Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues
Report generation date: 2025-06-13

Project overview: php

High level conclusions

Reachability and coverage overview

Functions statically reachable by fuzzers
6.0%
1044 / 17979
Cyclomatic complexity statically reachable by fuzzers
8.0%
10303 / 135775
Runtime code coverage of functions
21.0%
3695 / 17979

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

Fuzzer details

Fuzzer: sapi/fuzzer/fuzzer-parser.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 982 23.5%
gold [1:9] 341 8.17%
yellow [10:29] 279 6.69%
greenyellow [30:49] 159 3.81%
lawngreen 50+ 2409 57.7%
All colors 4170 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
139 2882 php_error_docref call site: 02882 php_com_invoke_helper
63 2760 zend_fetch_dimension_address_read call site: 02760 php_com_do_invoke_by_id
40 1211 convert_to_double call site: 01211 convert_scalar_to_number
36 2845 zend_hash_move_forward_ex call site: 02845 safe_array_from_zval
25 42 zend_hash_real_init_mixed_ex call site: 00042
24 1866 zend_call_function call site: 01866 zend_throw_error
23 379 gc_grow_root_buffer call site: 00379 gc_grow_root_buffer
21 3871 php_register_variable_ex call site: 03871 zend_array_destroy
20 197 init_executor call site: 00197
20 3896 php_is_forbidden_variable_name call site: 03896 zval_ptr_dtor_nogc
17 3585 zend_call_function call site: 03585 zend_timeout
16 349 gc_possible_root call site: 00349 gc_possible_root_when_full

Runtime coverage analysis

Covered functions
5501
Functions that are reachable but not covered
1362
Reachable functions
1808
Percentage of reachable functions covered
24.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-parser.c 2
sapi/fuzzer/fuzzer-sapi.c 15
main/main.c 21
Zend/zend_string.c 9
Zend/zend_hash.c 92
main/output.c 3
Zend/zend.c 38
Zend/zend_virtual_cwd.c 2
Zend/zend_gc.c 27
ext/pcre/pcre2lib/sljit/sljitNativeX86_common.c 1
ext/pcre/pcre2lib/sljit/sljitNativeMIPS_common.c 1
Zend/zend_execute_API.c 114
Zend/zend_float.c 3
Zend/zend_execute.c 186
Zend/zend_llist.c 3
Zend/zend_objects_API.c 24
Zend/zend_lazy_objects.c 14
Zend/zend_max_execution_timer.c 10
ext/gd/libgd/webpng.c 1
Zend/zend_fibers.c 3
Zend/zend_weakrefs.c 12
Zend/zend_extensions.c 2
Zend/zend_observer.c 2
main/SAPI.c 17
Zend/zend_hash.h 34
Zend/zend_signal.c 5
Zend/zend_atomic.h 2
Zend/zend_variables.c 3
Zend/zend_variables.h 12
Zend/zend_gc.h 8
main/php_variables.c 53
Zend/zend_compile.c 26
Zend/zend_string.h 20
Zend/zend_API.c 52
Zend/zend_exceptions.c 58
Zend/zend_operators.h 28
Zend/zend_operators.c 61
ext/xmlreader/php_xmlreader.c 24
Zend/zend_object_handlers.c 125
ext/ffi/ffi.c 2
Zend/zend_compile.h 1
ext/pgsql/pgsql.c 13
ext/opcache/jit/zend_jit_helpers.c 1
Zend/zend_objects.c 32
Zend/zend_weakrefs.h 1
Zend/zend_lazy_objects.h 3
Zend/zend_objects_API.h 3
ext/opcache/ZendAccelerator.c 4
Zend/zend_constants.c 48
Zend/zend_execute.h 47
ext/simplexml/simplexml.c 7
Zend/zend_API.h 2
ext/xmlreader/php_xmlreader.h 1
Zend/zend_vm_def.h 16
Zend/zend_arena.h 3
Zend/zend_inheritance.c 1
Zend/zend_ast.c 99
Zend/zend_ast.h 3
ext/spl/spl_array.c 21
Zend/zend_object_handlers.h 4
Zend/zend_property_hooks.c 25
ext/snmp/snmp.c 7
ext/snmp/php_snmp.h 1
ext/com_dotnet/com_handlers.c 15
ext/com_dotnet/com_com.c 19
ext/com_dotnet/com_variant.c 35
ext/com_dotnet/php_com_dotnet_internal.h 2
ext/com_dotnet/com_wrapper.c 38
ext/com_dotnet/com_olechar.c 7
win32/winutil.c 6
win32/codepage.h 1
win32/codepage.c 8
ext/com_dotnet/com_misc.c 22
ext/com_dotnet/com_saproxy.c 7
Zend/zend_enum.c 5
Zend/zend_closures.c 19
Zend/zend_exceptions.h 2
win32/signal.c 1
Zend/zend_stack.c 3
Zend/zend_observer.h 2
Zend/zend_stream.c 11
main/php_glob.c 1
ext/pdo_dblib/dblib_driver.c 4
ext/pdo_dblib/pdo_dblib.c 1
Zend/zend_vm_execute.h 11
Zend/zend_opcode.c 22

Fuzzer: sapi/fuzzer/fuzzer-execute.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 983 23.5%
gold [1:9] 341 8.17%
yellow [10:29] 279 6.69%
greenyellow [30:49] 159 3.81%
lawngreen 50+ 2408 57.7%
All colors 4170 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
139 2882 php_error_docref call site: 02882 php_com_invoke_helper
63 2760 zend_fetch_dimension_address_read call site: 02760 php_com_do_invoke_by_id
40 1211 convert_to_double call site: 01211 convert_scalar_to_number
36 2845 zend_hash_move_forward_ex call site: 02845 safe_array_from_zval
25 42 zend_hash_real_init_mixed_ex call site: 00042
24 1866 zend_call_function call site: 01866 zend_throw_error
23 379 gc_grow_root_buffer call site: 00379 gc_grow_root_buffer
21 3871 php_register_variable_ex call site: 03871 zend_array_destroy
20 197 init_executor call site: 00197
20 3896 php_is_forbidden_variable_name call site: 03896 zval_ptr_dtor_nogc
17 3585 zend_call_function call site: 03585 zend_timeout
16 349 gc_possible_root call site: 00349 gc_possible_root_when_full

Runtime coverage analysis

Covered functions
5501
Functions that are reachable but not covered
1362
Reachable functions
1808
Percentage of reachable functions covered
24.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-execute.c 2
sapi/fuzzer/fuzzer-sapi.c 15
main/main.c 21
Zend/zend_string.c 9
Zend/zend_hash.c 92
main/output.c 3
Zend/zend.c 38
Zend/zend_virtual_cwd.c 2
Zend/zend_gc.c 27
ext/pcre/pcre2lib/sljit/sljitNativeX86_common.c 1
ext/pcre/pcre2lib/sljit/sljitNativeMIPS_common.c 1
Zend/zend_execute_API.c 114
Zend/zend_float.c 3
Zend/zend_execute.c 186
Zend/zend_llist.c 3
Zend/zend_objects_API.c 24
Zend/zend_lazy_objects.c 14
Zend/zend_max_execution_timer.c 10
ext/gd/libgd/webpng.c 1
Zend/zend_fibers.c 3
Zend/zend_weakrefs.c 12
Zend/zend_extensions.c 2
Zend/zend_observer.c 2
main/SAPI.c 17
Zend/zend_hash.h 34
Zend/zend_signal.c 5
Zend/zend_atomic.h 2
Zend/zend_variables.c 3
Zend/zend_variables.h 12
Zend/zend_gc.h 8
main/php_variables.c 53
Zend/zend_compile.c 26
Zend/zend_string.h 20
Zend/zend_API.c 52
Zend/zend_exceptions.c 58
Zend/zend_operators.h 28
Zend/zend_operators.c 61
ext/xmlreader/php_xmlreader.c 24
Zend/zend_object_handlers.c 125
ext/ffi/ffi.c 2
Zend/zend_compile.h 1
ext/pgsql/pgsql.c 13
ext/opcache/jit/zend_jit_helpers.c 1
Zend/zend_objects.c 32
Zend/zend_weakrefs.h 1
Zend/zend_lazy_objects.h 3
Zend/zend_objects_API.h 3
ext/opcache/ZendAccelerator.c 4
Zend/zend_constants.c 48
Zend/zend_execute.h 47
ext/simplexml/simplexml.c 7
Zend/zend_API.h 2
ext/xmlreader/php_xmlreader.h 1
Zend/zend_vm_def.h 16
Zend/zend_arena.h 3
Zend/zend_inheritance.c 1
Zend/zend_ast.c 99
Zend/zend_ast.h 3
ext/spl/spl_array.c 21
Zend/zend_object_handlers.h 4
Zend/zend_property_hooks.c 25
ext/snmp/snmp.c 7
ext/snmp/php_snmp.h 1
ext/com_dotnet/com_handlers.c 15
ext/com_dotnet/com_com.c 19
ext/com_dotnet/com_variant.c 35
ext/com_dotnet/php_com_dotnet_internal.h 2
ext/com_dotnet/com_wrapper.c 38
ext/com_dotnet/com_olechar.c 7
win32/winutil.c 6
win32/codepage.h 1
win32/codepage.c 8
ext/com_dotnet/com_misc.c 22
ext/com_dotnet/com_saproxy.c 7
Zend/zend_enum.c 5
Zend/zend_closures.c 19
Zend/zend_exceptions.h 2
win32/signal.c 1
Zend/zend_stack.c 3
Zend/zend_observer.h 2
Zend/zend_stream.c 11
main/php_glob.c 1
ext/pdo_dblib/dblib_driver.c 4
ext/pdo_dblib/pdo_dblib.c 1
Zend/zend_vm_execute.h 11
Zend/zend_opcode.c 22

Fuzzer: sapi/fuzzer/fuzzer-tracing-jit.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 982 23.5%
gold [1:9] 341 8.16%
yellow [10:29] 279 6.68%
greenyellow [30:49] 159 3.80%
lawngreen 50+ 2415 57.8%
All colors 4176 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
139 2884 php_error_docref call site: 02884 php_com_invoke_helper
63 2762 zend_fetch_dimension_address_read call site: 02762 php_com_do_invoke_by_id
40 1213 convert_to_double call site: 01213 convert_scalar_to_number
36 2847 zend_hash_move_forward_ex call site: 02847 safe_array_from_zval
25 44 zend_hash_real_init_mixed_ex call site: 00044
24 1868 zend_call_function call site: 01868 zend_throw_error
23 381 gc_grow_root_buffer call site: 00381 gc_grow_root_buffer
21 3873 php_register_variable_ex call site: 03873 zend_array_destroy
20 199 init_executor call site: 00199
20 3898 php_is_forbidden_variable_name call site: 03898 zval_ptr_dtor_nogc
17 3587 zend_call_function call site: 03587 zend_timeout
16 351 gc_possible_root call site: 00351 gc_possible_root_when_full

Runtime coverage analysis

Covered functions
5501
Functions that are reachable but not covered
1363
Reachable functions
1810
Percentage of reachable functions covered
24.7%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-tracing-jit.c 5
sapi/fuzzer/fuzzer-sapi.c 15
main/main.c 21
Zend/zend_string.c 9
Zend/zend_hash.c 92
main/output.c 3
Zend/zend.c 38
Zend/zend_virtual_cwd.c 2
Zend/zend_gc.c 27
ext/pcre/pcre2lib/sljit/sljitNativeX86_common.c 1
ext/pcre/pcre2lib/sljit/sljitNativeMIPS_common.c 1
Zend/zend_execute_API.c 114
Zend/zend_float.c 3
Zend/zend_execute.c 186
Zend/zend_llist.c 3
Zend/zend_objects_API.c 24
Zend/zend_lazy_objects.c 14
Zend/zend_max_execution_timer.c 10
ext/gd/libgd/webpng.c 1
Zend/zend_fibers.c 3
Zend/zend_weakrefs.c 12
Zend/zend_extensions.c 2
Zend/zend_observer.c 2
main/SAPI.c 17
Zend/zend_hash.h 34
Zend/zend_signal.c 5
Zend/zend_atomic.h 2
Zend/zend_variables.c 3
Zend/zend_variables.h 12
Zend/zend_gc.h 8
main/php_variables.c 53
Zend/zend_compile.c 26
Zend/zend_string.h 20
Zend/zend_API.c 52
Zend/zend_exceptions.c 58
Zend/zend_operators.h 28
Zend/zend_operators.c 61
ext/xmlreader/php_xmlreader.c 24
Zend/zend_object_handlers.c 125
ext/ffi/ffi.c 2
Zend/zend_compile.h 1
ext/pgsql/pgsql.c 13
ext/opcache/jit/zend_jit_helpers.c 1
Zend/zend_objects.c 32
Zend/zend_weakrefs.h 1
Zend/zend_lazy_objects.h 3
Zend/zend_objects_API.h 3
ext/opcache/ZendAccelerator.c 4
Zend/zend_constants.c 48
Zend/zend_execute.h 47
ext/simplexml/simplexml.c 7
Zend/zend_API.h 2
ext/xmlreader/php_xmlreader.h 1
Zend/zend_vm_def.h 16
Zend/zend_arena.h 3
Zend/zend_inheritance.c 1
Zend/zend_ast.c 99
Zend/zend_ast.h 3
ext/spl/spl_array.c 21
Zend/zend_object_handlers.h 4
Zend/zend_property_hooks.c 25
ext/snmp/snmp.c 7
ext/snmp/php_snmp.h 1
ext/com_dotnet/com_handlers.c 15
ext/com_dotnet/com_com.c 19
ext/com_dotnet/com_variant.c 35
ext/com_dotnet/php_com_dotnet_internal.h 2
ext/com_dotnet/com_wrapper.c 38
ext/com_dotnet/com_olechar.c 7
win32/winutil.c 6
win32/codepage.h 1
win32/codepage.c 8
ext/com_dotnet/com_misc.c 22
ext/com_dotnet/com_saproxy.c 7
Zend/zend_enum.c 5
Zend/zend_closures.c 19
Zend/zend_exceptions.h 2
win32/signal.c 1
Zend/zend_stack.c 3
Zend/zend_observer.h 2
Zend/zend_stream.c 11
main/php_glob.c 1
ext/pdo_dblib/dblib_driver.c 4
ext/pdo_dblib/pdo_dblib.c 1
Zend/zend_vm_execute.h 11
Zend/zend_opcode.c 22

Fuzzer: sapi/fuzzer/fuzzer-json.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 216 36.6%
gold [1:9] 11 1.86%
yellow [10:29] 7 1.18%
greenyellow [30:49] 0 0.0%
lawngreen 50+ 356 60.3%
All colors 590 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
25 38 zend_hash_real_init_mixed_ex call site: 00038
23 375 gc_grow_root_buffer call site: 00375 gc_grow_root_buffer
20 193 init_executor call site: 00193
16 345 gc_possible_root call site: 00345 gc_possible_root_when_full
15 272 zend_hash_str_find_ptr call site: 00272
12 502 zend_observer_fcall_end_all call site: 00502 call_end_observers
9 71 zend_interned_strings_activate call site: 00071
8 260 sapi_activate call site: 00260 sapi_read_post_data
7 291 zend_signal_activate call site: 00291 zend_signal_register
7 450 zend_string_efree call site: 00450
7 462 php_build_argv call site: 00462
6 22 zend_hash_real_init_mixed_ex call site: 00022

Runtime coverage analysis

Covered functions
5501
Functions that are reachable but not covered
140
Reachable functions
212
Percentage of reachable functions covered
33.96%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-json.c 8
sapi/fuzzer/fuzzer-sapi.c 2
main/main.c 23
Zend/zend_string.c 4
Zend/zend_hash.c 43
main/output.c 3
Zend/zend.c 13
Zend/zend_virtual_cwd.c 2
Zend/zend_gc.c 27
ext/pcre/pcre2lib/sljit/sljitNativeX86_common.c 1
ext/pcre/pcre2lib/sljit/sljitNativeMIPS_common.c 1
Zend/zend_execute_API.c 23
Zend/zend_float.c 3
Zend/zend_execute.c 2
Zend/zend_llist.c 1
Zend/zend_objects_API.c 9
Zend/zend_lazy_objects.c 1
Zend/zend_max_execution_timer.c 10
ext/gd/libgd/webpng.c 1
Zend/zend_fibers.c 3
Zend/zend_weakrefs.c 2
Zend/zend_extensions.c 2
Zend/zend_observer.c 10
main/SAPI.c 17
Zend/zend_hash.h 3
Zend/zend_signal.c 5
Zend/zend_atomic.h 1
Zend/zend_variables.c 3
Zend/zend_variables.h 6
Zend/zend_gc.h 7
main/php_variables.c 21
Zend/zend_compile.c 2
Zend/zend_string.h 7
Zend/zend_API.c 3

Fuzzer: sapi/fuzzer/fuzzer-unserializehash.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 935 20.0%
gold [1:9] 342 7.34%
yellow [10:29] 311 6.67%
greenyellow [30:49] 192 4.12%
lawngreen 50+ 2879 61.7%
All colors 4659 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
139 2841 php_error_docref call site: 02841 php_com_invoke_helper
63 2719 zend_fetch_dimension_address_read call site: 02719 php_com_do_invoke_by_id
40 1319 convert_to_double call site: 01319 convert_scalar_to_number
36 2804 zend_hash_move_forward_ex call site: 02804 safe_array_from_zval
25 38 zend_hash_real_init_mixed_ex call site: 00038
24 1964 zend_call_function call site: 01964 zend_throw_error
23 375 gc_grow_root_buffer call site: 00375 gc_grow_root_buffer
20 193 init_executor call site: 00193
17 3544 zend_call_function call site: 03544 zend_timeout
16 345 gc_possible_root call site: 00345 gc_possible_root_when_full
15 272 zend_hash_str_find_ptr call site: 00272
12 1293 zval_get_long_func call site: 01293 zval_ptr_dtor

Runtime coverage analysis

Covered functions
5501
Functions that are reachable but not covered
1396
Reachable functions
1866
Percentage of reachable functions covered
25.19%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-unserializehash.c 17
sapi/fuzzer/fuzzer-sapi.c 14
main/main.c 26
Zend/zend_string.c 9
Zend/zend_hash.c 77
main/output.c 3
Zend/zend.c 38
Zend/zend_virtual_cwd.c 2
Zend/zend_gc.c 114
ext/pcre/pcre2lib/sljit/sljitNativeX86_common.c 1
ext/pcre/pcre2lib/sljit/sljitNativeMIPS_common.c 1
Zend/zend_execute_API.c 104
Zend/zend_float.c 3
Zend/zend_execute.c 182
Zend/zend_llist.c 1
Zend/zend_objects_API.c 24
Zend/zend_lazy_objects.c 17
Zend/zend_max_execution_timer.c 10
ext/gd/libgd/webpng.c 1
Zend/zend_fibers.c 11
Zend/zend_weakrefs.c 21
Zend/zend_extensions.c 2
Zend/zend_observer.c 2
main/SAPI.c 17
Zend/zend_hash.h 24
Zend/zend_signal.c 5
Zend/zend_atomic.h 2
Zend/zend_variables.c 3
Zend/zend_variables.h 12
Zend/zend_gc.h 11
main/php_variables.c 21
Zend/zend_compile.c 26
Zend/zend_string.h 20
Zend/zend_API.c 54
ext/standard/var.c 48
Zend/zend_enum.h 2
Zend/zend_object_handlers.c 125
ext/spl/spl_array.c 21
ext/xmlreader/php_xmlreader.c 24
ext/xmlreader/php_xmlreader.h 1
Zend/zend_object_handlers.h 4
Zend/zend_lazy_objects.h 3
Zend/zend_exceptions.c 58
Zend/zend_operators.h 28
Zend/zend_operators.c 61
ext/ffi/ffi.c 2
Zend/zend_compile.h 1
ext/pgsql/pgsql.c 13
ext/opcache/jit/zend_jit_helpers.c 1
Zend/zend_objects.c 32
Zend/zend_weakrefs.h 1
Zend/zend_objects_API.h 12
ext/opcache/ZendAccelerator.c 4
Zend/zend_constants.c 48
Zend/zend_execute.h 47
ext/simplexml/simplexml.c 7
Zend/zend_API.h 2
Zend/zend_vm_def.h 16
Zend/zend_arena.h 3
Zend/zend_inheritance.c 1
Zend/zend_ast.c 99
Zend/zend_ast.h 3
ext/com_dotnet/com_handlers.c 15
ext/com_dotnet/com_com.c 19
ext/com_dotnet/com_variant.c 35
ext/com_dotnet/php_com_dotnet_internal.h 2
ext/com_dotnet/com_wrapper.c 42
ext/com_dotnet/com_olechar.c 7
win32/winutil.c 6
win32/codepage.h 1
win32/codepage.c 8
ext/com_dotnet/com_misc.c 22
ext/com_dotnet/com_saproxy.c 7
Zend/zend_enum.c 5
Zend/zend_closures.c 19
Zend/zend_exceptions.h 2
win32/signal.c 1
Zend/zend_stack.c 3
Zend/zend_observer.h 2
Zend/zend_property_hooks.c 25
ext/snmp/snmp.c 7
ext/snmp/php_snmp.h 1

Fuzzer: sapi/fuzzer/fuzzer-function-jit.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 983 23.5%
gold [1:9] 341 8.16%
yellow [10:29] 279 6.68%
greenyellow [30:49] 159 3.80%
lawngreen 50+ 2413 57.7%
All colors 4175 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
139 2884 php_error_docref call site: 02884 php_com_invoke_helper
63 2762 zend_fetch_dimension_address_read call site: 02762 php_com_do_invoke_by_id
40 1213 convert_to_double call site: 01213 convert_scalar_to_number
36 2847 zend_hash_move_forward_ex call site: 02847 safe_array_from_zval
25 44 zend_hash_real_init_mixed_ex call site: 00044
24 1868 zend_call_function call site: 01868 zend_throw_error
23 381 gc_grow_root_buffer call site: 00381 gc_grow_root_buffer
21 3873 php_register_variable_ex call site: 03873 zend_array_destroy
20 199 init_executor call site: 00199
20 3898 php_is_forbidden_variable_name call site: 03898 zval_ptr_dtor_nogc
17 3587 zend_call_function call site: 03587 zend_timeout
16 351 gc_possible_root call site: 00351 gc_possible_root_when_full

Runtime coverage analysis

Covered functions
5501
Functions that are reachable but not covered
1363
Reachable functions
1810
Percentage of reachable functions covered
24.7%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-function-jit.c 5
sapi/fuzzer/fuzzer-sapi.c 15
main/main.c 21
Zend/zend_string.c 9
Zend/zend_hash.c 92
main/output.c 3
Zend/zend.c 38
Zend/zend_virtual_cwd.c 2
Zend/zend_gc.c 27
ext/pcre/pcre2lib/sljit/sljitNativeX86_common.c 1
ext/pcre/pcre2lib/sljit/sljitNativeMIPS_common.c 1
Zend/zend_execute_API.c 114
Zend/zend_float.c 3
Zend/zend_execute.c 186
Zend/zend_llist.c 3
Zend/zend_objects_API.c 24
Zend/zend_lazy_objects.c 14
Zend/zend_max_execution_timer.c 10
ext/gd/libgd/webpng.c 1
Zend/zend_fibers.c 3
Zend/zend_weakrefs.c 12
Zend/zend_extensions.c 2
Zend/zend_observer.c 2
main/SAPI.c 17
Zend/zend_hash.h 34
Zend/zend_signal.c 5
Zend/zend_atomic.h 2
Zend/zend_variables.c 3
Zend/zend_variables.h 12
Zend/zend_gc.h 8
main/php_variables.c 53
Zend/zend_compile.c 26
Zend/zend_string.h 20
Zend/zend_API.c 52
Zend/zend_exceptions.c 58
Zend/zend_operators.h 28
Zend/zend_operators.c 61
ext/xmlreader/php_xmlreader.c 24
Zend/zend_object_handlers.c 125
ext/ffi/ffi.c 2
Zend/zend_compile.h 1
ext/pgsql/pgsql.c 13
ext/opcache/jit/zend_jit_helpers.c 1
Zend/zend_objects.c 32
Zend/zend_weakrefs.h 1
Zend/zend_lazy_objects.h 3
Zend/zend_objects_API.h 3
ext/opcache/ZendAccelerator.c 4
Zend/zend_constants.c 48
Zend/zend_execute.h 47
ext/simplexml/simplexml.c 7
Zend/zend_API.h 2
ext/xmlreader/php_xmlreader.h 1
Zend/zend_vm_def.h 16
Zend/zend_arena.h 3
Zend/zend_inheritance.c 1
Zend/zend_ast.c 99
Zend/zend_ast.h 3
ext/spl/spl_array.c 21
Zend/zend_object_handlers.h 4
Zend/zend_property_hooks.c 25
ext/snmp/snmp.c 7
ext/snmp/php_snmp.h 1
ext/com_dotnet/com_handlers.c 15
ext/com_dotnet/com_com.c 19
ext/com_dotnet/com_variant.c 35
ext/com_dotnet/php_com_dotnet_internal.h 2
ext/com_dotnet/com_wrapper.c 38
ext/com_dotnet/com_olechar.c 7
win32/winutil.c 6
win32/codepage.h 1
win32/codepage.c 8
ext/com_dotnet/com_misc.c 22
ext/com_dotnet/com_saproxy.c 7
Zend/zend_enum.c 5
Zend/zend_closures.c 19
Zend/zend_exceptions.h 2
win32/signal.c 1
Zend/zend_stack.c 3
Zend/zend_observer.h 2
Zend/zend_stream.c 11
main/php_glob.c 1
ext/pdo_dblib/dblib_driver.c 4
ext/pdo_dblib/pdo_dblib.c 1
Zend/zend_vm_execute.h 11
Zend/zend_opcode.c 22

Fuzzer: sapi/fuzzer/fuzzer-mbstring.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 966 21.2%
gold [1:9] 340 7.47%
yellow [10:29] 305 6.70%
greenyellow [30:49] 190 4.17%
lawngreen 50+ 2750 60.4%
All colors 4551 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
139 2666 php_error_docref call site: 02666 php_com_invoke_helper
63 2544 zend_fetch_dimension_address_read call site: 02544 php_com_do_invoke_by_id
40 1250 convert_to_double call site: 01250 convert_scalar_to_number
36 2629 zend_hash_move_forward_ex call site: 02629 safe_array_from_zval
34 501 php_request_startup call site: 00501 convert_encoding
25 50 zend_hash_real_init_mixed_ex call site: 00050
24 1643 zend_call_function call site: 01643 zend_throw_error
23 387 gc_grow_root_buffer call site: 00387 gc_grow_root_buffer
20 205 init_executor call site: 00205
17 3383 zend_call_function call site: 03383 zend_timeout
16 357 gc_possible_root call site: 00357 gc_possible_root_when_full
15 284 zend_hash_str_find_ptr call site: 00284

Runtime coverage analysis

Covered functions
5501
Functions that are reachable but not covered
1393
Reachable functions
1848
Percentage of reachable functions covered
24.62%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-mbstring.c 15
ext/mbstring/libmbfl/mbfl/mbfl_encoding.c 5
sapi/fuzzer/fuzzer-sapi.c 6
main/main.c 21
Zend/zend_string.c 9
Zend/zend_hash.c 74
main/output.c 3
Zend/zend.c 38
Zend/zend_virtual_cwd.c 2
Zend/zend_gc.c 114
ext/pcre/pcre2lib/sljit/sljitNativeX86_common.c 1
ext/pcre/pcre2lib/sljit/sljitNativeMIPS_common.c 1
Zend/zend_execute_API.c 104
Zend/zend_float.c 3
Zend/zend_execute.c 182
Zend/zend_llist.c 1
Zend/zend_objects_API.c 24
Zend/zend_lazy_objects.c 14
Zend/zend_max_execution_timer.c 10
ext/gd/libgd/webpng.c 1
Zend/zend_fibers.c 11
Zend/zend_weakrefs.c 21
Zend/zend_extensions.c 2
Zend/zend_observer.c 2
main/SAPI.c 17
Zend/zend_hash.h 24
Zend/zend_signal.c 5
Zend/zend_atomic.h 2
Zend/zend_variables.c 3
Zend/zend_variables.h 12
Zend/zend_gc.h 11
main/php_variables.c 21
Zend/zend_compile.c 26
Zend/zend_string.h 20
Zend/zend_API.c 54
ext/mbstring/libmbfl/mbfl/mbfl_encoding.h 9
ext/com_dotnet/com_wrapper.c 42
ext/xmlreader/php_xmlreader.c 24
ext/xmlreader/php_xmlreader.h 1
Zend/zend_exceptions.c 58
Zend/zend_operators.h 28
Zend/zend_operators.c 61
Zend/zend_object_handlers.c 125
ext/ffi/ffi.c 2
Zend/zend_compile.h 1
ext/pgsql/pgsql.c 13
ext/opcache/jit/zend_jit_helpers.c 1
Zend/zend_objects.c 32
Zend/zend_weakrefs.h 1
Zend/zend_lazy_objects.h 3
Zend/zend_objects_API.h 8
ext/opcache/ZendAccelerator.c 4
Zend/zend_constants.c 48
Zend/zend_execute.h 47
ext/simplexml/simplexml.c 7
Zend/zend_API.h 2
Zend/zend_vm_def.h 16
Zend/zend_arena.h 3
Zend/zend_inheritance.c 1
Zend/zend_ast.c 99
Zend/zend_ast.h 3
ext/spl/spl_array.c 21
Zend/zend_object_handlers.h 4
Zend/zend_property_hooks.c 25
ext/snmp/snmp.c 7
ext/snmp/php_snmp.h 1
ext/com_dotnet/com_handlers.c 15
ext/com_dotnet/com_com.c 19
ext/com_dotnet/com_variant.c 35
ext/com_dotnet/php_com_dotnet_internal.h 2
ext/com_dotnet/com_olechar.c 7
win32/winutil.c 6
win32/codepage.h 1
win32/codepage.c 8
ext/com_dotnet/com_misc.c 22
ext/com_dotnet/com_saproxy.c 7
Zend/zend_enum.c 5
Zend/zend_closures.c 19
Zend/zend_exceptions.h 2
win32/signal.c 1
Zend/zend_stack.c 3
Zend/zend_observer.h 2

Fuzzer: sapi/fuzzer/fuzzer-unserialize.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 920 20.3%
gold [1:9] 340 7.53%
yellow [10:29] 305 6.75%
greenyellow [30:49] 190 4.20%
lawngreen 50+ 2759 61.1%
All colors 4514 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
139 2629 php_error_docref call site: 02629 php_com_invoke_helper
63 2507 zend_fetch_dimension_address_read call site: 02507 php_com_do_invoke_by_id
40 1213 convert_to_double call site: 01213 convert_scalar_to_number
36 2592 zend_hash_move_forward_ex call site: 02592 safe_array_from_zval
25 38 zend_hash_real_init_mixed_ex call site: 00038
24 1606 zend_call_function call site: 01606 zend_throw_error
23 375 gc_grow_root_buffer call site: 00375 gc_grow_root_buffer
20 193 init_executor call site: 00193
17 3346 zend_call_function call site: 03346 zend_timeout
16 345 gc_possible_root call site: 00345 gc_possible_root_when_full
15 272 zend_hash_str_find_ptr call site: 00272
12 1187 zval_get_long_func call site: 01187 zval_ptr_dtor

Runtime coverage analysis

Covered functions
5501
Functions that are reachable but not covered
1384
Reachable functions
1841
Percentage of reachable functions covered
24.82%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-unserialize.c 11
sapi/fuzzer/fuzzer-sapi.c 8
main/main.c 21
Zend/zend_string.c 9
Zend/zend_hash.c 74
main/output.c 3
Zend/zend.c 38
Zend/zend_virtual_cwd.c 2
Zend/zend_gc.c 114
ext/pcre/pcre2lib/sljit/sljitNativeX86_common.c 1
ext/pcre/pcre2lib/sljit/sljitNativeMIPS_common.c 1
Zend/zend_execute_API.c 104
Zend/zend_float.c 3
Zend/zend_execute.c 182
Zend/zend_llist.c 1
Zend/zend_objects_API.c 24
Zend/zend_lazy_objects.c 14
Zend/zend_max_execution_timer.c 10
ext/gd/libgd/webpng.c 1
Zend/zend_fibers.c 11
Zend/zend_weakrefs.c 21
Zend/zend_extensions.c 2
Zend/zend_observer.c 2
main/SAPI.c 17
Zend/zend_hash.h 24
Zend/zend_signal.c 5
Zend/zend_atomic.h 2
Zend/zend_variables.c 3
Zend/zend_variables.h 12
Zend/zend_gc.h 11
main/php_variables.c 21
Zend/zend_compile.c 26
Zend/zend_string.h 20
Zend/zend_API.c 54
ext/com_dotnet/com_wrapper.c 42
ext/xmlreader/php_xmlreader.c 24
ext/xmlreader/php_xmlreader.h 1
Zend/zend_exceptions.c 58
Zend/zend_operators.h 28
Zend/zend_operators.c 61
Zend/zend_object_handlers.c 125
ext/ffi/ffi.c 2
Zend/zend_compile.h 1
ext/pgsql/pgsql.c 13
ext/opcache/jit/zend_jit_helpers.c 1
Zend/zend_objects.c 32
Zend/zend_weakrefs.h 1
Zend/zend_lazy_objects.h 3
Zend/zend_objects_API.h 8
ext/opcache/ZendAccelerator.c 4
Zend/zend_constants.c 48
Zend/zend_execute.h 47
ext/simplexml/simplexml.c 7
Zend/zend_API.h 2
Zend/zend_vm_def.h 16
Zend/zend_arena.h 3
Zend/zend_inheritance.c 1
Zend/zend_ast.c 99
Zend/zend_ast.h 3
ext/spl/spl_array.c 21
Zend/zend_object_handlers.h 4
Zend/zend_property_hooks.c 25
ext/snmp/snmp.c 7
ext/snmp/php_snmp.h 1
ext/com_dotnet/com_handlers.c 15
ext/com_dotnet/com_com.c 19
ext/com_dotnet/com_variant.c 35
ext/com_dotnet/php_com_dotnet_internal.h 2
ext/com_dotnet/com_olechar.c 7
win32/winutil.c 6
win32/codepage.h 1
win32/codepage.c 8
ext/com_dotnet/com_misc.c 22
ext/com_dotnet/com_saproxy.c 7
Zend/zend_enum.c 5
Zend/zend_closures.c 19
Zend/zend_exceptions.h 2
win32/signal.c 1
Zend/zend_stack.c 3
Zend/zend_observer.h 2

Fuzzer: sapi/fuzzer/fuzzer-mbregex.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 932 20.0%
gold [1:9] 342 7.34%
yellow [10:29] 311 6.67%
greenyellow [30:49] 192 4.12%
lawngreen 50+ 2879 61.8%
All colors 4656 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
139 2834 php_error_docref call site: 02834 php_com_invoke_helper
63 2712 zend_fetch_dimension_address_read call site: 02712 php_com_do_invoke_by_id
40 1312 convert_to_double call site: 01312 convert_scalar_to_number
36 2797 zend_hash_move_forward_ex call site: 02797 safe_array_from_zval
25 38 zend_hash_real_init_mixed_ex call site: 00038
24 1957 zend_call_function call site: 01957 zend_throw_error
23 375 gc_grow_root_buffer call site: 00375 gc_grow_root_buffer
20 193 init_executor call site: 00193
17 3537 zend_call_function call site: 03537 zend_timeout
16 345 gc_possible_root call site: 00345 gc_possible_root_when_full
15 272 zend_hash_str_find_ptr call site: 00272
12 1286 zval_get_long_func call site: 01286 zval_ptr_dtor

Runtime coverage analysis

Covered functions
5501
Functions that are reachable but not covered
1395
Reachable functions
1864
Percentage of reachable functions covered
25.16%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-mbregex.c 9
sapi/fuzzer/fuzzer-sapi.c 15
main/main.c 26
Zend/zend_string.c 9
Zend/zend_hash.c 77
main/output.c 3
Zend/zend.c 38
Zend/zend_virtual_cwd.c 2
Zend/zend_gc.c 114
ext/pcre/pcre2lib/sljit/sljitNativeX86_common.c 1
ext/pcre/pcre2lib/sljit/sljitNativeMIPS_common.c 1
Zend/zend_execute_API.c 104
Zend/zend_float.c 3
Zend/zend_execute.c 182
Zend/zend_llist.c 1
Zend/zend_objects_API.c 24
Zend/zend_lazy_objects.c 17
Zend/zend_max_execution_timer.c 10
ext/gd/libgd/webpng.c 1
Zend/zend_fibers.c 11
Zend/zend_weakrefs.c 21
Zend/zend_extensions.c 2
Zend/zend_observer.c 2
main/SAPI.c 17
Zend/zend_hash.h 24
Zend/zend_signal.c 5
Zend/zend_atomic.h 2
Zend/zend_variables.c 3
Zend/zend_variables.h 12
Zend/zend_gc.h 11
main/php_variables.c 21
Zend/zend_compile.c 26
Zend/zend_string.h 20
Zend/zend_API.c 54
ext/standard/var.c 48
Zend/zend_enum.h 2
Zend/zend_object_handlers.c 125
ext/spl/spl_array.c 21
ext/xmlreader/php_xmlreader.c 24
ext/xmlreader/php_xmlreader.h 1
Zend/zend_object_handlers.h 4
Zend/zend_lazy_objects.h 3
Zend/zend_exceptions.c 58
Zend/zend_operators.h 28
Zend/zend_operators.c 61
ext/ffi/ffi.c 2
Zend/zend_compile.h 1
ext/pgsql/pgsql.c 13
ext/opcache/jit/zend_jit_helpers.c 1
Zend/zend_objects.c 32
Zend/zend_weakrefs.h 1
Zend/zend_objects_API.h 12
ext/opcache/ZendAccelerator.c 4
Zend/zend_constants.c 48
Zend/zend_execute.h 47
ext/simplexml/simplexml.c 7
Zend/zend_API.h 2
Zend/zend_vm_def.h 16
Zend/zend_arena.h 3
Zend/zend_inheritance.c 1
Zend/zend_ast.c 99
Zend/zend_ast.h 3
ext/com_dotnet/com_handlers.c 15
ext/com_dotnet/com_com.c 19
ext/com_dotnet/com_variant.c 35
ext/com_dotnet/php_com_dotnet_internal.h 2
ext/com_dotnet/com_wrapper.c 42
ext/com_dotnet/com_olechar.c 7
win32/winutil.c 6
win32/codepage.h 1
win32/codepage.c 8
ext/com_dotnet/com_misc.c 22
ext/com_dotnet/com_saproxy.c 7
Zend/zend_enum.c 5
Zend/zend_closures.c 19
Zend/zend_exceptions.h 2
win32/signal.c 1
Zend/zend_stack.c 3
Zend/zend_observer.h 2
Zend/zend_property_hooks.c 25
ext/snmp/snmp.c 7
ext/snmp/php_snmp.h 1

Fuzzer: sapi/fuzzer/fuzzer-exif.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 929 22.9%
gold [1:9] 321 7.92%
yellow [10:29] 271 6.69%
greenyellow [30:49] 156 3.85%
lawngreen 50+ 2373 58.5%
All colors 4050 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
139 2829 php_error_docref call site: 02829 php_com_invoke_helper
63 2707 zend_fetch_dimension_address_read call site: 02707 php_com_do_invoke_by_id
40 1307 convert_to_double call site: 01307 convert_scalar_to_number
36 2792 zend_hash_move_forward_ex call site: 02792 safe_array_from_zval
25 38 zend_hash_real_init_mixed_ex call site: 00038
24 1952 zend_call_function call site: 01952 zend_throw_error
23 375 gc_grow_root_buffer call site: 00375 gc_grow_root_buffer
20 193 init_executor call site: 00193
17 3532 zend_call_function call site: 03532 zend_timeout
16 345 gc_possible_root call site: 00345 gc_possible_root_when_full
15 272 zend_hash_str_find_ptr call site: 00272
12 1281 zval_get_long_func call site: 01281 zval_ptr_dtor

Runtime coverage analysis

Covered functions
5501
Functions that are reachable but not covered
1362
Reachable functions
1803
Percentage of reachable functions covered
24.46%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-exif.c 10
sapi/fuzzer/fuzzer-sapi.c 8
main/main.c 29
Zend/zend_string.c 9
Zend/zend_hash.c 79
main/output.c 3
Zend/zend.c 39
Zend/zend_virtual_cwd.c 2
Zend/zend_gc.c 27
ext/pcre/pcre2lib/sljit/sljitNativeX86_common.c 1
ext/pcre/pcre2lib/sljit/sljitNativeMIPS_common.c 1
Zend/zend_execute_API.c 107
Zend/zend_float.c 3
Zend/zend_execute.c 182
Zend/zend_llist.c 1
Zend/zend_objects_API.c 25
Zend/zend_lazy_objects.c 17
Zend/zend_max_execution_timer.c 10
ext/gd/libgd/webpng.c 1
Zend/zend_fibers.c 3
Zend/zend_weakrefs.c 12
Zend/zend_extensions.c 2
Zend/zend_observer.c 11
main/SAPI.c 17
Zend/zend_hash.h 24
Zend/zend_signal.c 5
Zend/zend_atomic.h 2
Zend/zend_variables.c 3
Zend/zend_variables.h 12
Zend/zend_gc.h 8
main/php_variables.c 21
Zend/zend_compile.c 26
Zend/zend_string.h 20
Zend/zend_API.c 52
ext/standard/var.c 48
Zend/zend_enum.h 2
Zend/zend_object_handlers.c 125
ext/spl/spl_array.c 21
ext/xmlreader/php_xmlreader.c 24
ext/xmlreader/php_xmlreader.h 1
Zend/zend_object_handlers.h 4
Zend/zend_lazy_objects.h 3
Zend/zend_exceptions.c 58
Zend/zend_operators.h 28
Zend/zend_operators.c 61
ext/ffi/ffi.c 2
Zend/zend_compile.h 1
ext/pgsql/pgsql.c 13
ext/opcache/jit/zend_jit_helpers.c 1
Zend/zend_objects.c 32
Zend/zend_weakrefs.h 1
Zend/zend_objects_API.h 8
ext/opcache/ZendAccelerator.c 4
Zend/zend_constants.c 48
Zend/zend_execute.h 47
ext/simplexml/simplexml.c 7
Zend/zend_API.h 2
Zend/zend_vm_def.h 16
Zend/zend_arena.h 3
Zend/zend_inheritance.c 1
Zend/zend_ast.c 99
Zend/zend_ast.h 3
ext/com_dotnet/com_handlers.c 15
ext/com_dotnet/com_com.c 19
ext/com_dotnet/com_variant.c 35
ext/com_dotnet/php_com_dotnet_internal.h 2
ext/com_dotnet/com_wrapper.c 38
ext/com_dotnet/com_olechar.c 7
win32/winutil.c 6
win32/codepage.h 1
win32/codepage.c 8
ext/com_dotnet/com_misc.c 22
ext/com_dotnet/com_saproxy.c 7
Zend/zend_enum.c 5
Zend/zend_closures.c 19
Zend/zend_exceptions.h 2
win32/signal.c 1
Zend/zend_stack.c 3
Zend/zend_observer.h 2
Zend/zend_property_hooks.c 25
ext/snmp/snmp.c 7
ext/snmp/php_snmp.h 1

Fuzz engine guidance

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

sapi/fuzzer/fuzzer-parser.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['php_error_docref', 'zend_fetch_dimension_address_read', 'convert_to_double', 'zend_hash_move_forward_ex', 'zend_hash_real_init_mixed_ex', 'zend_call_function', 'gc_grow_root_buffer', 'php_register_variable_ex', 'init_executor', 'php_is_forbidden_variable_name']

sapi/fuzzer/fuzzer-execute.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['php_error_docref', 'zend_fetch_dimension_address_read', 'convert_to_double', 'zend_hash_move_forward_ex', 'zend_hash_real_init_mixed_ex', 'zend_call_function', 'gc_grow_root_buffer', 'php_register_variable_ex', 'init_executor', 'php_is_forbidden_variable_name']

sapi/fuzzer/fuzzer-tracing-jit.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['php_error_docref', 'zend_fetch_dimension_address_read', 'convert_to_double', 'zend_hash_move_forward_ex', 'zend_hash_real_init_mixed_ex', 'zend_call_function', 'gc_grow_root_buffer', 'php_register_variable_ex', 'init_executor', 'php_is_forbidden_variable_name']

sapi/fuzzer/fuzzer-json.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_hash_real_init_mixed_ex', 'gc_grow_root_buffer', 'init_executor', 'gc_possible_root', 'zend_hash_str_find_ptr', 'zend_observer_fcall_end_all', 'zend_interned_strings_activate', 'sapi_activate', 'zend_signal_activate', 'zend_string_efree']

sapi/fuzzer/fuzzer-unserializehash.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['php_error_docref', 'zend_fetch_dimension_address_read', 'convert_to_double', 'zend_hash_move_forward_ex', 'zend_hash_real_init_mixed_ex', 'zend_call_function', 'gc_grow_root_buffer', 'init_executor', 'gc_possible_root']

sapi/fuzzer/fuzzer-function-jit.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['php_error_docref', 'zend_fetch_dimension_address_read', 'convert_to_double', 'zend_hash_move_forward_ex', 'zend_hash_real_init_mixed_ex', 'zend_call_function', 'gc_grow_root_buffer', 'php_register_variable_ex', 'init_executor', 'php_is_forbidden_variable_name']

sapi/fuzzer/fuzzer-mbstring.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['php_error_docref', 'zend_fetch_dimension_address_read', 'convert_to_double', 'zend_hash_move_forward_ex', 'php_request_startup', 'zend_hash_real_init_mixed_ex', 'zend_call_function', 'gc_grow_root_buffer', 'init_executor']

sapi/fuzzer/fuzzer-unserialize.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['php_error_docref', 'zend_fetch_dimension_address_read', 'convert_to_double', 'zend_hash_move_forward_ex', 'zend_hash_real_init_mixed_ex', 'zend_call_function', 'gc_grow_root_buffer', 'init_executor', 'gc_possible_root']

sapi/fuzzer/fuzzer-mbregex.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['php_error_docref', 'zend_fetch_dimension_address_read', 'convert_to_double', 'zend_hash_move_forward_ex', 'zend_hash_real_init_mixed_ex', 'zend_call_function', 'gc_grow_root_buffer', 'init_executor', 'gc_possible_root']

sapi/fuzzer/fuzzer-exif.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['php_error_docref', 'zend_fetch_dimension_address_read', 'convert_to_double', 'zend_hash_move_forward_ex', 'zend_hash_real_init_mixed_ex', 'zend_call_function', 'gc_grow_root_buffer', 'init_executor', 'gc_possible_root']

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
zend_get_type_by_const 33 18 54.54% ['/src/php-src/sapi/fuzzer/fuzzer-parser.c', '/src/php-src/sapi/fuzzer/fuzzer-execute.c', '/src/php-src/sapi/fuzzer/fuzzer-tracing-jit.c', '/src/php-src/sapi/fuzzer/fuzzer-unserializehash.c', '/src/php-src/sapi/fuzzer/fuzzer-function-jit.c', '/src/php-src/sapi/fuzzer/fuzzer-mbstring.c', '/src/php-src/sapi/fuzzer/fuzzer-unserialize.c', '/src/php-src/sapi/fuzzer/fuzzer-mbregex.c', '/src/php-src/sapi/fuzzer/fuzzer-exif.c']
object_properties_load 63 9 14.28% []
zend_mm_shutdown 109 20 18.34% []
zend_call_stack_init 34 12 35.29% []
zend_hash_clean 72 36 50.0% []
_zend_hash_str_add_or_update_i 66 33 50.0% []
_convert_to_string 51 25 49.01% []
scan 786 174 22.13% []
timelib_parse_posix_str 55 25 45.45% []
read_transition_spec 31 14 45.16% []
read_64bit_types 73 27 36.98% []
php_date_initialize_from_hash 46 10 21.73% []
php_date_period_initialize_from_hash 99 7 7.070% []
zim_HashContext___unserialize 54 23 42.59%
SHA256Transform 39 5 12.82% []
XXH32_finalize 63 24 38.09% []
php_pcre2_config 100 27 27.0%
spl_object_storage_attach 37 4 10.81% []
zm_startup_pack 107 54 50.46%
php_var_unserialize_internal 846 452 53.42%
object_custom 31 16 51.61%
sapi_deactivate_module 35 11 31.42% []
sapi_header_op 149 56 37.58% []
sapi_send_headers 69 36 52.17% []
php_verror 142 39 27.46% []
php_binary_init 35 6 17.14% []
OnSetFacility 125 38 30.4%
php_init_config 195 74 37.94% []
php_ini_parser_cb 92 22 23.91% []
php_build_argv 46 19 41.30% ['/src/php-src/sapi/fuzzer/fuzzer-parser.c', '/src/php-src/sapi/fuzzer/fuzzer-execute.c', '/src/php-src/sapi/fuzzer/fuzzer-tracing-jit.c', '/src/php-src/sapi/fuzzer/fuzzer-json.c', '/src/php-src/sapi/fuzzer/fuzzer-unserializehash.c', '/src/php-src/sapi/fuzzer/fuzzer-function-jit.c', '/src/php-src/sapi/fuzzer/fuzzer-mbstring.c', '/src/php-src/sapi/fuzzer/fuzzer-unserialize.c', '/src/php-src/sapi/fuzzer/fuzzer-mbregex.c', '/src/php-src/sapi/fuzzer/fuzzer-exif.c']
format_converter 465 151 32.47% []
xbuf_format_converter 464 217 46.76% []
exif_scan_thumbnail 71 8 11.26%
php_image_type_to_mime_type 39 9 23.07% []
php_conv_fp 75 40 53.33% []
php_stream_memory_seek 54 23 42.59% []
_php_stream_seek 73 19 26.02% []
zend_compile_ns_call 42 23 54.76% []
find_frameless_function_info 33 4 12.12% []
zend_hash_merge 79 41 51.89% []
destroy_zend_class 209 97 46.41% []
convert_to_double 52 9 17.30% []
i_zend_is_true 48 19 39.58% ['/src/php-src/sapi/fuzzer/fuzzer-parser.c', '/src/php-src/sapi/fuzzer/fuzzer-execute.c', '/src/php-src/sapi/fuzzer/fuzzer-tracing-jit.c', '/src/php-src/sapi/fuzzer/fuzzer-unserializehash.c', '/src/php-src/sapi/fuzzer/fuzzer-function-jit.c', '/src/php-src/sapi/fuzzer/fuzzer-mbstring.c', '/src/php-src/sapi/fuzzer/fuzzer-unserialize.c', '/src/php-src/sapi/fuzzer/fuzzer-mbregex.c', '/src/php-src/sapi/fuzzer/fuzzer-exif.c']
php_register_variable_ex 179 52 29.05% ['/src/php-src/sapi/fuzzer/fuzzer-parser.c', '/src/php-src/sapi/fuzzer/fuzzer-execute.c', '/src/php-src/sapi/fuzzer/fuzzer-tracing-jit.c', '/src/php-src/sapi/fuzzer/fuzzer-function-jit.c']
zim_Random_Engine_Mt19937___unserialize 31 16 51.61%
spl_array_set_array 57 30 52.63% []
spl_heap_object_new_ex 49 25 51.02% []
zend_objects_destroy_object 75 36 48.0% []
tsrm_realpath_r 155 58 37.41% []
ZEND_ADD_SPEC_CONST_CONST_HANDLER 33 10 30.30% []
ZEND_SUB_SPEC_CONST_CONST_HANDLER 33 10 30.30% []
ZEND_MUL_SPEC_CONST_CONST_HANDLER 35 10 28.57% []
ZEND_CONCAT_SPEC_CONST_CV_HANDLER 68 35 51.47%
ZEND_CONCAT_SPEC_CV_CONST_HANDLER 68 35 51.47%
ZEND_IS_EQUAL_SPEC_TMPVAR_CONST_JMPZ_HANDLER 54 21 38.88%
ZEND_IS_EQUAL_SPEC_TMPVAR_CONST_JMPNZ_HANDLER 54 19 35.18%
ZEND_IS_NOT_EQUAL_SPEC_TMPVAR_CONST_HANDLER 54 18 33.33%
ZEND_IS_SMALLER_SPEC_CONST_TMPVARCV_JMPNZ_HANDLER 39 19 48.71% []
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_JMPZ_HANDLER 43 19 44.18% []
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CONST_HANDLER 137 67 48.90%
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_TMP_HANDLER 141 70 49.64%
ZEND_ASSIGN_DIM_SPEC_CV_TMPVAR_OP_DATA_VAR_HANDLER 142 75 52.81%
ZEND_ASSIGN_DIM_OP_SPEC_VAR_CONST_HANDLER 89 45 50.56%
ZEND_ASSIGN_DIM_OP_SPEC_VAR_TMPVAR_HANDLER 90 47 52.22%
ZEND_QM_ASSIGN_SPEC_TMP_HANDLER 34 14 41.17% []
ZEND_QM_ASSIGN_SPEC_CV_HANDLER 34 16 47.05% []
ZEND_SEND_VAR_NO_REF_EX_SPEC_VAR_UNUSED_QUICK_HANDLER 57 29 50.87% []
ZEND_FAST_CONCAT_SPEC_CV_CONST_HANDLER 115 63 54.78%
ZEND_RETURN_SPEC_CONST_HANDLER 69 19 27.53% []
ZEND_RETURN_SPEC_TMP_HANDLER 69 22 31.88% []
ZEND_RETURN_SPEC_VAR_HANDLER 69 32 46.37% []
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_UNUSED_HANDLER 87 22 25.28%
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_UNUSED_HANDLER 88 17 19.31%
ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_UNUSED_HANDLER 88 31 35.22%
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_UNUSED_HANDLER 87 27 31.03%
ZEND_FETCH_OBJ_R_SPEC_UNUSED_TMPVAR_HANDLER 141 38 26.95%
ZEND_FETCH_OBJ_R_SPEC_CV_TMPVAR_HANDLER 141 52 36.87%
ZEND_FETCH_OBJ_R_SPEC_CV_CV_HANDLER 140 55 39.28%
ZEND_THROW_SPEC_TMPVAR_HANDLER 31 15 48.38%
ZEND_SEND_VAR_SPEC_CV_CONST_HANDLER 39 17 43.58% []
ZEND_SEND_VAR_SPEC_CV_UNUSED_HANDLER 39 19 48.71% []
ZEND_FETCH_CLASS_NAME_SPEC_CV_HANDLER 54 18 33.33%
ZEND_YIELD_FROM_SPEC_CONST_HANDLER 78 20 25.64%
ZEND_COALESCE_SPEC_CONST_HANDLER 35 18 51.42% []
timelib_fetch_timezone_offset 37 7 18.91% []
php_json_escape_string 175 50 28.57% []
php_json_encode_array 198 98 49.49% []
check_char_prop 55 14 25.45% []
_pcre2_check_escape_8 210 64 30.47%
caseCHAR_6caseCHAR_7caseCHAR_8caseCHAR_9 199 66 33.16%
parse_regex 783 385 49.16% []
c==CHAR_AMPERSAND?META_ECLASS_AND 583 185 31.73%
caseCHAR_5caseCHAR_6caseCHAR_7caseCHAR_8caseCHAR_9 417 87 20.86%
get_ucp 114 48 42.10% []
check_lookbehinds 122 66 54.09% []
get_branchlength 286 79 27.62% []
compile_branch 1388 626 45.10% []
find_recurse 104 30 28.84% []
first_significant_code 53 22 41.50% []
find_firstassertedcu 62 28 45.16% []
is_startline 66 23 34.84% []
_pcre2_update_classbits_8 94 28 29.78%
compile_optimize_class 172 81 47.09% []
parse_class 98 51 52.04% []
_pcre2_extuni_8 39 19 48.71%
_pcre2_find_bracket_8 115 26 22.60%
match 4653 2134 45.86% []
php_pcre2_pattern_info 139 17 12.23%
find_minlength 489 259 52.96% []
_pcre2_valid_utf_8 144 76 52.77%
_pcre2_xclass_8 250 63 25.2%
php_pcre_match_impl 228 95 41.66% []
php_simple_ini_parser_cb 43 13 30.23% []
map_from_unicode 102 12 11.76% []
write_octet_sequence 32 14 43.75% []
php_trim_int 78 36 46.15%
php_str_replace_in_subject 135 33 24.44% []
php_unserialize_with_options 105 44 41.90% []
expand_filepath_with_mode 59 30 50.84% []
php_message_handler_for_zend 72 14 19.44% []
php_stream_parse_fopen_modes 41 21 51.21% []
_php_stream_open_wrapper_ex 135 73 54.07%
php_json_yyparse 329 138 41.94%
php_json_scan 1546 168 10.86%
zend_dfa_optimize_calls 67 16 23.88% []
sccp_optimize_op_array 36 17 47.22% []
ct_eval_del_array_elem 31 14 45.16% []
ssa_verify_integrity 287 155 54.00% []
zend_optimize 74 33 44.59% []
zend_ssa_replace_use_chain 35 16 45.71% []
zif_func_get_args 60 13 21.66%
zend_fetch_this_var 32 15 46.87% []
zend_load_extension_handle 52 15 28.84% []
convert_to_long 51 8 15.68% []
ZEND_IS_EQUAL_SPEC_CONST_CONST_HANDLER 54 10 18.51% []
ZEND_IS_EQUAL_SPEC_TMPVAR_TMPVAR_JMPZ_HANDLER 54 12 22.22%
ZEND_IS_EQUAL_SPEC_CV_TMPVAR_JMPNZ_HANDLER 54 14 25.92%
ZEND_IS_NOT_EQUAL_SPEC_TMPVAR_CONST_JMPZ_HANDLER 54 19 35.18%
ZEND_IS_NOT_EQUAL_SPEC_TMPVAR_TMPVAR_JMPZ_HANDLER 54 12 22.22%
ZEND_IS_NOT_EQUAL_SPEC_CV_CONST_JMPNZ_HANDLER 54 26 48.14%
ZEND_IS_NOT_EQUAL_SPEC_CV_TMPVAR_JMPZ_HANDLER 54 14 25.92%
ZEND_IS_NOT_EQUAL_SPEC_CV_TMPVAR_JMPNZ_HANDLER 54 12 22.22%
ZEND_IS_SMALLER_SPEC_CONST_CONST_HANDLER 39 10 25.64% []
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_HANDLER 43 19 44.18%
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_JMPNZ_HANDLER 43 19 44.18% []
ZEND_IS_SMALLER_OR_EQUAL_SPEC_TMPVARCV_CONST_HANDLER 43 11 25.58%
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_CONST_HANDLER 137 69 50.36%
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_TMP_HANDLER 142 55 38.73%
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_VAR_HANDLER 142 66 46.47%
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_CV_HANDLER 137 48 35.03%
ZEND_ASSIGN_DIM_SPEC_VAR_TMPVAR_OP_DATA_CONST_HANDLER 138 60 43.47%
ZEND_ASSIGN_DIM_SPEC_VAR_TMPVAR_OP_DATA_TMP_HANDLER 143 52 36.36%
ZEND_ASSIGN_DIM_SPEC_VAR_TMPVAR_OP_DATA_CV_HANDLER 138 33 23.91%
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_CONST_HANDLER 137 73 53.28%
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_TMP_HANDLER 142 52 36.61%
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_VAR_HANDLER 142 49 34.50%
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_CV_HANDLER 137 58 42.33%
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_TMP_HANDLER 142 49 34.50%
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_VAR_HANDLER 142 51 35.91%
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CV_HANDLER 137 49 35.76%
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_VAR_HANDLER 141 62 43.97%
ZEND_ASSIGN_DIM_SPEC_CV_TMPVAR_OP_DATA_TMP_HANDLER 142 61 42.95%
ZEND_ASSIGN_DIM_SPEC_CV_TMPVAR_OP_DATA_CV_HANDLER 137 49 35.76%
ZEND_ASSIGN_DIM_SPEC_CV_UNUSED_OP_DATA_TMP_HANDLER 141 61 43.26%
ZEND_ASSIGN_DIM_SPEC_CV_UNUSED_OP_DATA_VAR_HANDLER 141 64 45.39%
ZEND_ASSIGN_DIM_SPEC_CV_UNUSED_OP_DATA_CV_HANDLER 136 72 52.94%
ZEND_ASSIGN_DIM_SPEC_CV_CV_OP_DATA_TMP_HANDLER 141 77 54.60%
ZEND_ASSIGN_DIM_SPEC_CV_CV_OP_DATA_VAR_HANDLER 141 65 46.09%
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_CONST_HANDLER 136 71 52.20%
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_TMP_HANDLER 138 52 37.68%
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_VAR_HANDLER 138 39 28.26%
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_CV_HANDLER 136 63 46.32%
ZEND_ASSIGN_OBJ_SPEC_VAR_TMPVAR_OP_DATA_CONST_HANDLER 137 32 23.35%
ZEND_ASSIGN_OBJ_SPEC_VAR_TMPVAR_OP_DATA_VAR_HANDLER 139 33 23.74%
ZEND_ASSIGN_OBJ_SPEC_VAR_CV_OP_DATA_CONST_HANDLER 136 22 16.17%
ZEND_ASSIGN_OBJ_SPEC_VAR_CV_OP_DATA_CV_HANDLER 136 33 24.26%
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CONST_OP_DATA_CONST_HANDLER 135 74 54.81%
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CONST_OP_DATA_TMP_HANDLER 137 71 51.82%
ZEND_ASSIGN_OBJ_SPEC_UNUSED_TMPVAR_OP_DATA_TMP_HANDLER 138 30 21.73%
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_CONST_HANDLER 135 28 20.74%
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_TMP_HANDLER 137 29 21.16%
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_VAR_HANDLER 137 31 22.62%
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_CV_HANDLER 135 30 22.22%
ZEND_ASSIGN_OBJ_SPEC_CV_TMPVAR_OP_DATA_CONST_HANDLER 136 31 22.79%
ZEND_ASSIGN_OBJ_SPEC_CV_TMPVAR_OP_DATA_CV_HANDLER 136 38 27.94%
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_CONST_HANDLER 135 30 22.22%
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_TMP_HANDLER 137 34 24.81%
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_VAR_HANDLER 137 31 22.62%
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_CV_HANDLER 135 40 29.62%
ZEND_ASSIGN_DIM_OP_SPEC_VAR_UNUSED_HANDLER 89 37 41.57%
ZEND_ASSIGN_OBJ_OP_SPEC_UNUSED_CV_HANDLER 77 36 46.75%
ZEND_FAST_CONCAT_SPEC_CONST_CONST_HANDLER 115 28 24.34% []
ZEND_FAST_CONCAT_SPEC_TMPVAR_CV_HANDLER 116 61 52.58%
ZEND_FAST_CONCAT_SPEC_CV_CV_HANDLER 115 46 40.0%
ZEND_SEND_VAR_EX_SPEC_CV_UNUSED_HANDLER 55 20 36.36%
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CONST_HANDLER 87 36 41.37%
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_TMPVAR_HANDLER 88 46 52.27%
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CV_HANDLER 87 45 51.72%
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_CONST_HANDLER 88 29 32.95%
ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_CONST_HANDLER 88 33 37.5%
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_CONST_HANDLER 87 45 51.72%
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_TMPVAR_HANDLER 88 27 30.68%
ZEND_UNSET_DIM_SPEC_VAR_CONST_HANDLER 85 41 48.23%
ZEND_UNSET_DIM_SPEC_VAR_TMPVAR_HANDLER 86 35 40.69%
ZEND_UNSET_DIM_SPEC_VAR_CV_HANDLER 85 41 48.23%
ZEND_UNSET_OBJ_SPEC_UNUSED_CONST_HANDLER 38 18 47.36%
ZEND_FE_RESET_R_SPEC_CONST_HANDLER 62 19 30.64%
ZEND_FETCH_OBJ_R_SPEC_CONST_CONST_HANDLER 140 19 13.57% []
ZEND_FETCH_OBJ_R_SPEC_TMPVAR_CONST_HANDLER 141 56 39.71%
ZEND_FETCH_OBJ_R_SPEC_TMPVAR_TMPVAR_HANDLER 142 21 14.78%
ZEND_FETCH_OBJ_R_SPEC_TMPVAR_CV_HANDLER 141 20 14.18%
ZEND_FETCH_OBJ_R_SPEC_UNUSED_CONST_INLINE_HANDLER 140 71 50.71% []
ZEND_FETCH_OBJ_R_SPEC_UNUSED_CV_HANDLER 140 37 26.42%
ZEND_FETCH_OBJ_IS_SPEC_CONST_CONST_HANDLER 103 18 17.47% []
ZEND_FETCH_OBJ_IS_SPEC_TMPVAR_CONST_HANDLER 104 37 35.57%
ZEND_FETCH_OBJ_IS_SPEC_TMPVAR_TMPVAR_HANDLER 105 31 29.52%
ZEND_FETCH_OBJ_IS_SPEC_UNUSED_CONST_HANDLER 103 44 42.71%
ZEND_FETCH_OBJ_IS_SPEC_UNUSED_CV_HANDLER 103 29 28.15%
ZEND_FETCH_OBJ_IS_SPEC_CV_TMPVAR_HANDLER 104 30 28.84%
ZEND_FETCH_OBJ_IS_SPEC_CV_CV_HANDLER 103 43 41.74%
ZEND_CLONE_SPEC_CONST_HANDLER 52 19 36.53% []
ZEND_RETURN_BY_REF_SPEC_CONST_HANDLER 47 23 48.93% []
ZEND_RETURN_BY_REF_SPEC_TMP_HANDLER 50 21 42.0%
ZEND_RETURN_BY_REF_SPEC_CV_HANDLER 47 22 46.80%
ZEND_INIT_METHOD_CALL_SPEC_CONST_CONST_HANDLER 128 29 22.65% []
ZEND_INIT_METHOD_CALL_SPEC_CONST_CV_HANDLER 128 29 22.65% []
ZEND_INIT_METHOD_CALL_SPEC_TMPVAR_TMPVAR_HANDLER 136 55 40.44%
ZEND_INIT_METHOD_CALL_SPEC_TMPVAR_CV_HANDLER 131 54 41.22%
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CONST_HANDLER 128 57 44.53% []
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_TMPVAR_HANDLER 133 47 35.33%
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CV_HANDLER 128 62 48.43%
ZEND_INIT_METHOD_CALL_SPEC_CV_TMPVAR_HANDLER 133 57 42.85%
ZEND_INIT_STATIC_METHOD_CALL_SPEC_CONST_UNUSED_HANDLER 116 30 25.86%
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_CONST_HANDLER 116 61 52.58%
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_TMPVAR_HANDLER 121 49 40.49%
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_CV_HANDLER 116 63 54.31%
ZEND_INIT_STATIC_METHOD_CALL_SPEC_UNUSED_TMPVAR_HANDLER 121 16 13.22%
ZEND_INIT_STATIC_METHOD_CALL_SPEC_UNUSED_UNUSED_HANDLER 116 43 37.06%
ZEND_ISSET_ISEMPTY_DIM_OBJ_SPEC_CONST_CONST_HANDLER 65 18 27.69% []
ZEND_SEND_VAL_EX_SPEC_TMP_CONST_HANDLER 33 18 54.54%
ZEND_TYPE_CHECK_SPEC_CONST_HANDLER 32 17 53.12% []
ZEND_VERIFY_RETURN_TYPE_SPEC_CONST_UNUSED_HANDLER 58 25 43.10% []
ZEND_VERIFY_RETURN_TYPE_SPEC_TMP_UNUSED_HANDLER 58 26 44.82%
ZEND_VERIFY_RETURN_TYPE_SPEC_VAR_UNUSED_HANDLER 58 30 51.72%
ZEND_FE_RESET_RW_SPEC_CONST_HANDLER 85 22 25.88% []
ZEND_FE_RESET_RW_SPEC_TMP_HANDLER 87 30 34.48%
ZEND_DO_FCALL_BY_NAME_SPEC_RETVAL_USED_HANDLER 87 46 52.87% []
ZEND_INSTANCEOF_SPEC_TMPVAR_VAR_HANDLER 40 19 47.5%
ZEND_INSTANCEOF_SPEC_TMPVAR_UNUSED_HANDLER 40 18 45.0%
ZEND_INSTANCEOF_SPEC_CV_UNUSED_HANDLER 38 18 47.36%
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_CONST_CONST_HANDLER 40 20 50.0% []
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_TMPVAR_TMPVAR_HANDLER 42 22 52.38%
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_UNUSED_CONST_HANDLER 40 21 52.5%
ZEND_FETCH_CLASS_NAME_SPEC_TMPVAR_HANDLER 56 20 35.71%
ZEND_YIELD_SPEC_CONST_CONST_HANDLER 86 36 41.86%
ZEND_YIELD_SPEC_CONST_TMPVAR_HANDLER 87 35 40.22%
ZEND_YIELD_SPEC_CONST_UNUSED_HANDLER 86 40 46.51%
ZEND_YIELD_SPEC_CONST_CV_HANDLER 86 34 39.53%
ZEND_YIELD_SPEC_TMP_TMPVAR_HANDLER 88 33 37.5%
ZEND_YIELD_SPEC_TMP_UNUSED_HANDLER 87 38 43.67%
ZEND_YIELD_SPEC_VAR_CONST_HANDLER 88 35 39.77%
ZEND_YIELD_SPEC_VAR_CV_HANDLER 88 37 42.04%
ZEND_YIELD_SPEC_UNUSED_UNUSED_HANDLER 86 27 31.39%
ZEND_YIELD_SPEC_CV_UNUSED_HANDLER 86 47 54.65%
ZEND_YIELD_SPEC_CV_CV_HANDLER 86 41 47.67%
ZEND_GENERATOR_RETURN_SPEC_CONST_HANDLER 33 16 48.48%
ZEND_GENERATOR_RETURN_SPEC_TMP_HANDLER 33 14 42.42%
ZEND_GENERATOR_RETURN_SPEC_VAR_HANDLER 33 18 54.54%
ZEND_GENERATOR_RETURN_SPEC_CV_HANDLER 33 14 42.42%
ZEND_COALESCE_SPEC_TMP_HANDLER 35 18 51.42%
ZEND_COALESCE_SPEC_CV_HANDLER 35 19 54.28%
ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_TMPVARCV_HANDLER 118 60 50.84%
ZEND_FETCH_CLASS_CONSTANT_SPEC_VAR_CONST_HANDLER 107 51 47.66%
ZEND_FETCH_CLASS_CONSTANT_SPEC_VAR_TMPVARCV_HANDLER 118 56 47.45%
ZEND_FETCH_CLASS_CONSTANT_SPEC_UNUSED_CONST_HANDLER 107 55 51.40%
ZEND_FETCH_CLASS_CONSTANT_SPEC_UNUSED_TMPVARCV_HANDLER 118 45 38.13%
ZEND_IN_ARRAY_SPEC_CV_CONST_HANDLER 61 11 18.03%
ZEND_COUNT_SPEC_CONST_UNUSED_HANDLER 42 18 42.85% []
ZEND_COUNT_SPEC_TMPVAR_UNUSED_HANDLER 43 21 48.83%
ZEND_GET_CLASS_SPEC_CONST_UNUSED_HANDLER 38 20 52.63% []
ZEND_GET_CLASS_SPEC_UNUSED_UNUSED_HANDLER 38 18 47.36%
timelib_diff_with_tzid 58 26 44.82% []
do_range_limit_days 34 14 41.17% []
zif_json_decode 42 21 50.0%
populate_subpat_array 66 19 28.78% []
_preg_replace_common 54 19 35.18% []
php_preg_replace_func_impl 39 14 35.89% []
php_random_bytes_ex 74 18 24.32% []
zim_Random_Engine_PcgOneseq128XslRr64___construct 37 16 43.24%
zim_Random_Engine_Xoshiro256StarStar___construct 43 18 41.86%
php_random_range32 42 23 54.76% []
zim_ReflectionParameter___construct 170 83 48.82%
zim_ReflectionParameter_getClass 40 18 45.0%
zim_ReflectionClass_getProperty 54 19 35.18%
zim_ReflectionClass_getTraitAliases 38 16 42.10%
spl_array_has_dimension_ex 47 25 53.19% []
spl_array_read_dimension_ex 31 13 41.93% []
spl_array_get_dimension_ptr 82 43 52.43% []
spl_array_write_dimension_ex 52 28 53.84% []
spl_array_unset_dimension_ex 46 18 39.13% []
spl_array_get_hash_table_ptr 31 14 45.16% []
zim_SplFileObject___construct 36 11 30.55%
spl_filesystem_object_construct 36 16 44.44% []
zim_SplFixedArray_fromArray 52 25 48.07%
spl_dual_it_construct 132 71 53.78% []
zim_MultipleIterator_attachIterator 33 18 54.54%
spl_multiple_iterator_get_all 60 28 46.66% []
zif_min 70 31 44.28%
zif_max 70 26 37.14%
zif_extract 91 40 43.95%
zif_range 213 95 44.60%
zif_array_diff 103 12 11.65%
_php_search_array 83 42 50.60% []
php_compact_var 36 11 30.55% []
php_range_process_input 55 18 32.72% []
php_get_data_compare_func_unstable 57 18 31.57% []
php_array_diff_key 66 14 21.21% []
_php_error_log_ex 37 11 29.72%
zif_file 74 31 41.89%
php_stat 234 31 13.24% []
php_sprintf_appenddouble 78 31 39.74% []
php_stream_url_wrap_php 197 45 22.84% []
zif_explode 31 17 54.83%
php_basename 68 20 29.41%
zif_substr_replace 237 47 19.83%
php_charmask 36 18 50.0% []
try_setlocale_str 39 11 28.20% []
user_filter_factory_create 71 30 42.25% []
php_debug_zval_dump 118 61 51.69% []
php_var_serialize_get_sleep_props 58 31 53.44% []
php_log_err_with_severity 43 11 25.58% []
php_load_zend_extension_cb 47 10 21.27% []
php_stream_filter_create 34 13 38.23%
php_stream_filter_append_ex 60 13 21.66% []
php_stdiop_read 33 17 51.51% []
php_stdiop_close 43 17 39.53% []
php_stdiop_set_option 152 14 9.210% []
_php_stream_copy_to_mem 73 27 36.98%
php_userstreamop_set_option 72 8 11.11% []
ret=(Z_TYPE(retval)==IS_TRUE)?PHP_STREAM_OPTION_RETURN_OK 71 35 49.29%
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_TMPVAR_HANDLER 89 28 31.46%
zif_array_key_exists 35 6 17.14%

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
/src/php-src/Zend/zend_enum_arginfo.h [] []
/src/php-src/Zend/zend_multibyte.c [] []
/src/php-src/ext/curl/curl_file_arginfo.h [] []
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_ucs2.c [] []
/src/php-src/ext/sysvmsg/sysvmsg_arginfo.h [] []
/src/php-src/ext/dom/token_list.c [] []
/src/php-src/Zend/zend_inheritance.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/intl/breakiterator/codepointiterator_internal.h [] []
/src/php-src/Zend/Optimizer/block_pass.c [] []
/src/php-src/Zend/zend_exceptions.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/soap/php_sdl.c [] []
/src/php-src/ext/opcache/zend_accelerator_debug.c [] []
/src/php-src/ext/lexbor/lexbor/core/hash.c [] []
/src/php-src/ext/fileinfo/php_libmagic.c [] []
/src/php-src/ext/gmp/php_gmp_int.h [] []
/src/php-src/ext/fileinfo/libmagic/compress.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/iframe_element.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_char_inc.h [] []
/src/php-src/Zend/zend_ast.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/sockets/multicast.c [] []
/src/php-src/ext/sodium/libsodium_arginfo.h [] []
/src/php-src/ext/opcache/jit/ir/ir_ra.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitNativeARM_T2_32.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/template_insertion.h [] []
/src/php-src/ext/gd/libgd/gd_wbmp.c [] []
/src/php-src/sapi/fpm/fpm/fpm_process_ctl.c [] []
/src/php-src/ext/gd/libgd/gd_io.c [] []
/src/php-src/ext/lexbor/lexbor/css/selectors/state.c [] []
/src/php-src/ext/date/php_date.h [] []
/src/php-src/win32/time.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_debug.c [] []
/src/php-src/ext/spl/spl_fixedarray.c [] []
/src/php-src/ext/pgsql/pgsql.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/random/randomizer.c [] []
/src/php-src/ext/gd/libgd/gdfontt.c [] []
/src/php-src/ext/lexbor/lexbor/html/token.h [] []
/src/php-src/ext/opcache/zend_accelerator_hash.c [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/anb.c [] []
/src/php-src/ext/standard/base64.h [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/character_data.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_alloc.c [] []
/src/php-src/ext/lexbor/lexbor/core/str.c [] []
/src/php-src/ext/fileinfo/libmagic/encoding.c [] []
/src/php-src/ext/lexbor/lexbor/css/selectors/selector.c [] []
/src/php-src/ext/lexbor/lexbor/dom/exception.h [] []
/src/php-src/ext/phar/phar_internal.h [] []
/src/php-src/ext/gd/libgd/gdxpm.c [] []
/src/php-src/ext/standard/metaphone.c [] []
/src/php-src/sapi/phpdbg/phpdbg_break.c [] []
/src/php-src/main/reentrancy.c [] []
/src/php-src/ext/hash/hash_ripemd.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_auth.c [] []
/src/php-src/ext/com_dotnet/com_persist.c [] []
/src/php-src/ext/intl/collator/collator_arginfo.h [] []
/src/php-src/sapi/cli/php_http_parser.c [] []
/src/php-src/ext/standard/head.c [] []
/src/php-src/ext/hash/hash_haval.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitNativeLOONGARCH_64.c [] []
/src/php-src/ext/lexbor/lexbor/dom/collection.c [] []
/src/php-src/ext/lexbor/lexbor/core/dobject.c [] []
/src/php-src/ext/xml/xml_arginfo.h [] []
/src/php-src/ext/xmlreader/php_xmlreader.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/dom/notation.c [] []
/src/php-src/ext/random/engine_pcgoneseq128xslrr64.c [] []
/src/php-src/ext/mbstring/mb_gpc.c [] []
/src/php-src/ext/standard/iptc.c [] []
/src/php-src/ext/pdo/pdo_dbh.c [] []
/src/php-src/ext/exif/exif.c [] []
/src/php-src/ext/dom/html_document.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitNativeX86_common.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/sapi/phpdbg/phpdbg_watch.c [] []
/src/php-src/ext/mysqli/mysqli_nonapi.c [] []
/src/php-src/ext/mysqlnd/php_mysqlnd.c [] []
/src/php-src/Zend/zend_atomic.c [] []
/src/php-src/sapi/fpm/fpm/fpm_str.h [] []
/src/php-src/ext/standard/crypt_freesec.c [] []
/src/php-src/ext/lexbor/lexbor/core/avl.c [] []
/src/php-src/ext/xmlwriter/php_xmlwriter.h [] []
/src/php-src/ext/bcmath/libbcmath/src/num2long.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/script_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/parser.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/time_element.c [] []
/src/php-src/ext/openssl/openssl_backend_v3.c [] []
/src/php-src/ext/intl/breakiterator/breakiterator_iterators_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/encoding/encode.c [] []
/src/php-src/ext/com_dotnet/com_handlers.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/pcre/pcre2lib/sljit/allocator_src/sljitProtExecAllocatorPosix.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_read_buffer.c [] []
/src/php-src/ext/lexbor/lexbor/core/str.h [] []
/src/php-src/main/streams/plain_wrapper.c [] []
/src/php-src/Zend/zend_lazy_objects.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/lexbor/lexbor/html/interfaces/head_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/marquee_element.c [] []
/src/php-src/ext/com_dotnet/com_misc.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/Zend/Optimizer/zend_cfg.c [] []
/src/php-src/sapi/fpm/fpm/fpm_sockets.c [] []
/src/php-src/ext/tokenizer/tokenizer.c [] []
/src/php-src/Zend/zend_strtod.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_head.c [] []
/src/php-src/ext/intl/transliterator/transliterator_class.h [] []
/src/php-src/ext/phar/zip.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/progress_element.c [] []
/src/php-src/ext/uri/uriparser/src/UriParseBase.c [] []
/src/php-src/Zend/zend_simd.h [] []
/src/php-src/main/main_arginfo.h [] []
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_utf8.c [] []
/src/php-src/Zend/Optimizer/optimize_func_calls.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/hr_element.c [] []
/src/php-src/ext/bcmath/libbcmath/src/recmul.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/object_element.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_substitute.c [] []
/src/php-src/sapi/apache2handler/sapi_apache2.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/allocator_src/sljitWXExecAllocatorWindows.c [] []
/src/php-src/Zend/Optimizer/zend_inference.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitUtils.c [] []
/src/php-src/ext/opcache/jit/ir/ir_private.h [] []
/src/php-src/ext/dom/nodelist.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_protocol_frame_codec.c [] []
/src/php-src/ext/opcache/jit/ir/ir_patch.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_context.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/dialog_element.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/attr.h [] []
/src/php-src/Zend/zend_mmap.h [] []
/src/php-src/ext/mysqli/mysqli_arginfo.h [] []
/src/php-src/ext/standard/browscap.c [] []
/src/php-src/ext/zend_test/fiber.c [] []
/src/php-src/sapi/litespeed/lsapi_main.c [] []
/src/php-src/ext/session/mod_user.c [] []
/src/php-src/ext/lexbor/lexbor/css/log.h [] []
/src/php-src/ext/intl/dateformat/datepatterngenerator_methods.cpp [] []
/src/php-src/ext/mysqlnd/mysqlnd_loaddata.c [] []
/src/php-src/ext/hash/murmur/PMurHash.c [] []
/src/php-src/sapi/phpdbg/phpdbg_btree.c [] []
/src/php-src/main/php_content_types.c [] []
/src/php-src/ext/dom/domexception.c [] []
/src/php-src/ext/simplexml/php_simplexml_exports.h [] []
/src/php-src/ext/zlib/zlib_fopen_wrapper.c [] []
/src/php-src/win32/signal.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/Zend/zend_llist.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/pdo_dblib/dblib_stmt.c [] []
/src/php-src/Zend/zend_API.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/intl/common/common_enum.cpp [] []
/src/php-src/ext/lexbor/lexbor/css/parser.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/legend_element.c [] []
/src/php-src/ext/intl/dateformat/dateformat_class.h [] []
/src/php-src/sapi/cli/ps_title.c [] []
/src/php-src/sapi/phpdbg/phpdbg_sigsafe.c [] []
/src/php-src/ext/intl/msgformat/msgformat_format.c [] []
/src/php-src/ext/hash/hash.c [] []
/src/php-src/Zend/zend_list.c [] []
/src/php-src/ext/curl/curl_arginfo.h [] []
/src/php-src/ext/standard/info.c [] []
/src/php-src/Zend/zend_smart_str.h [] []
/src/php-src/Zend/zend.h [] []
/src/php-src/ext/opcache/jit/ir/ir.h [] []
/src/php-src/Zend/Optimizer/zend_ssa.h [] []
/src/php-src/ext/intl/common/common_enum.h [] []
/src/php-src/ext/gd/libgd/gd_transform.c [] []
/src/php-src/ext/intl/resourcebundle/resourcebundle_class.h [] []
/src/php-src/Zend/zend_constants.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/opcache/jit/ir/ir_sccp.c [] []
/src/php-src/ext/standard/array.c [] []
/src/php-src/ext/gd/libgd/gd_io_ss.c [] []
/src/php-src/Zend/zend_objects_API.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/pcre/pcre2lib/sljit/sljitLir.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/allocator_src/sljitProtExecAllocatorNetBSD.c [] []
/src/php-src/ext/intl/collator/collator_create.c [] []
/src/php-src/ext/intl/resourcebundle/resourcebundle_iterator.c [] []
/src/php-src/ext/random/csprng.c [] []
/src/php-src/win32/sendmail.c [] []
/src/php-src/Zend/zend_gc.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/Zend/zend_attributes.c [] []
/src/php-src/ext/gd/libgd/gd.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_table_text.c [] []
/src/php-src/ext/com_dotnet/com_variant.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/main/streams/transports.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/open_elements.h [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/before_head.c [] []
/src/php-src/ext/sysvshm/sysvshm_arginfo.h [] []
/src/php-src/ext/date/php_date_arginfo.h [] []
/src/php-src/sapi/cli/php_cli_server.c [] []
/src/php-src/sapi/cgi/cgi_main.c [] []
/src/php-src/ext/mysqli/php_mysqli_structs.h [] []
/src/php-src/ext/dom/characterdata.c [] []
/src/php-src/ext/iconv/iconv.c [] []
/src/php-src/ext/zlib/zlib.c [] []
/src/php-src/ext/phar/dirstream.c [] []
/src/php-src/ext/standard/strnatcmp.c [] []
/src/php-src/ext/intl/dateformat/dateformat_attrcpp.cpp [] []
/src/php-src/ext/mysqlnd/mysqlnd_reverse_api.c [] []
/src/php-src/win32/globals.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitLir.h [] []
/src/php-src/ext/openssl/openssl_backend_v1.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree.c [] []
/src/php-src/ext/standard/http.c [] []
/src/php-src/ext/pcntl/php_signal.c [] []
/src/php-src/Zend/zend_inheritance.h [] []
/src/php-src/ext/opcache/jit/zend_jit_ir.c [] []
/src/php-src/ext/reflection/php_reflection.c [] []
/src/php-src/ext/dom/html5_parser.c [] []
/src/php-src/ext/gmp/gmp_arginfo.h [] []
/src/php-src/Zend/zend_string.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/Zend/Optimizer/zend_dfg.c [] []
/src/php-src/ext/intl/common/common_date.cpp [] []
/src/php-src/ext/mysqlnd/mysqlnd_ps_codec.c [] []
/src/php-src/ext/tokenizer/tokenizer_data.c [] []
/src/php-src/ext/sockets/conversions.c [] []
/src/php-src/Zend/zend_compile.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/readline/readline_arginfo.h [] []
/src/php-src/sapi/fpm/fpm/fpm_signals.c [] []
/src/php-src/ext/standard/libavifinfo/avifinfo.c [] []
/src/php-src/ext/com_dotnet/com_persist_arginfo.h [] []
/src/php-src/sapi/fpm/fpm/fpm_worker_pool.c [] []
/src/php-src/win32/registry.c [] []
/src/php-src/ext/bz2/bz2_filter.c [] []
/src/php-src/ext/opcache/jit/ir/ir_strtab.c [] []
/src/php-src/ext/pdo/pdo_stmt.c [] []
/src/php-src/ext/phar/stub.h [] []
/src/php-src/ext/lexbor/lexbor/core/array_obj.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/node.c [] []
/src/php-src/ext/bcmath/libbcmath/src/convert.h [] []
/src/php-src/ext/intl/dateformat/datepatterngenerator_class.h [] []
/src/php-src/ext/soap/php_encoding.c [] []
/src/php-src/ext/zip/php_zip.c [] []
/src/php-src/ext/pdo_dblib/dblib_driver.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-function-jit.c'] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_rawtext.c [] []
/src/php-src/ext/intl/breakiterator/breakiterator_iterators.cpp [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/template_element.c [] []
/src/php-src/ext/opcache/jit/ir/ir_save.c [] []
/src/php-src/sapi/litespeed/lscriu.c [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_rcdata.c [] []
/src/php-src/ext/standard/scanf.c [] []
/src/php-src/Zend/zend.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/intl/calendar/calendar_methods.cpp [] []
/src/php-src/sapi/fpm/fpm/fpm_cleanup.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitNativeX86_32.c [] []
/src/php-src/ext/standard/quot_print.c [] []
/src/php-src/ext/bcmath/libbcmath/src/bcmath.h [] []
/src/php-src/ext/dom/html_collection.c [] []
/src/php-src/Zend/zend_arena.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/Zend/zend_ptr_stack.h [] []
/src/php-src/ext/fileinfo/libmagic/is_json.c [] []
/src/php-src/main/output.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/pdo_sqlite/pdo_sqlite_arginfo.h [] []
/src/php-src/Zend/zend_sort.c [] []
/src/php-src/Zend/zend_exceptions.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/dom/html5_serializer.c [] []
/src/php-src/win32/nice.c [] []
/src/php-src/ext/intl/normalizer/normalizer_class.c [] []
/src/php-src/sapi/phpdbg/phpdbg_cmd.c [] []
/src/php-src/ext/lexbor/lexbor/ports/windows_nt/lexbor/core/memory.c [] []
/src/php-src/Zend/zend_string.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/opcache/jit/ir/dynasm/dasm_x86.h [] []
/src/php-src/ext/standard/net.c [] []
/src/php-src/ext/opcache/zend_accelerator_module.c [] []
/src/php-src/ext/mbstring/libmbfl/mbfl/mbfl_string.c [] []
/src/php-src/ext/snmp/php_snmp.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/lexbor/lexbor/core/shs.h [] []
/src/php-src/Zend/zend_fibers_arginfo.h [] []
/src/php-src/Zend/zend_stream.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-function-jit.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-function-jit.c']
/src/php-src/ext/intl/collator/collator_convert.c [] []
/src/php-src/ext/mysqli/mysqli_result_iterator.c [] []
/src/php-src/ext/sqlite3/php_sqlite3_structs.h [] []
/src/php-src/main/explicit_bzero.c [] []
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_utf7imap.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/canvas_element.c [] []
/src/php-src/ext/bcmath/libbcmath/src/raisemod.c [] []
/src/php-src/ext/pdo_mysql/pdo_mysql.c [] []
/src/php-src/ext/intl/calendar/gregoriancalendar_methods.cpp [] []
/src/php-src/ext/lexbor/lexbor/ns/ns.c [] []
/src/php-src/ext/opcache/zend_accelerator_util_funcs.c [] []
/src/php-src/ext/fileinfo/fileinfo_arginfo.h [] []
/src/php-src/Zend/zend_fibers.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/dom/private_data.c [] []
/src/php-src/ext/mbstring/libmbfl/mbfl/mbfl_memory_device.c [] []
/src/php-src/ext/dom/xpath_callbacks.c [] []
/src/php-src/ext/pcre/php_pcre.c [] []
/src/php-src/ext/intl/php_intl.c [] []
/src/php-src/ext/standard/crypt_blowfish.c [] []
/src/php-src/ext/intl/dateformat/datepatterngenerator_class.cpp [] []
/src/php-src/Zend/Optimizer/pass1.c [] []
/src/php-src/ext/gd/libgd/gd_webp.c [] []
/src/php-src/ext/gd/libgd/gdfontl.c [] []
/src/php-src/Zend/zend_execute_API.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/dba/dba_db4.c [] []
/src/php-src/ext/hash/hash_whirlpool.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/html_element.c [] []
/src/php-src/ext/date/lib/timelib.c [] []
/src/php-src/ext/hash/hash_gost.c [] []
/src/php-src/ext/lexbor/lexbor/html/encoding.c [] []
/src/php-src/ext/standard/crypt.c [] []
/src/php-src/ext/fileinfo/libmagic/buffer.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/heading_element.c [] []
/src/php-src/sapi/fpm/fpm/zlog.c [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer.h [] []
/src/php-src/ext/calendar/calendar.c [] []
/src/php-src/ext/standard/crc32.c [] []
/src/php-src/sapi/fpm/fpm/fpm_main.c [] []
/src/php-src/Zend/zend_virtual_cwd.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/intl/spoofchecker/spoofchecker_class.h [] []
/src/php-src/Zend/zend_iterators.c [] []
/src/php-src/main/php_ini_builder.c [] []
/src/php-src/ext/tidy/tidy.c [] []
/src/php-src/ext/hash/hash_sha_ni.c [] []
/src/php-src/ext/intl/breakiterator/codepointiterator_internal.cpp [] []
/src/php-src/ext/lexbor/lexbor/core/plog.c [] []
/src/php-src/sapi/fpm/fpm/fpm_request.c [] []
/src/php-src/Zend/zend_dtrace.c [] []
/src/php-src/Zend/zend_cpuinfo.h [] []
/src/php-src/ext/sodium/sodium_pwhash.c [] []
/src/php-src/ext/calendar/calendar_arginfo.h [] []
/src/php-src/main/php_ini.c [] []
/src/php-src/ext/lexbor/lexbor/core/bst_map.c [] []
/src/php-src/win32/winutil.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/sapi/fpm/fpm/fpm_sockets.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/input_element.c [] []
/src/php-src/Zend/zend_hash.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/standard/microtime.c [] []
/src/php-src/main/php_ini_builder.h [] []
/src/php-src/ext/date/lib/parse_tz.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/active_formatting.h [] []
/src/php-src/ext/sqlite3/sqlite3.c [] []
/src/php-src/ext/opcache/zend_accelerator_hash.h [] []
/src/php-src/Zend/Optimizer/pass3.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_after_frameset.c [] []
/src/php-src/ext/intl/uchar/uchar.c [] []
/src/php-src/ext/intl/intl_convert.c [] []
/src/php-src/sapi/fpm/fpm/events/poll.c [] []
/src/php-src/main/php_syslog.c [] []
/src/php-src/ext/session/session.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_select_in_table.c [] []
/src/php-src/Zend/zend_attributes_arginfo.h [] []
/src/php-src/ext/opcache/zend_file_cache.c [] []
/src/php-src/ext/opcache/jit/ir/ir_gdb.c [] []
/src/php-src/main/streams/userspace_arginfo.h [] []
/src/php-src/ext/fileinfo/libmagic/is_simh.c [] []
/src/php-src/Zend/Optimizer/dce.c [] []
/src/php-src/ext/mysqli/mysqli_exception.c [] []
/src/php-src/ext/intl/dateformat/dateformat_create.cpp [] []
/src/php-src/win32/ioutil.c [] []
/src/php-src/ext/bz2/bz2.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_driver.c [] []
/src/php-src/ext/intl/dateformat/dateformat_format_object.cpp [] []
/src/php-src/ext/fileinfo/libmagic/strcasestr.c [] []
/src/php-src/sapi/fpm/fpm/fpm_arrays.h [] []
/src/php-src/ext/date/lib/parse_date.c [] []
/src/php-src/ext/spl/spl_iterators_arginfo.h [] []
/src/php-src/ext/com_dotnet/tests/comtest/comtest.cpp [] []
/src/php-src/sapi/fpm/fpm/events/port.c [] []
/src/php-src/Zend/zend_hrtime.h [] []
/src/php-src/ext/lexbor/lexbor/html/style.c [] []
/src/php-src/ext/sockets/sockaddr_conv.c [] []
/src/php-src/ext/phar/phar.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/error.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_table.c [] []
/src/php-src/ext/sockets/php_sockets.h [] []
/src/php-src/ext/pdo/pdo_stmt_arginfo.h [] []
/src/php-src/ext/gd/libgd/gd_color_match.c [] []
/src/php-src/ext/gd/libgd/gdcache.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_frameset.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitSerialize.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_connection.c [] []
/src/php-src/ext/intl/collator/collator_class.h [] []
/src/php-src/Zend/zend_smart_str.c [] []
/src/php-src/ext/opcache/jit/ir/dynasm/dasm_arm64.h [] []
/src/php-src/TSRM/tsrm_win32.c [] []
/src/php-src/ext/lexbor/lexbor/css/selectors/pseudo.c [] []
/src/php-src/ext/lexbor/lexbor/core/mem.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/directory_element.c [] []
/src/php-src/ext/lexbor/lexbor/core/dobject.h [] []
/src/php-src/win32/readdir.c [] []
/src/php-src/sapi/fuzzer/fuzzer-mbregex.c ['sapi/fuzzer/fuzzer-mbregex.c'] ['sapi/fuzzer/fuzzer-mbregex.c']
/src/php-src/ext/lexbor/lexbor/core/plog.h [] []
/src/php-src/Zend/zend_call_stack.h [] []
/src/php-src/ext/shmop/shmop_arginfo.h [] []
/src/php-src/ext/standard/dir_arginfo.h [] []
/src/php-src/ext/opcache/jit/ir/ir_gcm.c [] []
/src/php-src/ext/gd/libgd/gd_interpolation.c [] []
/src/php-src/Zend/zend_hrtime.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_maketables.c [] []
/src/php-src/ext/snmp/snmp_arginfo.h [] []
/src/php-src/Zend/zend_builtin_functions.c [] []
/src/php-src/ext/lexbor/lexbor/html/tag.h [] []
/src/php-src/ext/lexbor/lexbor/css/selectors/selectors.h [] []
/src/php-src/ext/enchant/enchant_arginfo.h [] []
/src/php-src/ext/dba/dba_cdb.c [] []
/src/php-src/sapi/fpm/fpm/fpm_stdio.c [] []
/src/php-src/ext/opcache/jit/ir/dynasm/dasm_arm.h [] []
/src/php-src/sapi/fpm/fpm/events/kqueue.c [] []
/src/php-src/ext/intl/dateformat/datepatterngenerator_arginfo.h [] []
/src/php-src/ext/reflection/php_reflection_arginfo.h [] []
/src/php-src/ext/standard/php_password.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/opt_group_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/window.c [] []
/src/php-src/ext/bcmath/bcmath_arginfo.h [] []
/src/php-src/ext/mysqlnd/mysqlnd_result.c [] []
/src/php-src/Zend/zend_execute.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/bcmath/libbcmath/src/neg.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitNativeRISCV_common.c [] []
/src/php-src/ext/soap/php_schema.c [] []
/src/php-src/ext/intl/timezone/timezone_class.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/br_element.c [] []
/src/php-src/ext/zend_test/object_handlers.c [] []
/src/php-src/ext/soap/php_soap.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/media_element.c [] []
/src/php-src/ext/pdo_firebird/pdo_firebird_utils.cpp [] []
/src/php-src/ext/com_dotnet/com_wrapper.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/pcre/pcre2lib/pcre2_compile_class.c [] []
/src/php-src/ext/intl/php_intl_arginfo.h [] []
/src/php-src/ext/spl/spl_directory_arginfo.h [] []
/src/php-src/Zend/zend_extensions.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/sapi/phpdbg/phpdbg_win.c [] []
/src/php-src/Zend/zend_observer.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/pdo_mysql/php_pdo_mysql_int.h [] []
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_htmlent.c [] []
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_qprint.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_after_body.c [] []
/src/php-src/main/streams/filter.c [] []
/src/php-src/ext/gd/libgd/gd_io_file.c [] []
/src/php-src/main/php_variables.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/opcache/zend_persist_calc.c [] []
/src/php-src/ext/spl/spl_iterators.c [] []
/src/php-src/ext/lexbor/lexbor/html/token.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/o_list_element.c [] []
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_utf7.c [] []
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_utf32.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/mod_element.c [] []
/src/php-src/Zend/Optimizer/dfa_pass.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/select_element.c [] []
/src/php-src/ext/intl/dateformat/dateformat_format.c [] []
/src/php-src/ext/pdo_sqlite/sqlite_statement.c [] []
/src/php-src/Zend/zend_weakrefs.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/standard/dns.c [] []
/src/php-src/ext/spl/spl_exceptions_arginfo.h [] []
/src/php-src/sapi/litespeed/lsapilib.c [] []
/src/php-src/ext/dom/serialize_common.h [] []
/src/php-src/ext/dba/dba_tcadb.c [] []
/src/php-src/sapi/fuzzer/fuzzer-unserializehash.c ['sapi/fuzzer/fuzzer-unserializehash.c'] ['sapi/fuzzer/fuzzer-unserializehash.c']
/src/php-src/ext/uri/uriparser/src/UriIp4Base.c [] []
/src/php-src/ext/mysqli/mysqli_driver.c [] []
/src/php-src/ext/calendar/gregor.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/document.c [] []
/src/php-src/ext/random/random.c [] []
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_utf16.c [] []
/src/php-src/main/strlcpy.c [] []
/src/php-src/ext/pdo/pdo.c [] []
/src/php-src/ext/dom/inner_outer_html_mixin.c [] []
/src/php-src/ext/filter/filter_arginfo.h [] []
/src/php-src/ext/pdo_firebird/firebird_statement.c [] []
/src/php-src/ext/dom/document.c [] []
/src/php-src/ext/pdo_sqlite/sqlite_driver.c [] []
/src/php-src/ext/snmp/snmp.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/lexbor/lexbor/core/strtod.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_charset.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document_type.c [] []
/src/php-src/ext/lexbor/lexbor/core/print.c [] []
/src/php-src/ext/opcache/jit/ir/ir_dump.c [] []
/src/php-src/ext/bcmath/libbcmath/src/floor_or_ceil.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_convert.c [] []
/src/php-src/ext/gd/gd_arginfo.h [] []
/src/php-src/ext/openssl/openssl.c [] []
/src/php-src/ext/spl/spl_observer_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/css/selectors/pseudo_state.c [] []
/src/php-src/ext/date/lib/parse_iso_intervals.c [] []
/src/php-src/Zend/zend_types.h [] []
/src/php-src/ext/opcache/jit/ir/ir_cfg.c [] []
/src/php-src/Zend/zend_hash.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/Zend/zend_exceptions_arginfo.h [] []
/src/php-src/ext/uri/php_uri_common.c [] []
/src/php-src/ext/opcache/shared_alloc_win32.c [] []
/src/php-src/ext/opcache/jit/ir/ir.c [] []
/src/php-src/ext/dba/libcdb/cdb_make.c [] []
/src/php-src/Zend/zend_float.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/sapi/fpm/fpm/fpm_systemd.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_match_data.c [] []
/src/php-src/ext/intl/listformatter/listformatter_class.c [] []
/src/php-src/sapi/cli/php_cli.c [] []
/src/php-src/ext/opcache/jit/ir/dynasm/minilua.c [] []
/src/php-src/Zend/zend_default_classes.c [] []
/src/php-src/ext/gd/libgd/gdhelpers.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_valid_utf.c [] []
/src/php-src/sapi/phpdbg/phpdbg_out.c [] []
/src/php-src/ext/fileinfo/libmagic/fsmagic.c [] []
/src/php-src/sapi/fpm/fpm/events/select.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/link_element.c [] []
/src/php-src/ext/curl/curl_file.c [] []
/src/php-src/ext/intl/breakiterator/breakiterator_class.h [] []
/src/php-src/ext/pdo/pdo_dbh_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/css/state.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/u_list_element.c [] []
/src/php-src/main/getopt.c [] []
/src/php-src/Zend/zend_operators.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/Zend/zend_system_id.c [] []
/src/php-src/ext/dom/internal_helpers.h [] []
/src/php-src/ext/tokenizer/tokenizer_data_arginfo.h [] []
/src/php-src/ext/pdo_mysql/mysql_statement.c [] []
/src/php-src/ext/sodium/libsodium.c [] []
/src/php-src/ext/mbstring/libmbfl/mbfl/mbfl_language.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/video_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_column_group.c [] []
/src/php-src/ext/gd/libgd/gd_gd.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/allocator_src/sljitExecAllocatorApple.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/meta_element.c [] []
/src/php-src/ext/lexbor/lexbor/core/mraw.c [] []
/src/php-src/ext/mbstring/libmbfl/mbfl/mbfl_filter_output.c [] []
/src/php-src/ext/bcmath/libbcmath/src/convert.c [] []
/src/php-src/ext/intl/msgformat/msgformat_parse.c [] []
/src/php-src/ext/uri/uriparser/src/UriMemory.c [] []
/src/php-src/sapi/fpm/fpm/fpm_conf.c [] []
/src/php-src/ext/intl/grapheme/grapheme_util.c [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer.h [] []
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_ucs4.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_body.c [] []
/src/php-src/ext/intl/dateformat/dateformat_data.c [] []
/src/php-src/Zend/zend_generators_arginfo.h [] []
/src/php-src/ext/intl/formatter/formatter_arginfo.h [] []
/src/php-src/ext/intl/dateformat/dateformat_class.c [] []
/src/php-src/ext/com_dotnet/php_com_dotnet_internal.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/opcache/zend_shared_alloc.h [] []
/src/php-src/ext/mbstring/mbstring_arginfo.h [] []
/src/php-src/ext/phar/stream.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitNativePPC_common.c [] []
/src/php-src/ext/curl/interface.c [] []
/src/php-src/ext/hash/hash_tiger.c [] []
/src/php-src/ext/standard/basic_functions_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/core/utils.c [] []
/src/php-src/sapi/fpm/fpm/fpm_scoreboard.c [] []
/src/php-src/ext/dom/namespace_compat.c [] []
/src/php-src/ext/zend_test/test.c [] []
/src/php-src/ext/hash/php_hash.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/field_set_element.c [] []
/src/php-src/ext/opcache/jit/ir/ir_fold.h [] []
/src/php-src/ext/session/session_arginfo.h [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_config.c [] []
/src/php-src/Zend/zend_variables.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/sapi/fpm/fpm/fpm_log.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_neon_inc.h [] []
/src/php-src/ext/pdo/pdo_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/unicode/idna.c [] []
/src/php-src/ext/bcmath/libbcmath/src/sub.c [] []
/src/php-src/ext/session/mod_files.c [] []
/src/php-src/ext/intl/dateformat/dateformat_parse.c [] []
/src/php-src/ext/dba/libinifile/inifile.c [] []
/src/php-src/ext/intl/msgformat/msgformat.c [] []
/src/php-src/ext/bcmath/bcmath.c [] []
/src/php-src/Zend/zend_weakrefs.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/lexbor/lexbor/html/token_attr.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/shadow_root.c [] []
/src/php-src/sapi/fuzzer/fuzzer-tracing-jit.c ['sapi/fuzzer/fuzzer-tracing-jit.c'] ['sapi/fuzzer/fuzzer-tracing-jit.c']
/src/php-src/ext/curl/multi.c [] []
/src/php-src/ext/intl/locale/locale_methods.c [] []
/src/php-src/ext/calendar/jewish.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/text.c [] []
/src/php-src/ext/gd/libgd/gdfonts.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/element.h [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/node.h [] []
/src/php-src/ext/phar/phar_object_arginfo.h [] []
/src/php-src/ext/zend_test/test_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/title_element.c [] []
/src/php-src/ext/ftp/ftp.c [] []
/src/php-src/ext/session/mod_mm.c [] []
/src/php-src/ext/com_dotnet/com_saproxy.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/Zend/zend_opcode.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-function-jit.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-function-jit.c']
/src/php-src/ext/mysqlnd/mysqlnd_wireprotocol.c [] []
/src/php-src/Zend/Optimizer/sccp.c [] []
/src/php-src/ext/fileinfo/libmagic/funcs.c [] []
/src/php-src/Zend/zend_smart_string.h [] []
/src/php-src/ext/dom/documenttype.c [] []
/src/php-src/win32/codepage.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/date/lib/tm2unixtime.c [] []
/src/php-src/ext/lexbor/lexbor/html/interface.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/quote_element.c [] []
/src/php-src/Zend/zend_call_stack.c [] []
/src/php-src/ext/standard/url.c [] []
/src/php-src/ext/intl/intl_convertcpp.cpp [] []
/src/php-src/Zend/zend_enum.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/hash/hash_murmur.c [] []
/src/php-src/ext/uri/php_uri_common.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/document.h [] []
/src/php-src/sapi/fpm/fpm/fpm_events.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_pattern_info.c [] []
/src/php-src/win32/ioutil.h [] []
/src/php-src/main/streams/streams.c [] []
/src/php-src/ext/opcache/jit/ir/ir_check.c [] []
/src/php-src/main/php_streams.h [] []
/src/php-src/ext/random/gammasection.c [] []
/src/php-src/ext/pdo_dblib/pdo_dblib_arginfo.h [] []
/src/php-src/Zend/zend_property_hooks.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/opcache/jit/ir/gen_ir_fold_hash.c [] []
/src/php-src/ext/dom/node.c [] []
/src/php-src/ext/opcache/jit/ir/ir_disasm.c [] []
/src/php-src/ext/opcache/zend_persist.c [] []
/src/php-src/ext/dom/php_dom_arginfo.h [] []
/src/php-src/ext/uri/php_uri.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_caption.c [] []
/src/php-src/Zend/Optimizer/nop_removal.c [] []
/src/php-src/Zend/Optimizer/optimize_temp_vars_5.c [] []
/src/php-src/main/php_scandir.c [] []
/src/php-src/ext/dom/token_list.h [] []
/src/php-src/sapi/litespeed/lsapilib.h [] []
/src/php-src/ext/json/json_encoder.c [] []
/src/php-src/Zend/zend_vm_def.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/lexbor/lexbor/core/swar.h [] []
/src/php-src/sapi/apache2handler/apache_config.c [] []
/src/php-src/ext/intl/grapheme/grapheme_string.c [] []
/src/php-src/ext/openssl/openssl_arginfo.h [] []
/src/php-src/ext/random/engine_mt19937.c [] []
/src/php-src/ext/intl/normalizer/normalizer_arginfo.h [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_match.c [] []
/src/php-src/ext/phar/util.c [] []
/src/php-src/ext/openssl/php_openssl_backend.h [] []
/src/php-src/Zend/zend_interfaces.h [] []
/src/php-src/ext/soap/php_xml.c [] []
/src/php-src/ext/standard/formatted_print.c [] []
/src/php-src/ext/xsl/php_xsl.c [] []
/src/php-src/ext/dom/text.c [] []
/src/php-src/ext/bcmath/libbcmath/src/round.c [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/token.h [] []
/src/php-src/ext/intl/common/common_arginfo.h [] []
/src/php-src/ext/readline/readline_cli.c [] []
/src/php-src/ext/standard/basic_functions.c [] []
/src/php-src/ext/standard/file_arginfo.h [] []
/src/php-src/ext/xmlwriter/php_xmlwriter_arginfo.h [] []
/src/php-src/ext/opcache/zend_shared_alloc.c [] []
/src/php-src/ext/openssl/php_openssl.h [] []
/src/php-src/Zend/zend_variables.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_singlebyte.c [] []
/src/php-src/ext/lexbor/lexbor/html/node.c [] []
/src/php-src/ext/mysqli/mysqli_warning.c [] []
/src/php-src/ext/gd/libgd/gd_jpeg.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_serialize.c [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_comment.c [] []
/src/php-src/ext/gd/libgd/testac.c [] []
/src/php-src/ext/hash/sha3/generic32lc/KeccakP-1600-inplace32BI.c [] []
/src/php-src/ext/standard/levenshtein.c [] []
/src/php-src/ext/intl/msgformat/msgformat_helpers.cpp [] []
/src/php-src/ext/pdo_firebird/pdo_firebird_arginfo.h [] []
/src/php-src/ext/spl/spl_dllist_arginfo.h [] []
/src/php-src/ext/lexbor/php_lexbor.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_ext_plugin.c [] []
/src/php-src/ext/xml/xml.c [] []
/src/php-src/ext/lexbor/lexbor/core/serialize.c [] []
/src/php-src/ext/lexbor/lexbor/core/bst.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitNativeS390X.c [] []
/src/php-src/Zend/zend_ptr_stack.c [] []
/src/php-src/ext/lexbor/lexbor/core/array.c [] []
/src/php-src/ext/dba/libflatfile/flatfile.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitNativeMIPS_32.c [] []
/src/php-src/ext/fileinfo/libmagic/print.c [] []
/src/php-src/Zend/Optimizer/zend_optimizer.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/cdata_section.c [] []
/src/php-src/ext/xsl/php_xsl.h [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer/error.c [] []
/src/php-src/ext/gd/libgd/gd_crop.c [] []
/src/php-src/ext/uri/php_uri_arginfo.h [] []
/src/php-src/sapi/phpdbg/phpdbg_prompt.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_dfa_match.c [] []
/src/php-src/ext/xmlreader/php_xmlreader.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/standard/dl.c [] []
/src/php-src/ext/lexbor/lexbor/css/css.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/frame_element.c [] []
/src/php-src/ext/gd/libgd/gd_png.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_auto_possess.c [] []
/src/php-src/ext/standard/var.c ['sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/lexbor/lexbor/css/rule.h [] []
/src/php-src/ext/standard/password.c [] []
/src/php-src/sapi/phpdbg/phpdbg_utils.c [] []
/src/php-src/ext/lexbor/lexbor/selectors/selectors.c [] []
/src/php-src/sapi/fuzzer/fuzzer-json.c ['sapi/fuzzer/fuzzer-json.c'] ['sapi/fuzzer/fuzzer-json.c']
/src/php-src/ext/ftp/ftp_arginfo.h [] []
/src/php-src/ext/bcmath/libbcmath/src/int2num.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_vio.c [] []
/src/php-src/ext/sodium/sodium_pwhash_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document_fragment.c [] []
/src/php-src/ext/lexbor/lexbor/core/array.h [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_printint.c [] []
/src/php-src/ext/zip/php_zip_arginfo.h [] []
/src/php-src/ext/dba/libcdb/uint32.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitNativeARM_32.c [] []
/src/php-src/Zend/zend_bitset.h [] []
/src/php-src/main/streams/mmap.c [] []
/src/php-src/ext/spl/spl_heap.c [] []
/src/php-src/ext/mysqlnd/mysql_float_to_double.h [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_misc.c [] []
/src/php-src/ext/opcache/zend_accelerator_blacklist.c [] []
/src/php-src/Zend/Optimizer/compact_vars.c [] []
/src/php-src/main/php_network.h [] []
/src/php-src/sapi/phpdbg/phpdbg_bp.c [] []
/src/php-src/sapi/phpdbg/phpdbg_arginfo.h [] []
/src/php-src/ext/bcmath/libbcmath/src/sqrt.c [] []
/src/php-src/ext/lexbor/lexbor/punycode/punycode.c [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/token.c [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/error.c [] []
/src/php-src/ext/intl/msgformat/msgformat_data.c [] []
/src/php-src/ext/standard/math.c [] []
/src/php-src/Zend/zend_weakrefs_arginfo.h [] []
/src/php-src/ext/mbstring/php_unicode.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/element.h [] []
/src/php-src/ext/pdo/php_pdo_driver.h [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_script.c [] []
/src/php-src/ext/mbstring/libmbfl/mbfl/mbfilter_8bit.c [] []
/src/php-src/ext/standard/pack.c [] []
/src/php-src/ext/mbstring/php_unicode.c [] []
/src/php-src/ext/calendar/easter.c [] []
/src/php-src/ext/mbstring/libmbfl/mbfl/mbfilter_pass.c [] []
/src/php-src/ext/uri/php_lexbor.c [] []
/src/php-src/ext/intl/intl_error.c [] []
/src/php-src/ext/ffi/ffi_arginfo.h [] []
/src/php-src/win32/codepage.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_doctype.c [] []
/src/php-src/ext/mysqli/mysqli.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/event_target.c [] []
/src/php-src/ext/gd/libgd/gd_rotate.c [] []
/src/php-src/ext/spl/spl_dllist.c [] []
/src/php-src/ext/standard/dir.c [] []
/src/php-src/ext/com_dotnet/com_com.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/intl/listformatter/listformatter_arginfo.h [] []
/src/php-src/sapi/fpm/fpm/fpm_shm.c [] []
/src/php-src/sapi/fuzzer/fuzzer-sapi.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/xsl/xsltprocessor.c [] []
/src/php-src/ext/opcache/jit/zend_jit_vm_helpers.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_head.c [] []
/src/php-src/ext/zend_test/zend_mm_custom_handlers.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/track_element.c [] []
/src/php-src/ext/ftp/php_ftp.c [] []
/src/php-src/ext/bcmath/libbcmath/src/nearzero.c [] []
/src/php-src/ext/calendar/julian.c [] []
/src/php-src/Zend/zend_API.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/standard/css.c [] []
/src/php-src/ext/simplexml/simplexml.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/intl/normalizer/normalizer_normalize.c [] []
/src/php-src/ext/intl/msgformat/msgformat_class.h [] []
/src/php-src/ext/lexbor/lexbor/url/url.c [] []
/src/php-src/ext/lexbor/lexbor/core/mraw.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_cell_element.c [] []
/src/php-src/main/streams/xp_socket.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/source_element.c [] []
/src/php-src/Zend/zend_interfaces.c [] []
/src/php-src/win32/fnmatch.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/button_element.c [] []
/src/php-src/ext/intl/listformatter/listformatter_class.h [] []
/src/php-src/ext/intl/spoofchecker/spoofchecker_class.c [] []
/src/php-src/Zend/zend_multiply.h [] []
/src/php-src/ext/bcmath/libbcmath/src/num2str.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/style_element.c [] []
/src/php-src/ext/zip/php_zip.h [] []
/src/php-src/Zend/zend_generators.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/div_element.c [] []
/src/php-src/ext/standard/file.c [] []
/src/php-src/sapi/fpm/fpm/fpm_atomic.h [] []
/src/php-src/ext/hash/sha3/generic32lc/KeccakHash.c [] []
/src/php-src/Zend/Optimizer/zend_call_graph.c [] []
/src/php-src/ext/dom/infra.c [] []
/src/php-src/ext/gd/libgd/gd_topal.c [] []
/src/php-src/ext/fileinfo/libmagic/is_csv.c [] []
/src/php-src/ext/lexbor/lexbor/dom/collection.h [] []
/src/php-src/ext/bcmath/libbcmath/src/rmzero.c [] []
/src/php-src/ext/hash/hash_crc32.c [] []
/src/php-src/Zend/Optimizer/ssa_integrity.c [] []
/src/php-src/ext/libxml/php_libxml.h [] []
/src/php-src/main/streams/glob_wrapper.c [] []
/src/php-src/ext/date/php_date.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_frameset.c [] []
/src/php-src/ext/tokenizer/tokenizer_arginfo.h [] []
/src/php-src/Zend/zend_closures_arginfo.h [] []
/src/php-src/Zend/zend_ast.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/Zend/Optimizer/scdf.c [] []
/src/php-src/ext/random/php_random.h [] []
/src/php-src/ext/mysqlnd/mysqlnd_alloc.h [] []
/src/php-src/Zend/zend_object_handlers.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/standard/proc_open.c [] []
/src/php-src/ext/dom/xml_common.h [] []
/src/php-src/sapi/fuzzer/fuzzer-execute-common.h [] []
/src/php-src/ext/openssl/openssl_pwhash.c [] []
/src/php-src/ext/lexbor/lexbor/html/node.h [] []
/src/php-src/ext/filter/sanitizing_filters.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_head_noscript.c [] []
/src/php-src/ext/hash/hash_sha.c [] []
/src/php-src/ext/intl/calendar/calendar_class.h [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/comment.c [] []
/src/php-src/ext/gmp/gmp.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/body_element.c [] []
/src/php-src/main/fopen_wrappers.c [] []
/src/php-src/ext/opcache/jit/ir/ir_perf.c [] []
/src/php-src/ext/com_dotnet/com_dotnet.c [] []
/src/php-src/ext/fileinfo/libmagic/cdf_time.c [] []
/src/php-src/ext/standard/sha1.c [] []
/src/php-src/main/network.c [] []
/src/php-src/Zend/Optimizer/escape_analysis.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document_type.h [] []
/src/php-src/sapi/phpdbg/phpdbg_frame.c [] []
/src/php-src/ext/opcache/ZendAccelerator.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document.h [] []
/src/php-src/ext/json/json.c [] []
/src/php-src/ext/fileinfo/libmagic/ascmagic.c [] []
/src/php-src/ext/mbstring/mbstring.c [] []
/src/php-src/ext/mysqli/mysqli_report.c [] []
/src/php-src/sapi/fpm/fpm/fpm_trace_ptrace.c [] []
/src/php-src/ext/intl/calendar/calendar_class.cpp [] []
/src/php-src/ext/xmlwriter/php_xmlwriter.c [] []
/src/php-src/ext/ffi/php_ffi.h [] []
/src/php-src/ext/pcntl/pcntl.c [] []
/src/php-src/ext/bcmath/libbcmath/src/add.c [] []
/src/php-src/ext/dom/php_dom.c [] []
/src/php-src/ext/lexbor/lexbor/core/in.h [] []
/src/php-src/ext/zend_test/observer.c [] []
/src/php-src/ext/opcache/jit/zend_jit.c [] []
/src/php-src/ext/fileinfo/libmagic/apptype.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/audio_element.c [] []
/src/php-src/ext/gd/libgd/wbmp.c [] []
/src/php-src/ext/ctype/ctype.c [] []
/src/php-src/Zend/zend_alloc.c [] []
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_uuencode.c [] []
/src/php-src/ext/sysvsem/sysvsem_arginfo.h [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_compile.c [] []
/src/php-src/ext/gd/libgd/gd_ss.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/paragraph_element.c [] []
/src/php-src/ext/sysvsem/sysvsem.c [] []
/src/php-src/ext/standard/exec.c [] []
/src/php-src/ext/lexbor/lexbor/core/conv.c [] []
/src/php-src/ext/pdo_pgsql/pdo_pgsql_arginfo.h [] []
/src/php-src/ext/opcache/shared_alloc_mmap.c [] []
/src/php-src/ext/xmlreader/php_xmlreader_arginfo.h [] []
/src/php-src/main/fastcgi.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/menu_element.c [] []
/src/php-src/win32/sockets.c [] []
/src/php-src/sapi/phpdbg/phpdbg_list.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/map_element.c [] []
/src/php-src/ext/intl/collator/collator_class.c [] []
/src/php-src/Zend/zend_fibers.h [] []
/src/php-src/ext/bcmath/libbcmath/src/xsse.h [] []
/src/php-src/Zend/zend_generators.c [] []
/src/php-src/ext/intl/idn/idn.c [] []
/src/php-src/ext/sysvmsg/sysvmsg.c [] []
/src/php-src/sapi/fpm/fpm/fpm.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_cell.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_structs.h [] []
/src/php-src/ext/zend_test/object_handlers_arginfo.h [] []
/src/php-src/ext/zlib/zlib_arginfo.h [] []
/src/php-src/ext/gd/libgd/gd_filter.c [] []
/src/php-src/Zend/zend_portability.h [] []
/src/php-src/sapi/phpdbg/phpdbg_io.c [] []
/src/php-src/ext/intl/breakiterator/rulebasedbreakiterator_methods.cpp [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/before_html.c [] []
/src/php-src/ext/com_dotnet/com_typeinfo.c [] []
/src/php-src/ext/pdo_dblib/pdo_dblib.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-function-jit.c'] []
/src/php-src/ext/phar/tar.c [] []
/src/php-src/Zend/zend_cpuinfo.c [] []
/src/php-src/sapi/phpdbg/phpdbg.c [] []
/src/php-src/ext/gd/libgd/gdkanji.c [] []
/src/php-src/ext/com_dotnet/com_extension_arginfo.h [] []
/src/php-src/sapi/fpm/fpm/events/epoll.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_plugin.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_statistics.c [] []
/src/php-src/ext/lexbor/lexbor/encoding/encoding.c [] []
/src/php-src/ext/gd/libgd/gdfontmb.c [] []
/src/php-src/ext/standard/crc32_x86.c [] []
/src/php-src/ext/lexbor/lexbor/core/mem.c [] []
/src/php-src/ext/fileinfo/libmagic/der.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_caption_element.c [] []
/src/php-src/sapi/fpm/fpm/fpm_php.c [] []
/src/php-src/ext/random/random_arginfo.h [] []
/src/php-src/ext/soap/soap.c [] []
/src/php-src/ext/dom/parentnode/tree.c [] []
/src/php-src/ext/date/lib/interval.c [] []
/src/php-src/ext/xml/compat.c [] []
/src/php-src/ext/dl_test/dl_test_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/element.c [] []
/src/php-src/sapi/fuzzer/fuzzer-exif.c ['sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/intl/formatter/formatter_class.c [] []
/src/php-src/ext/gd/libgd/webpng.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/lexbor/lexbor/html/tree/active_formatting.c [] []
/src/php-src/sapi/fuzzer/fuzzer-execute.c ['sapi/fuzzer/fuzzer-execute.c'] ['sapi/fuzzer/fuzzer-execute.c']
/src/php-src/ext/date/lib/astro.c [] []
/src/php-src/ext/libxml/libxml_arginfo.h [] []
/src/php-src/ext/mysqlnd/mysqlnd_ps.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/initial.c [] []
/src/php-src/ext/standard/fsock.c [] []
/src/php-src/ext/dba/libcdb/cdb.c [] []
/src/php-src/Zend/zend_ini.c [] []
/src/php-src/ext/pcntl/pcntl_arginfo.h [] []
/src/php-src/ext/spl/spl_functions.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/font_element.c [] []
/src/php-src/main/php_ticks.c [] []
/src/php-src/ext/intl/formatter/formatter_main.c [] []
/src/php-src/ext/mbstring/libmbfl/filters/utf7_helper.h [] []
/src/php-src/ext/posix/posix_arginfo.h [] []
/src/php-src/ext/odbc/odbc_arginfo.h [] []
/src/php-src/sapi/fpm/fpm/fpm_env.c [] []
/src/php-src/ext/mbstring/libmbfl/mbfl/mbfilter.c [] []
/src/php-src/ext/filter/callback_filter.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/frame_set_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/picture_element.c [] []
/src/php-src/ext/standard/php_fopen_wrapper.c [] []
/src/php-src/ext/sqlite3/sqlite3_arginfo.h [] []
/src/php-src/ext/intl/msgformat/msgformat_arginfo.h [] []
/src/php-src/ext/date/lib/dow.c [] []
/src/php-src/ext/json/php_json_encoder.h [] []
/src/php-src/ext/exif/exif_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/encoding/encoding.h [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/text.c [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/state.c [] []
/src/php-src/sapi/embed/php_embed.c [] []
/src/php-src/ext/bcmath/libbcmath/src/init.c [] []
/src/php-src/ext/soap/soap_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/core/sbst.h [] []
/src/php-src/ext/phar/phar_object.c [] []
/src/php-src/ext/standard/base64.c [] []
/src/php-src/ext/lexbor/lexbor/tag/tag.h [] []
/src/php-src/ext/lexbor/lexbor/html/encoding.h [] []
/src/php-src/ext/random/php_random_csprng.h [] []
/src/php-src/Zend/zend_operators.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/com_dotnet/com_iterator.c [] []
/src/php-src/ext/lexbor/lexbor/tag/tag.c [] []
/src/php-src/ext/dom/entity.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/area_element.c [] []
/src/php-src/ext/openssl/openssl_backend_common.c [] []
/src/php-src/ext/gd/gd.c [] []
/src/php-src/ext/lexbor/lexbor/encoding/decode.c [] []
/src/php-src/Zend/zend_highlight.c [] []
/src/php-src/ext/standard/mail.c [] []
/src/php-src/ext/bcmath/libbcmath/src/div.c [] []
/src/php-src/sapi/phpdbg/phpdbg_set.c [] []
/src/php-src/ext/filter/filter.c [] []
/src/php-src/ext/hash/hash_snefru.c [] []
/src/php-src/sapi/fpm/fpm/fpm_children.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_row.c [] []
/src/php-src/ext/standard/versioning.c [] []
/src/php-src/ext/pdo_pgsql/pgsql_statement.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/data_element.c [] []
/src/php-src/sapi/fuzzer/fuzzer-mbstring.c ['sapi/fuzzer/fuzzer-mbstring.c'] ['sapi/fuzzer/fuzzer-mbstring.c']
/src/php-src/ext/lexbor/lexbor/core/diyfp.c [] []
/src/php-src/ext/filter/logical_filters.c [] []
/src/php-src/ext/gd/libgd/gd_xbm.c [] []
/src/php-src/ext/standard/incomplete_class.c [] []
/src/php-src/ext/spl/spl_observer.c [] []
/src/php-src/ext/intl/resourcebundle/resourcebundle_class.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_body.c [] []
/src/php-src/Zend/zend_attributes.h [] []
/src/php-src/ext/curl/share.c [] []
/src/php-src/Zend/Optimizer/compact_literals.c [] []
/src/php-src/ext/hash/murmur/endianness.h [] []
/src/php-src/Zend/zend_vm_trace_lines.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/d_list_element.c [] []
/src/php-src/main/streams/cast.c [] []
/src/php-src/ext/lexbor/lexbor/selectors/selectors.h [] []
/src/php-src/ext/intl/formatter/formatter_data.c [] []
/src/php-src/ext/dom/xml_document.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_template.c [] []
/src/php-src/Zend/zend_signal.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/lexbor/lexbor/core/in.c [] []
/src/php-src/ext/sockets/sockets.c [] []
/src/php-src/main/php_open_temporary_file.c [] []
/src/php-src/ext/posix/posix.c [] []
/src/php-src/sapi/apache2handler/php_functions.c [] []
/src/php-src/ext/calendar/french.c [] []
/src/php-src/Zend/zend_enum.h ['sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/gd/libgd/gd_avif.c [] []
/src/php-src/Zend/Optimizer/zend_dump.c [] []
/src/php-src/sapi/fpm/fpm/fpm_clock.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/label_element.c [] []
/src/php-src/ext/standard/flock_compat.c [] []
/src/php-src/ext/bcmath/libbcmath/src/raise.c [] []
/src/php-src/ext/shmop/shmop.c [] []
/src/php-src/ext/opcache/jit/zend_jit_internal.h [] []
/src/php-src/ext/uri/uriparser/src/UriEscape.c [] []
/src/php-src/Zend/zend_interfaces_arginfo.h [] []
/src/php-src/ext/standard/password_arginfo.h [] []
/src/php-src/ext/iconv/iconv_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/param_element.c [] []
/src/php-src/ext/standard/string.c [] []
/src/php-src/ext/spl/spl_array.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/gd/libgd/gd_gif_in.c [] []
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_cjk.c [] []
/src/php-src/ext/mysqli/mysqli_prop.c [] []
/src/php-src/main/main.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/intl/timezone/timezone_class.cpp [] []
/src/php-src/ext/json/json_arginfo.h [] []
/src/php-src/ext/fileinfo/libmagic/cdf.c [] []
/src/php-src/ext/dom/namednodemap.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/open_elements.c [] []
/src/php-src/ext/gd/libgd/gd_io_dp.c [] []
/src/php-src/ext/fileinfo/fileinfo.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/element.c [] []
/src/php-src/ext/lexbor/lexbor/css/log.c [] []
/src/php-src/ext/intl/collator/collator_sort.c [] []
/src/php-src/ext/dba/dba.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_result_meta.c [] []
/src/php-src/ext/standard/crypt_sha512.c [] []
/src/php-src/ext/lexbor/lexbor/html/parser.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/form_element.c [] []
/src/php-src/ext/intl/locale/locale_class.c [] []
/src/php-src/sapi/phpdbg/phpdbg_print.c [] []
/src/php-src/Zend/zend_compile.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/standard/uuencode.c [] []
/src/php-src/ext/gd/libgd/gd_gd2.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/li_element.c [] []
/src/php-src/ext/pdo_sqlite/pdo_sqlite.c [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/syntax.c [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer.c [] []
/src/php-src/ext/dom/xml_serializer.c [] []
/src/php-src/Zend/zend_builtin_functions_arginfo.h [] []
/src/php-src/ext/standard/credits.c [] []
/src/php-src/ext/bcmath/libbcmath/src/doaddsub.c [] []
/src/php-src/ext/hash/hash_md.c [] []
/src/php-src/ext/mbstring/libmbfl/mbfl/mbfilter.h [] []
/src/php-src/sapi/fuzzer/fuzzer-unserialize.c ['sapi/fuzzer/fuzzer-unserialize.c'] ['sapi/fuzzer/fuzzer-unserialize.c']
/src/php-src/ext/lexbor/lexbor/html/interfaces/text_area_element.c [] []
/src/php-src/sapi/phpdbg/phpdbg_help.c [] []
/src/php-src/ext/hash/hash_joaat.c [] []
/src/php-src/ext/lexbor/lexbor/core/hash.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/option_element.c [] []
/src/php-src/win32/ftok.c [] []
/src/php-src/ext/lexbor/lexbor/unicode/unicode.c [] []
/src/php-src/ext/gd/libgd/gd_matrix.c [] []
/src/php-src/ext/gd/libgd/gd_bmp.c [] []
/src/php-src/ext/spl/spl_fixedarray_arginfo.h [] []
/src/php-src/ext/mbstring/libmbfl/mbfl/mbfl_encoding.h ['sapi/fuzzer/fuzzer-mbstring.c'] []
/src/php-src/Zend/zend_closures.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/lexbor/lexbor/dom/exception.c [] []
/src/php-src/ext/intl/resourcebundle/resourcebundle.c [] []
/src/php-src/sapi/phpdbg/phpdbg_utils.h [] []
/src/php-src/ext/lexbor/lexbor/encoding/multi.h [] []
/src/php-src/ext/gd/libgd/gdft.c [] []
/src/php-src/ext/hash/hash_xxhash.c [] []
/src/php-src/ext/phar/func_interceptors.c [] []
/src/php-src/main/streams/userspace.c [] []
/src/php-src/Zend/Optimizer/scdf.h [] []
/src/php-src/ext/zip/zip_stream.c [] []
/src/php-src/Zend/zend_llist.h [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_table_body.c [] []
/src/php-src/ext/standard/type.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/foreign_content.c [] []
/src/php-src/ext/intl/spoofchecker/spoofchecker_arginfo.h [] []
/src/php-src/ext/dom/lexbor/selectors-adapted/selectors.c [] []
/src/php-src/ext/gd/libgd/gdtest.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_substring.c [] []
/src/php-src/ext/opcache/shared_alloc_shm.c [] []
/src/php-src/ext/standard/filters.c [] []
/src/php-src/ext/intl/transliterator/transliterator_methods.c [] []
/src/php-src/ext/readline/readline.c [] []
/src/php-src/Zend/zend_observer.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_simd_inc.h [] []
/src/php-src/ext/ffi/ffi.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/standard/html.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/processing_instruction.h [] []
/src/php-src/ext/json/php_json.h [] []
/src/php-src/Zend/zend_execute.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/random/engine_xoshiro256starstar.c [] []
/src/php-src/main/safe_bcmp.c [] []
/src/php-src/ext/intl/transliterator/transliterator_arginfo.h [] []
/src/php-src/ext/pdo_odbc/odbc_driver.c [] []
/src/php-src/Zend/zend_vm_execute.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-function-jit.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-function-jit.c']
/src/php-src/ext/intl/breakiterator/codepointiterator_methods.cpp [] []
/src/php-src/ext/lexbor/lexbor/core/shs.c [] []
/src/php-src/main/strlcat.c [] []
/src/php-src/ext/standard/ftp_fopen_wrapper.c [] []
/src/php-src/ext/lexbor/lexbor/css/parser.h [] []
/src/php-src/ext/dom/dom_iterators.c [] []
/src/php-src/ext/lexbor/lexbor/url/url.h [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_match.c [] []
/src/php-src/Zend/zend_constants.h [] []
/src/php-src/ext/intl/collator/collator_is_numeric.c [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/parser.c [] []
/src/php-src/ext/pcre/php_pcre_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/unicode/unicode.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/pre_element.c [] []
/src/php-src/sapi/fpm/fpm/fpm_unix.c [] []
/src/php-src/ext/fileinfo/libmagic/softmagic.c [] []
/src/php-src/ext/com_dotnet/com_olechar.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/Zend/zend_verify_type_inference.h [] []
/src/php-src/Zend/Optimizer/zend_func_info.c [] []
/src/php-src/ext/odbc/php_odbc.c [] []
/src/php-src/ext/gd/libgd/gdfontg.c [] []
/src/php-src/sapi/fuzzer/fuzzer-function-jit.c ['sapi/fuzzer/fuzzer-function-jit.c'] ['sapi/fuzzer/fuzzer-function-jit.c']
/src/php-src/ext/lexbor/lexbor/html/interfaces/data_list_element.c [] []
/src/php-src/ext/lexbor/lexbor/css/selectors/state.h [] []
/src/php-src/ext/opcache/jit/ir/ir_emit.c [] []
/src/php-src/ext/standard/user_filters_arginfo.h [] []
/src/php-src/ext/zlib/zlib_filter.c [] []
/src/php-src/ext/calendar/dow.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_element.c [] []
/src/php-src/ext/hash/hash_sha3.c [] []
/src/php-src/ext/hash/murmur/PMurHash128.c [] []
/src/php-src/ext/intl/msgformat/msgformat_class.c [] []
/src/php-src/ext/ldap/ldap_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/anchor_element.c [] []
/src/php-src/ext/lexbor/lexbor/core/diyfp.h [] []
/src/php-src/ext/standard/assert.c [] []
/src/php-src/ext/spl/spl_heap_arginfo.h [] []
/src/php-src/ext/standard/md5.c [] []
/src/php-src/ext/intl/transliterator/transliterator_class.c [] []
/src/php-src/sapi/fpm/fpm/fpm_trace.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_select.c [] []
/src/php-src/ext/intl/timezone/timezone_arginfo.h [] []
/src/php-src/ext/uri/uriparser/src/UriNormalizeBase.c [] []
/src/php-src/ext/fileinfo/libmagic/magic.c [] []
/src/php-src/ext/gd/libgd/gd_tga.c [] []
/src/php-src/ext/mbstring/libmbfl/mbfl/mbfl_convert.c [] []
/src/php-src/Zend/zend_max_execution_timer.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_base64.c [] []
/src/php-src/ext/fileinfo/libmagic/is_tar.c [] []
/src/php-src/ext/hash/hash_fnv.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/slot_element.c [] []
/src/php-src/ext/tidy/tidy_arginfo.h [] []
/src/php-src/Zend/Optimizer/zend_optimizer_internal.h [] []
/src/php-src/ext/mysqlnd/mysqlnd_block_alloc.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_col_element.c [] []
/src/php-src/main/streams/memory.c [] []
/src/php-src/Zend/zend_objects.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/dom/xpath.c [] []
/src/php-src/ext/mysqlnd/mysqlnd_debug.h [] []
/src/php-src/Zend/zend_vm_opcodes.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_study.c [] []
/src/php-src/ext/lexbor/lexbor/core/array_obj.h [] []
/src/php-src/ext/lexbor/lexbor/core/bst_map.h [] []
/src/php-src/ext/simplexml/simplexml_arginfo.h [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_compile.c [] []
/src/php-src/win32/getrusage.c [] []
/src/php-src/ext/intl/formatter/formatter_class.h [] []
/src/php-src/ext/fileinfo/libmagic/apprentice.c [] []
/src/php-src/ext/ldap/ldap.c [] []
/src/php-src/ext/session/php_session.h [] []
/src/php-src/Zend/zend_lazy_objects.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/ffi/ffi_parser.c [] []
/src/php-src/ext/standard/filestat.c [] []
/src/php-src/win32/console.c [] []
/src/php-src/ext/spl/spl_directory.c [] []
/src/php-src/sapi/fpm/fpm/fpm_status.c [] []
/src/php-src/ext/intl/converter/converter_arginfo.h [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitNativeARM_64.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/image_element.c [] []
/src/php-src/ext/soap/php_http.c [] []
/src/php-src/ext/dba/dba_db3.c [] []
/src/php-src/ext/pgsql/pgsql_arginfo.h [] []
/src/php-src/Zend/zend_atomic.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/opcache/jit/zend_jit_helpers.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/zend_test/iterators.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/span_element.c [] []
/src/php-src/ext/standard/php_crypt_r.c [] []
/src/php-src/ext/standard/http_fopen_wrapper.c [] []
/src/php-src/ext/mbstring/libmbfl/filters/mbfilter_7bit.c [] []
/src/php-src/main/php_glob.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-function-jit.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-function-jit.c']
/src/php-src/ext/lexbor/lexbor/core/dtoa.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_section_element.c [] []
/src/php-src/ext/intl/breakiterator/breakiterator_class.cpp [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/attr.c [] []
/src/php-src/ext/intl/locale/locale_arginfo.h [] []
/src/php-src/Zend/Optimizer/zend_ssa.c [] []
/src/php-src/Zend/zend_stack.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/hash/sha3/generic64lc/KeccakP-1600-opt64.c [] []
/src/php-src/ext/sockets/sockets_arginfo.h [] []
/src/php-src/main/rfc1867.c [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state.c [] []
/src/php-src/ext/date/lib/unixtime2tm.c [] []
/src/php-src/ext/random/php_random_uint128.h [] []
/src/php-src/Zend/zend_gc.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/sapi/fpm/fpm/fpm_php_trace.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitNativeRISCV_64.c [] []
/src/php-src/sapi/fpm/fpm/fpm_trace_mach.c [] []
/src/php-src/ext/openssl/openssl_pwhash_arginfo.h [] []
/src/php-src/ext/bcmath/libbcmath/src/str2num.c [] []
/src/php-src/ext/lexbor/lexbor/core/conv.h [] []
/src/php-src/ext/gd/libgd/gd_security.c [] []
/src/php-src/main/SAPI.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/intl/breakiterator/breakiterator_arginfo.h [] []
/src/php-src/ext/spl/php_spl.c [] []
/src/php-src/ext/gd/libgd/gd_gif_out.c [] []
/src/php-src/main/php_odbc_utils.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interface.c [] []
/src/php-src/ext/pdo/pdo_sqlstate.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/allocator_src/sljitExecAllocatorCore.c [] []
/src/php-src/ext/hash/xxhash/xxhash.h [] []
/src/php-src/ext/pdo_odbc/odbc_stmt.c [] []
/src/php-src/TSRM/TSRM.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/processing_instruction.c [] []
/src/php-src/Zend/zend_vm_trace_map.h [] []
/src/php-src/ext/bcmath/libbcmath/src/zero.c [] []
/src/php-src/Zend/Optimizer/zend_worklist.h [] []
/src/php-src/ext/libxml/libxml.c [] []
/src/php-src/ext/curl/curl_private.h [] []
/src/php-src/ext/opcache/jit/zend_jit_trace.c [] []
/src/php-src/ext/pdo_pgsql/pgsql_driver.c [] []
/src/php-src/win32/select.c [] []
/src/php-src/ext/mbstring/php_mbregex.c [] []
/src/php-src/ext/intl/calendar/calendar_arginfo.h [] []
/src/php-src/ext/intl/dateformat/dateformat_arginfo.h [] []
/src/php-src/ext/hash/hash_sha_sse2.c [] []
/src/php-src/ext/dom/attr.c [] []
/src/php-src/Zend/zend_constants_arginfo.h [] []
/src/php-src/ext/pdo_mysql/pdo_mysql_arginfo.h [] []
/src/php-src/ext/pdo_odbc/pdo_odbc_arginfo.h [] []
/src/php-src/ext/spl/spl_array_arginfo.h [] []
/src/php-src/ext/intl/dateformat/dateformat_helpers.cpp [] []
/src/php-src/ext/standard/user_filters.c [] []
/src/php-src/sapi/phpdbg/phpdbg_info.c [] []
/src/php-src/ext/pdo_mysql/mysql_driver.c [] []
/src/php-src/main/snprintf.c [] []
/src/php-src/ext/bcmath/libbcmath/src/long2num.c [] []
/src/php-src/ext/random/zend_utils.c [] []
/src/php-src/ext/xsl/php_xsl_arginfo.h [] []
/src/php-src/ext/dom/entityreference.c [] []
/src/php-src/ext/zend_test/fiber_arginfo.h [] []
/src/php-src/sapi/fuzzer/fuzzer-parser.c ['sapi/fuzzer/fuzzer-parser.c'] ['sapi/fuzzer/fuzzer-parser.c']
/src/php-src/ext/lexbor/lexbor/html/interfaces/details_element.c [] []
/src/php-src/ext/hash/hash_adler32.c [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/unknown_element.c [] []
/src/php-src/ext/lexbor/lexbor/css/selectors/selectors.c [] []
/src/php-src/Zend/zend_objects_API.h ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/soap/php_packet_soap.c [] []
/src/php-src/ext/intl/resourcebundle/resourcebundle_arginfo.h [] []
/src/php-src/ext/sockets/sendrecvmsg.c [] []
/src/php-src/ext/bcmath/libbcmath/src/divmod.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitNativeX86_64.c [] []
/src/php-src/ext/standard/streamsfuncs.c [] []
/src/php-src/ext/libxml/mime_sniff.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/allocator_src/sljitWXExecAllocatorPosix.c [] []
/src/php-src/ext/mysqli/mysqli_api.c [] []
/src/php-src/ext/pdo_firebird/firebird_driver.c [] []
/src/php-src/ext/hash/hash_arginfo.h [] []
/src/php-src/ext/mbstring/libmbfl/mbfl/mbfl_encoding.c ['sapi/fuzzer/fuzzer-mbstring.c'] []
/src/php-src/ext/standard/crypt_sha256.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/embed_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/output_element.c [] []
/src/php-src/ext/bcmath/libbcmath/src/compare.c [] []
/src/php-src/ext/dom/parentnode/css_selectors.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/base_element.c [] []
/src/php-src/main/php.h [] []
/src/php-src/Zend/zend_gdb.c [] []
/src/php-src/Zend/zend_object_handlers.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c']
/src/php-src/ext/standard/image.c [] []
/src/php-src/ext/zend_test/iterators_arginfo.h [] []
/src/php-src/ext/dom/processinginstruction.c [] []
/src/php-src/sapi/phpdbg/phpdbg_watch.h [] []
/src/php-src/ext/enchant/enchant.c [] []
/src/php-src/ext/date/lib/parse_posix.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/allocator_src/sljitExecAllocatorFreeBSD.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/meter_element.c [] []
/src/php-src/ext/pcre/pcre2lib/sljit/sljitNativeMIPS_common.c ['sapi/fuzzer/fuzzer-parser.c', 'sapi/fuzzer/fuzzer-execute.c', 'sapi/fuzzer/fuzzer-tracing-jit.c', 'sapi/fuzzer/fuzzer-json.c', 'sapi/fuzzer/fuzzer-unserializehash.c', 'sapi/fuzzer/fuzzer-function-jit.c', 'sapi/fuzzer/fuzzer-mbstring.c', 'sapi/fuzzer/fuzzer-unserialize.c', 'sapi/fuzzer/fuzzer-mbregex.c', 'sapi/fuzzer/fuzzer-exif.c'] []
/src/php-src/ext/intl/breakiterator/breakiterator_methods.cpp [] []
/src/php-src/ext/dba/dba_arginfo.h [] []
/src/php-src/main/spprintf.c [] []
/src/php-src/win32/wsyslog.c [] []
/src/php-src/ext/openssl/xp_ssl.c [] []
/src/php-src/ext/standard/pageinfo.c [] []
/src/php-src/ext/sysvshm/sysvshm.c [] []
/src/php-src/ext/fileinfo/libmagic/readcdf.c [] []
/src/php-src/ext/intl/converter/converter.c [] []
/src/php-src/ext/dom/element.c [] []
/src/php-src/ext/dom/php_dom.h [] []
/src/php-src/Zend/Optimizer/zend_inference.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_row_element.c [] []
/src/php-src/ext/intl/uchar/uchar_arginfo.h [] []

Directories in report

Directory
/src/php-src/ext/sockets/
/src/php-src/ext/tidy/
/src/php-src/ext/pcre/
/src/php-src/ext/libxml/
/src/php-src/ext/session/
/src/php-src/sapi/apache2handler/
/src/php-src/ext/lexbor/lexbor/css/
/src/php-src/ext/sysvshm/
/src/php-src/ext/dom/
/src/php-src/ext/intl/idn/
/src/php-src/ext/lexbor/lexbor/css/selectors/
/src/php-src/ext/intl/locale/
/src/php-src/main/streams/
/src/php-src/ext/pgsql/
/src/php-src/ext/mysqli/
/src/php-src/sapi/fpm/fpm/events/
/src/php-src/ext/date/lib/
/src/php-src/ext/hash/murmur/
/src/php-src/ext/ftp/
/src/php-src/ext/intl/formatter/
/src/php-src/ext/dom/parentnode/
/src/php-src/ext/standard/
/src/php-src/ext/bcmath/
/src/php-src/ext/lexbor/lexbor/dom/interfaces/
/src/php-src/ext/xmlwriter/
/src/php-src/ext/lexbor/lexbor/core/
/src/php-src/ext/pcre/pcre2lib/sljit/allocator_src/
/src/php-src/ext/intl/converter/
/src/php-src/ext/pcntl/
/src/php-src/ext/curl/
/src/php-src/ext/pdo_pgsql/
/src/php-src/ext/intl/listformatter/
/src/php-src/ext/intl/breakiterator/
/src/php-src/ext/lexbor/lexbor/css/syntax/
/src/php-src/ext/lexbor/lexbor/html/
/src/php-src/sapi/cli/
/src/php-src/ext/dba/libinifile/
/src/php-src/ext/lexbor/lexbor/unicode/
/src/php-src/ext/intl/msgformat/
/src/php-src/ext/tokenizer/
/src/php-src/ext/reflection/
/src/php-src/ext/json/
/src/php-src/ext/dba/libflatfile/
/src/php-src/ext/intl/calendar/
/src/php-src/ext/gd/libgd/
/src/php-src/ext/random/
/src/php-src/ext/snmp/
/src/php-src/ext/com_dotnet/
/src/php-src/sapi/embed/
/src/php-src/ext/pdo_mysql/
/src/php-src/ext/com_dotnet/tests/comtest/
/src/php-src/ext/sysvmsg/
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer/
/src/php-src/ext/intl/dateformat/
/src/php-src/ext/exif/
/src/php-src/ext/gd/
/src/php-src/ext/lexbor/lexbor/ports/windows_nt/lexbor/core/
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/
/src/php-src/ext/pdo_firebird/
/src/php-src/ext/lexbor/lexbor/url/
/src/php-src/main/
/src/php-src/Zend/Optimizer/
/src/php-src/ext/intl/spoofchecker/
/src/php-src/ext/pdo/
/src/php-src/ext/pdo_sqlite/
/src/php-src/ext/fileinfo/
/src/php-src/ext/calendar/
/src/php-src/ext/ldap/
/src/php-src/ext/pcre/pcre2lib/sljit/
/src/php-src/ext/iconv/
/src/php-src/ext/uri/uriparser/src/
/src/php-src/ext/hash/sha3/generic32lc/
/src/php-src/win32/
/src/php-src/ext/bz2/
/src/php-src/ext/enchant/
/src/php-src/ext/filter/
/src/php-src/sapi/phpdbg/
/src/php-src/ext/intl/resourcebundle/
/src/php-src/ext/lexbor/lexbor/tag/
/src/php-src/ext/opcache/
/src/php-src/ext/mbstring/libmbfl/filters/
/src/php-src/ext/pcre/pcre2lib/
/src/php-src/ext/intl/normalizer/
/src/php-src/ext/lexbor/lexbor/ns/
/src/php-src/ext/opcache/jit/
/src/php-src/ext/mbstring/
/src/php-src/sapi/litespeed/
/src/php-src/ext/intl/timezone/
/src/php-src/ext/intl/transliterator/
/src/php-src/ext/dba/libcdb/
/src/php-src/sapi/fpm/fpm/
/src/php-src/ext/standard/libavifinfo/
/src/php-src/ext/fileinfo/libmagic/
/src/php-src/ext/lexbor/lexbor/html/interfaces/
/src/php-src/ext/dba/
/src/php-src/ext/xsl/
/src/php-src/ext/zlib/
/src/php-src/ext/zend_test/
/src/php-src/ext/intl/common/
/src/php-src/ext/dom/lexbor/selectors-adapted/
/src/php-src/ext/bcmath/libbcmath/src/
/src/php-src/ext/mbstring/libmbfl/mbfl/
/src/php-src/ext/lexbor/lexbor/html/tree/
/src/php-src/sapi/fuzzer/
/src/php-src/ext/openssl/
/src/php-src/ext/ctype/
/src/php-src/ext/zip/
/src/php-src/ext/simplexml/
/src/php-src/ext/opcache/jit/ir/dynasm/
/src/php-src/ext/hash/
/src/php-src/ext/lexbor/
/src/php-src/ext/dl_test/
/src/php-src/ext/posix/
/src/php-src/ext/pdo_odbc/
/src/php-src/ext/mysqlnd/
/src/php-src/ext/lexbor/lexbor/html/tokenizer/
/src/php-src/ext/intl/uchar/
/src/php-src/ext/hash/xxhash/
/src/php-src/ext/odbc/
/src/php-src/ext/readline/
/src/php-src/ext/lexbor/lexbor/encoding/
/src/php-src/ext/xml/
/src/php-src/ext/lexbor/lexbor/dom/
/src/php-src/ext/sysvsem/
/src/php-src/ext/lexbor/lexbor/selectors/
/src/php-src/ext/hash/sha3/generic64lc/
/src/php-src/ext/uri/
/src/php-src/ext/pdo_dblib/
/src/php-src/ext/xmlreader/
/src/php-src/sapi/cgi/
/src/php-src/ext/lexbor/lexbor/punycode/
/src/php-src/ext/sodium/
/src/php-src/ext/sqlite3/
/src/php-src/ext/phar/
/src/php-src/ext/gmp/
/src/php-src/ext/opcache/jit/ir/
/src/php-src/ext/date/
/src/php-src/ext/intl/
/src/php-src/ext/soap/
/src/php-src/Zend/
/src/php-src/ext/intl/grapheme/
/src/php-src/ext/spl/
/src/php-src/ext/ffi/
/src/php-src/ext/shmop/
/src/php-src/TSRM/
/src/php-src/ext/intl/collator/

Metadata section

This sections shows the raw data that is used to produce this report. This is mainly used for further processing and developer debugging.

Fuzzer Calltree file Program data file Coverage file
sapi/fuzzer/fuzzer-parser.c fuzzerLogFile-fuzzer-parser.data fuzzerLogFile-fuzzer-parser.data.yaml php-fuzz-unserializehash.covreport , php-fuzz-exif.covreport , php-fuzz-parser.covreport , php-fuzz-unserialize.covreport , php-fuzz-execute.covreport , php-fuzz-json.covreport , php-fuzz-function-jit.covreport , php-fuzz-tracing-jit.covreport
sapi/fuzzer/fuzzer-execute.c fuzzerLogFile-fuzzer-execute.data fuzzerLogFile-fuzzer-execute.data.yaml php-fuzz-unserializehash.covreport , php-fuzz-exif.covreport , php-fuzz-parser.covreport , php-fuzz-unserialize.covreport , php-fuzz-execute.covreport , php-fuzz-json.covreport , php-fuzz-function-jit.covreport , php-fuzz-tracing-jit.covreport
sapi/fuzzer/fuzzer-tracing-jit.c fuzzerLogFile-fuzzer-tracing-jit.data fuzzerLogFile-fuzzer-tracing-jit.data.yaml php-fuzz-unserializehash.covreport , php-fuzz-exif.covreport , php-fuzz-parser.covreport , php-fuzz-unserialize.covreport , php-fuzz-execute.covreport , php-fuzz-json.covreport , php-fuzz-function-jit.covreport , php-fuzz-tracing-jit.covreport
sapi/fuzzer/fuzzer-json.c fuzzerLogFile-fuzzer-json.data fuzzerLogFile-fuzzer-json.data.yaml php-fuzz-unserializehash.covreport , php-fuzz-exif.covreport , php-fuzz-parser.covreport , php-fuzz-unserialize.covreport , php-fuzz-execute.covreport , php-fuzz-json.covreport , php-fuzz-function-jit.covreport , php-fuzz-tracing-jit.covreport
sapi/fuzzer/fuzzer-unserializehash.c fuzzerLogFile-fuzzer-unserializehash.data fuzzerLogFile-fuzzer-unserializehash.data.yaml php-fuzz-unserializehash.covreport , php-fuzz-exif.covreport , php-fuzz-parser.covreport , php-fuzz-unserialize.covreport , php-fuzz-execute.covreport , php-fuzz-json.covreport , php-fuzz-function-jit.covreport , php-fuzz-tracing-jit.covreport
sapi/fuzzer/fuzzer-function-jit.c fuzzerLogFile-fuzzer-function-jit.data fuzzerLogFile-fuzzer-function-jit.data.yaml php-fuzz-unserializehash.covreport , php-fuzz-exif.covreport , php-fuzz-parser.covreport , php-fuzz-unserialize.covreport , php-fuzz-execute.covreport , php-fuzz-json.covreport , php-fuzz-function-jit.covreport , php-fuzz-tracing-jit.covreport
sapi/fuzzer/fuzzer-mbstring.c fuzzerLogFile-fuzzer-mbstring.data fuzzerLogFile-fuzzer-mbstring.data.yaml php-fuzz-unserializehash.covreport , php-fuzz-exif.covreport , php-fuzz-parser.covreport , php-fuzz-unserialize.covreport , php-fuzz-execute.covreport , php-fuzz-json.covreport , php-fuzz-function-jit.covreport , php-fuzz-tracing-jit.covreport
sapi/fuzzer/fuzzer-unserialize.c fuzzerLogFile-fuzzer-unserialize.data fuzzerLogFile-fuzzer-unserialize.data.yaml php-fuzz-unserializehash.covreport , php-fuzz-exif.covreport , php-fuzz-parser.covreport , php-fuzz-unserialize.covreport , php-fuzz-execute.covreport , php-fuzz-json.covreport , php-fuzz-function-jit.covreport , php-fuzz-tracing-jit.covreport
sapi/fuzzer/fuzzer-mbregex.c fuzzerLogFile-fuzzer-mbregex.data fuzzerLogFile-fuzzer-mbregex.data.yaml php-fuzz-unserializehash.covreport , php-fuzz-exif.covreport , php-fuzz-parser.covreport , php-fuzz-unserialize.covreport , php-fuzz-execute.covreport , php-fuzz-json.covreport , php-fuzz-function-jit.covreport , php-fuzz-tracing-jit.covreport
sapi/fuzzer/fuzzer-exif.c fuzzerLogFile-fuzzer-exif.data fuzzerLogFile-fuzzer-exif.data.yaml php-fuzz-unserializehash.covreport , php-fuzz-exif.covreport , php-fuzz-parser.covreport , php-fuzz-unserialize.covreport , php-fuzz-execute.covreport , php-fuzz-json.covreport , php-fuzz-function-jit.covreport , php-fuzz-tracing-jit.covreport