtonum.c:60,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'strtonum.c:60,29'
          Branch Sides:
            - BranchSide:      'strtonum.c:60,32'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'strtonum.c:60,52'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'strtonum.c:60,49'
          Branch Sides:
            - BranchSide:      'strtonum.c:60,52'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'strtonum.c:61,10'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'strtonum.c:63,6'
          Branch Sides:
            - BranchSide:      'strtonum.c:64,17'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'strtonum.c:65,13'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'strtonum.c:66,6'
          Branch Sides:
            - BranchSide:      'strtonum.c:66,6'
              BranchSideFuncs: []
            - BranchSide:      'strtonum.c:67,6'
              BranchSideFuncs: []
      Callsites:
        - Src:             'strtonum.c:50,14'
          Dst:             __errno_location
        - Src:             'strtonum.c:51,2'
          Dst:             __errno_location
        - Src:             'strtonum.c:55,8'
          Dst:             strtoll
        - Src:             'strtonum.c:58,32'
          Dst:             __errno_location
        - Src:             'strtonum.c:60,32'
          Dst:             __errno_location
        - Src:             'strtonum.c:65,2'
          Dst:             __errno_location
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strtoll
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'size_t '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char **'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    timingsafe_bcmp
      functionSourceFile: '/src/openssh/openbsd-compat/timingsafe_bcmp.c'
      linkageType:     InternalLinkage
      functionLinenumber: 25
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         5
      ICount:          58
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    7
      BranchProfiles:
        - Branch String:   'timingsafe_bcmp.c:29,2'
          Branch Sides:
            - BranchSide:      'timingsafe_bcmp.c:30,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'timingsafe_bcmp.c:31,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strvisx
      functionSourceFile: '/src/openssh/openbsd-compat/vis.c'
      linkageType:     InternalLinkage
      functionLinenumber: 237
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         10
      ICount:          83
      EdgeCount:       12
      CyclomaticComplexity: 4
      functionsReached:
        - vis
      functionUses:    0
      BranchProfiles:
        - Branch String:   'vis.c:241,2'
          Branch Sides:
            - BranchSide:      'vis.c:242,8'
              BranchSideFuncs:
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - vis
            - BranchSide:      'vis.c:245,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - vis
        - Branch String:   'vis.c:245,6'
          Branch Sides:
            - BranchSide:      'vis.c:245,6'
              BranchSideFuncs:
                - vis
            - BranchSide:      'vis.c:246,13'
              BranchSideFuncs:
                - vis
      Callsites:
        - Src:             'vis.c:243,9'
          Dst:             vis
        - Src:             'vis.c:246,9'
          Dst:             vis
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    vis
      functionSourceFile: '/src/openssh/openbsd-compat/vis.c'
      linkageType:     InternalLinkage
      functionLinenumber: 63
      functionDepth:   0
      returnType:      'char *'
      argCount:        4
      argTypes:
        - 'char *'
        - 'int '
        - 'int '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         113
      ICount:          663
      EdgeCount:       151
      CyclomaticComplexity: 40
      functionsReached:
        - __ctype_b_loc
      functionUses:    5
      BranchProfiles:
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:73,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:65,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:65,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:65,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:65,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:73,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:65,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:65,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:64,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:65,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:64,6'
          Branch Sides:
            - BranchSide:      'vis.c:65,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:73,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:65,17'
          Branch Sides:
            - BranchSide:      'vis.c:65,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:66,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:65,42'
          Branch Sides:
            - BranchSide:      'vis.c:66,8'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:67,8'
              BranchSideFuncs: []
        - Branch String:   'vis.c:66,18'
          Branch Sides:
            - BranchSide:      'vis.c:66,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:68,12'
              BranchSideFuncs: []
        - Branch String:   'vis.c:65,7'
          Branch Sides:
            - BranchSide:      'vis.c:67,8'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:68,12'
              BranchSideFuncs: []
        - Branch String:   'vis.c:73,6'
          Branch Sides:
            - BranchSide:      'vis.c:74,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:117,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:74,3'
          Branch Sides:
            - BranchSide:      'vis.c:76,8'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:80,8'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:84,8'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:88,8'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:92,8'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:96,8'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:100,8'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:104,8'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:108,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:116,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:110,8'
          Branch Sides:
            - BranchSide:      'vis.c:110,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:114,4'
              BranchSideFuncs: []
        - Branch String:   'vis.c:110,8'
          Branch Sides:
            - BranchSide:      'vis.c:111,9'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:114,4'
              BranchSideFuncs: []
        - Branch String:   'vis.c:117,26'
          Branch Sides:
            - BranchSide:      'vis.c:117,30'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:119,7'
              BranchSideFuncs: []
        - Branch String:   'vis.c:117,48'
          Branch Sides:
            - BranchSide:      'vis.c:118,8'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:119,7'
              BranchSideFuncs: []
        - Branch String:   'vis.c:118,25'
          Branch Sides:
            - BranchSide:      'vis.c:118,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:125,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:118,38'
          Branch Sides:
            - BranchSide:      'vis.c:118,41'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:119,7'
              BranchSideFuncs: []
        - Branch String:   'vis.c:118,50'
          Branch Sides:
            - BranchSide:      'vis.c:118,53'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:119,7'
              BranchSideFuncs: []
        - Branch String:   'vis.c:118,62'
          Branch Sides:
            - BranchSide:      'vis.c:118,65'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:119,7'
              BranchSideFuncs: []
        - Branch String:   'vis.c:117,6'
          Branch Sides:
            - BranchSide:      'vis.c:119,7'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:125,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:125,6'
          Branch Sides:
            - BranchSide:      'vis.c:126,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:127,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:127,6'
          Branch Sides:
            - BranchSide:      'vis.c:128,5'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:131,6'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:131,6'
          Branch Sides:
            - BranchSide:      'vis.c:132,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:138,7'
              BranchSideFuncs: []
        - Branch String:   'vis.c:133,7'
          Branch Sides:
            - BranchSide:      'vis.c:134,8'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:136,13'
              BranchSideFuncs: []
      Callsites:
        - Src:             'vis.c:64,6'
          Dst:             __ctype_b_loc
        - Src:             'vis.c:64,6'
          Dst:             __ctype_b_loc
        - Src:             'vis.c:131,6'
          Dst:             __ctype_b_loc
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    stravis
      functionSourceFile: '/src/openssh/openbsd-compat/vis.c'
      linkageType:     InternalLinkage
      functionLinenumber: 218
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char **'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         9
      ICount:          77
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - __errno_location
        - realloc
        - strlen
        - strvis
      functionUses:    0
      BranchProfiles:
        - Branch String:   'vis.c:223,6'
          Branch Sides:
            - BranchSide:      'vis.c:224,3'
              BranchSideFuncs: []
            - BranchSide:      'vis.c:225,15'
              BranchSideFuncs:
                - strvis
                - __errno_location
                - realloc
                - __errno_location
        - Branch String:   'vis.c:228,6'
          Branch Sides:
            - BranchSide:      'vis.c:229,11'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      'vis.c:232,10'
              BranchSideFuncs: []
      Callsites:
        - Src:             'vis.c:222,30'
          Dst:             strlen
        - Src:             'vis.c:222,8'
          Dst:             reallocarray
        - Src:             'vis.c:225,8'
          Dst:             strvis
        - Src:             'vis.c:226,11'
          Dst:             __errno_location
        - Src:             'vis.c:227,10'
          Dst:             realloc
        - Src:             'vis.c:230,3'
          Dst:             __errno_location
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strvis
      functionSourceFile: '/src/openssh/openbsd-compat/vis.c'
      linkageType:     InternalLinkage
      functionLinenumber: 162
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         6
      ICount:          58
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - vis
      functionUses:    1
      BranchProfiles:
        - Branch String:   'vis.c:166,2'
          Branch Sides:
            - BranchSide:      'vis.c:167,13'
              BranchSideFuncs:
                - vis
            - BranchSide:      'vis.c:168,3'
              BranchSideFuncs: []
      Callsites:
        - Src:             'vis.c:167,9'
          Dst:             vis
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    strnvis
      functionSourceFile: '/src/openssh/openbsd-compat/vis.c'
      linkageType:     InternalLinkage
      functionLinenumber: 175
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'size_t '
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         87
      ICount:          471
      EdgeCount:       119
      CyclomaticComplexity: 34
      functionsReached:
        - __ctype_b_loc
        - vis
      functionUses:    1
      BranchProfiles:
        - Branch String:   'vis.c:181,54'
          Branch Sides:
            - BranchSide:      'vis.c:181,57'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:181,2'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:181,2'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:206,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - vis
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:196,12'
              BranchSideFuncs:
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:183,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:183,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:183,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:183,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:196,12'
              BranchSideFuncs:
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:183,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:183,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:182,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:183,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:182,7'
          Branch Sides:
            - BranchSide:      'vis.c:183,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:196,12'
              BranchSideFuncs:
                - vis
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:183,18'
          Branch Sides:
            - BranchSide:      'vis.c:183,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:184,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:183,43'
          Branch Sides:
            - BranchSide:      'vis.c:184,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:186,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:184,19'
          Branch Sides:
            - BranchSide:      'vis.c:184,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:192,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:183,8'
          Branch Sides:
            - BranchSide:      'vis.c:186,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:192,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:186,9'
          Branch Sides:
            - BranchSide:      'vis.c:187,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - vis
            - BranchSide:      'vis.c:190,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   'vis.c:197,8'
          Branch Sides:
            - BranchSide:      'vis.c:198,12'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - vis
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __ctype_b_loc
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      'vis.c:201,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - vis
        - Branch String:   'vis.c:206,6'
          Branch Sides:
            - BranchSide:      'vis.c:207,4'
              BranchSideFuncs:
                - vis
            - BranchSide:      'vis.c:208,6'
              BranchSideFuncs:
                - vis
        - Branch String:   'vis.c:208,6'
          Branch Sides:
            - BranchSide:      'vis.c:208,6'
              BranchSideFuncs:
                - vis
            - BranchSide:      'vis.c:210,3'
              BranchSideFuncs:
                - vis
        - Branch String:   'vis.c:210,3'
          Branch Sides:
            - BranchSide:      'vis.c:211,15'
              BranchSideFuncs:
                - vis
            - BranchSide:      'vis.c:212,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'vis.c:182,7'
          Dst:             __ctype_b_loc
        - Src:             'vis.c:182,7'
          Dst:             __ctype_b_loc
        - Src:             'vis.c:196,8'
          Dst:             vis
        - Src:             'vis.c:211,11'
          Dst:             vis
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sys_tun_outfilter
      functionSourceFile: '/src/openssh/openbsd-compat/port-net.c'
      linkageType:     InternalLinkage
      functionLinenumber: 355
      functionDepth:   0
      returnType:      'char *'
      argCount:        4
      argTypes:
        - 'struct.ssh *'
        - 'struct.Channel *'
        - 'char **'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         8
      ICount:          75
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached:
        - ssh_err
        - sshbuf_get_string
        - sshfatal
      functionUses:    0
      BranchProfiles:
        - Branch String:   'port-net.c:361,6'
          Branch Sides:
            - BranchSide:      'port-net.c:362,3'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'port-net.c:363,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   'port-net.c:363,6'
          Branch Sides:
            - BranchSide:      'port-net.c:364,3'
              BranchSideFuncs: []
            - BranchSide:      'port-net.c:365,9'
              BranchSideFuncs: []
      Callsites:
        - Src:             'port-net.c:361,11'
          Dst:             sshbuf_get_string
        - Src:             'port-net.c:362,3'
          Dst:             ssh_err
        - Src:             'port-net.c:362,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sys_tun_infilter
      functionSourceFile: '/src/openssh/openbsd-compat/port-net.c'
      linkageType:     InternalLinkage
      functionLinenumber: 310
      functionDepth:   0
      returnType:      'int '
      argCount:        4
      argTypes:
        - 'struct.ssh *'
        - 'struct.Channel *'
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         15
      ICount:          146
      EdgeCount:       18
      CyclomaticComplexity: 5
      functionsReached:
        - ssh_err
        - sshbuf_put_string
        - sshfatal
      functionUses:    0
      BranchProfiles:
        - Branch String:   'port-net.c:323,6'
          Branch Sides:
            - BranchSide:      'port-net.c:324,3'
              BranchSideFuncs: []
            - BranchSide:      'port-net.c:325,8'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
        - Branch String:   'port-net.c:328,25'
          Branch Sides:
            - BranchSide:      'port-net.c:328,28'
              BranchSideFuncs: []
            - BranchSide:      'port-net.c:329,3'
              BranchSideFuncs: []
        - Branch String:   'port-net.c:328,6'
          Branch Sides:
            - BranchSide:      'port-net.c:329,3'
              BranchSideFuncs: []
            - BranchSide:      'port-net.c:331,2'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - sshbuf_put_string
                - __sanitizer_cov_trace_const_cmp4
                - ssh_err
                - sshfatal
        - Branch String:   'port-net.c:347,6'
          Branch Sides:
            - BranchSide:      'port-net.c:348,3'
              BranchSideFuncs:
                - ssh_err
                - sshfatal
            - BranchSide:      'port-net.c:349,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'port-net.c:347,11'
          Dst:             sshbuf_put_string
        - Src:             'port-net.c:348,3'
          Dst:             ssh_err
        - Src:             'port-net.c:348,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sys_tun_open
      functionSourceFile: '/src/openssh/openbsd-compat/port-net.c'
      linkageType:     InternalLinkage
      functionLinenumber: 145
      functionDepth:   0
      returnType:      'int '
      argCount:        3
      argTypes:
        - 'int '
        - 'int '
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         28
      ICount:          183
      EdgeCount:       37
      CyclomaticComplexity: 11
      functionsReached:
        - __errno_location
        - close
        - ioctl
        - open
        - snprintf
        - sshlog
        - strdup
      functionUses:    1
      BranchProfiles:
        - Branch String:   'port-net.c:150,6'
          Branch Sides:
            - BranchSide:      'port-net.c:151,4'
              BranchSideFuncs:
                - open
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memset.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ioctl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strdup
                - close
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'port-net.c:152,12'
              BranchSideFuncs:
                - open
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memset.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ioctl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strdup
                - close
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'port-net.c:152,6'
          Branch Sides:
            - BranchSide:      'port-net.c:153,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'port-net.c:158,2'
              BranchSideFuncs:
                - llvm.memset.p0i8.i64
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - ioctl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strdup
                - close
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'port-net.c:160,6'
          Branch Sides:
            - BranchSide:      'port-net.c:161,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ioctl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strdup
                - close
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'port-net.c:164,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - ioctl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strdup
                - close
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'port-net.c:169,6'
          Branch Sides:
            - BranchSide:      'port-net.c:170,7'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - snprintf
                - ioctl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strdup
                - close
                - sshlog
                - __errno_location
                - strerror
                - sshlog
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'port-net.c:178,12'
              BranchSideFuncs:
                - ioctl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strdup
                - close
                - sshlog
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'port-net.c:170,7'
          Branch Sides:
            - BranchSide:      'port-net.c:171,4'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - close
            - BranchSide:      'port-net.c:175,16'
              BranchSideFuncs:
                - snprintf
                - ioctl
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strdup
                - close
                - sshlog
                - __errno_location
                - strerror
                - sshlog
        - Branch String:   'port-net.c:178,6'
          Branch Sides:
            - BranchSide:      'port-net.c:179,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
                - close
            - BranchSide:      'port-net.c:184,6'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - sshlog
                - strdup
                - close
                - sshlog
        - Branch String:   'port-net.c:184,6'
          Branch Sides:
            - BranchSide:      'port-net.c:185,3'
              BranchSideFuncs:
                - sshlog
                - strdup
                - close
            - BranchSide:      'port-net.c:187,3'
              BranchSideFuncs:
                - sshlog
                - strdup
                - close
        - Branch String:   'port-net.c:189,21'
          Branch Sides:
            - BranchSide:      'port-net.c:189,46'
              BranchSideFuncs:
                - strdup
                - close
            - BranchSide:      'port-net.c:192,10'
              BranchSideFuncs: []
        - Branch String:   'port-net.c:189,6'
          Branch Sides:
            - BranchSide:      'port-net.c:190,3'
              BranchSideFuncs:
                - close
            - BranchSide:      'port-net.c:192,10'
              BranchSideFuncs: []
      Callsites:
        - Src:             'port-net.c:152,12'
          Dst:             open
        - Src:             'port-net.c:153,3'
          Dst:             __errno_location
        - Src:             'port-net.c:153,3'
          Dst:             strerror
        - Src:             'port-net.c:153,3'
          Dst:             sshlog
        - Src:             'port-net.c:171,4'
          Dst:             __errno_location
        - Src:             'port-net.c:171,4'
          Dst:             strerror
        - Src:             'port-net.c:171,4'
          Dst:             sshlog
        - Src:             'port-net.c:175,3'
          Dst:             snprintf
        - Src:             'port-net.c:178,6'
          Dst:             ioctl
        - Src:             'port-net.c:179,3'
          Dst:             __errno_location
        - Src:             'port-net.c:179,3'
          Dst:             strerror
        - Src:             'port-net.c:179,3'
          Dst:             sshlog
        - Src:             'port-net.c:185,3'
          Dst:             sshlog
        - Src:             'port-net.c:187,3'
          Dst:             sshlog
        - Src:             'port-net.c:189,35'
          Dst:             strdup
        - Src:             'port-net.c:195,2'
          Dst:             close
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    ioctl
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sys_valid_rdomain
      functionSourceFile: '/src/openssh/openbsd-compat/port-net.c'
      linkageType:     InternalLinkage
      functionLinenumber: 79
      functionDepth:   0
      returnType:      'int '
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         8
      ICount:          51
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - close
        - setsockopt
        - socket
        - strlen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'port-net.c:87,6'
          Branch Sides:
            - BranchSide:      'port-net.c:88,3'
              BranchSideFuncs: []
            - BranchSide:      'port-net.c:89,17'
              BranchSideFuncs:
                - strlen
                - setsockopt
                - __sanitizer_cov_trace_const_cmp4
                - close
                - close
        - Branch String:   'port-net.c:89,6'
          Branch Sides:
            - BranchSide:      'port-net.c:91,9'
              BranchSideFuncs:
                - close
            - BranchSide:      'port-net.c:94,8'
              BranchSideFuncs:
                - close
      Callsites:
        - Src:             'port-net.c:87,12'
          Dst:             socket
        - Src:             'port-net.c:90,12'
          Dst:             strlen
        - Src:             'port-net.c:89,6'
          Dst:             setsockopt
        - Src:             'port-net.c:91,3'
          Dst:             close
        - Src:             'port-net.c:94,2'
          Dst:             close
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sys_set_rdomain
      functionSourceFile: '/src/openssh/openbsd-compat/port-net.c'
      linkageType:     InternalLinkage
      functionLinenumber: 67
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'int '
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         6
      ICount:          44
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - __errno_location
        - setsockopt
        - sshlog
        - strlen
      functionUses:    1
      BranchProfiles:
        - Branch String:   'port-net.c:68,6'
          Branch Sides:
            - BranchSide:      'port-net.c:70,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'port-net.c:74,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'port-net.c:69,12'
          Dst:             strlen
        - Src:             'port-net.c:68,6'
          Dst:             setsockopt
        - Src:             'port-net.c:70,3'
          Dst:             __errno_location
        - Src:             'port-net.c:70,3'
          Dst:             strerror
        - Src:             'port-net.c:70,3'
          Dst:             sshlog
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    sys_get_rdomain
      functionSourceFile: '/src/openssh/openbsd-compat/port-net.c'
      linkageType:     InternalLinkage
      functionLinenumber: 52
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'int '
      constantsTouched: []
      argNames:
        - ''
      BBCount:         6
      ICount:          48
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - __errno_location
        - getsockopt
        - sshlog
        - strdup
      functionUses:    1
      BranchProfiles:
        - Branch String:   'port-net.c:56,6'
          Branch Sides:
            - BranchSide:      'port-net.c:57,3'
              BranchSideFuncs:
                - __errno_location
                - strerror
                - sshlog
            - BranchSide:      'port-net.c:61,6'
              BranchSideFuncs:
                - strdup
      Callsites:
        - Src:             'port-net.c:56,6'
          Dst:             getsockopt
        - Src:             'port-net.c:57,3'
          Dst:             __errno_location
        - Src:             'port-net.c:57,3'
          Dst:             strerror
        - Src:             'port-net.c:57,3'
          Dst:             sshlog
        - Src:             'port-net.c:62,9'
          Dst:             strdup
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    _ssh_compat_getentropy
      functionSourceFile: '/src/openssh/openbsd-compat/bsd-getentropy.c'
      linkageType:     InternalLinkage
      functionLinenumber: 43
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'size_t '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         5
      ICount:          33
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached:
        - ERR_get_error
        - RAND_bytes
        - sshfatal
      functionUses:    1
      BranchProfiles:
        - Branch String:   'bsd-getentropy.c:45,6'
          Branch Sides:
            - BranchSide:      'bsd-getentropy.c:46,3'
              BranchSideFuncs:
                - ERR_get_error
                - sshfatal
            - BranchSide:      'bsd-getentropy.c:82,2'
              BranchSideFuncs: []
      Callsites:
        - Src:             'bsd-getentropy.c:45,6'
          Dst:             RAND_bytes
        - Src:             'bsd-getentropy.c:46,3'
          Dst:             ERR_get_error
        - Src:             'bsd-getentropy.c:46,3'
          Dst:             sshfatal
...
---
Fuzzer filename: '/src/openssh/regress/misc/fuzz-harness/kex_fuzz.cc'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    RAND_bytes
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int '
      argCount:        2
      argTypes:
        - 'char *'
        - 'int '
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
