Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Project functions overview

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzzer details

Fuzzer: php-fuzz-json

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 7921 90.5%
gold [1:9] 38 0.43%
yellow [10:29] 49 0.56%
greenyellow [30:49] 36 0.41%
lawngreen 50+ 700 8.00%
All colors 8744 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
1433 3709 zend_declare_typed_property call site: 03709 zend_compile_property_hooks
638 7087 zend_string_delref call site: 07087 zend_hash_update
519 6198 zend_hash_add_constant call site: 06198 zend_error
382 2232 zend_hash_release call site: 02232 zend_array_destroy
273 1956 zend_ast_get_zval call site: 01956 zend_ast_create_2
268 6817 zend_check_magic_method_implementation call site: 06817 zend_hash_add_ptr
165 5298 zend_hash_add_mem call site: 05298 zend_error_noreturn
164 5737 perform_delayable_implementation_check call site: 05737 add_compatibility_obligation
163 27 __zend_realloc call site: 00027 _erealloc
163 1676 zval_get_long_func call site: 01676 zend_call_known_instance_method_with_0_params
145 2753 zend_hash_str_find_ptr_lc call site: 02753 zend_concat_names
144 6018 zend_build_properties_info_table call site: 06018 zend_verify_abstract_class

Runtime coverage analysis

Covered functions
1000
Functions that are reachable but not covered
1203
Reachable functions
1542
Percentage of reachable functions covered
21.98%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-json.c 1
sapi/fuzzer/fuzzer-sapi.c 2
main/main.c 11
Zend/zend_string.c 11
Zend/zend_hash.c 74
Zend/zend_types.h 13
Zend/zend.c 34
Zend/zend_compile.c 352
Zend/zend_execute_API.c 41
Zend/zend_smart_str.h 15
Zend/zend_string.h 20
Zend/zend_alloc.c 72
Zend/zend_bitset.h 1
Zend/zend_gc.c 16
Zend/zend_mmap.h 1
Zend/zend_variables.c 5
Zend/zend_variables.h 3
Zend/zend_gc.h 1
Zend/zend_exceptions.c 15
Zend/zend_operators.h 23
Zend/zend_operators.c 39
Zend/zend_API.c 64
Zend/zend_strtod.c 32
Zend/zend_smart_string.h 1
Zend/zend_arena.h 3
Zend/zend_hash.h 28
Zend/zend_API.h 9
Zend/zend_ast.h 18
Zend/zend_constants.c 12
Zend/zend_objects_API.h 5
Zend/zend_objects_API.c 9
Zend/zend_object_handlers.c 20
Zend/zend_inheritance.c 65
Zend/zend_execute.c 72
Zend/zend_attributes.c 11
Zend/zend_execute.h 12
Zend/zend_objects.c 4
Zend/zend_compile.h 4
Zend/zend_multiply.h 3
Zend/zend_closures.c 4
Zend/zend_exceptions.h 1
Zend/zend_language_scanner.l 27
Zend/zend_stack.c 10
Zend/zend_ptr_stack.c 6
Zend/zend_multibyte.c 5
Zend/zend_language_parser.c 3
Zend/zend_observer.c 13
Zend/zend_observer.h 7
Zend/zend_atomic.h 3
Zend/zend_signal.c 7
Zend/zend_ptr_stack.h 3
Zend/zend_ast.c 65
Zend/zend_opcode.c 25
Zend/zend_llist.c 6
Zend/zend_language_parser.y 1
Zend/zend_call_stack.h 2
Zend/zend_constants.h 1
Zend/zend_lazy_objects.h 5
Zend/zend_property_hooks.c 2
Zend/zend_lazy_objects.c 12
Zend/zend_smart_str.c 3
Zend/zend_enum.c 4
Zend/zend_vm_execute.h 3
Zend/zend_sort.c 6
Zend/zend_enum.h 2
Zend/zend_builtin_functions.c 3
Zend/zend_generators.c 1
main/output.c 31
Zend/zend_hrtime.h 1
Zend/zend_list.c 9
Zend/zend_stream.c 3
Zend/zend_float.c 2
Zend/zend_fibers.c 3
Zend/zend_weakrefs.c 2
Zend/zend_extensions.c 3
main/SAPI.c 19
main/strlcat.c 1
Zend/zend_ini.c 8
ext/standard/html.c 14
ext/standard/head.c 1
main/snprintf.c 9
main/strlcpy.c 1
main/php_variables.c 2
Zend/zend_virtual_cwd.c 4
Zend/Optimizer/zend_optimizer.c 1
Zend/Optimizer/zend_func_info.c 1
main/streams/streams.c 2
main/streams/filter.c 1
main/streams/transports.c 1
main/php_ini.c 1
main/php_ticks.c 2
ext/json/json_parser.tab.c 6
ext/json/json_scanner.c 6
ext/standard/basic_functions.c 3
main/rfc1867.c 1

Fuzzer: php-fuzz-exif

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 7938 89.9%
gold [1:9] 35 0.39%
yellow [10:29] 46 0.52%
greenyellow [30:49] 36 0.40%
lawngreen 50+ 770 8.72%
All colors 8825 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
1044 4098 smart_str_appendc_ex call site: 04098 zend_ast_export_str
622 7087 zend_string_delref call site: 07087 zend_hash_update
519 6198 zend_hash_add_constant call site: 06198 zend_error
388 3709 zend_declare_typed_property call site: 03709 zend_compile_property_hooks
382 2232 zend_hash_release call site: 02232 zend_array_destroy
273 1956 zend_ast_get_zval call site: 01956 zend_ast_create_2
268 6817 zend_check_magic_method_implementation call site: 06817 zend_hash_add_ptr
201 867 is_numeric_string_ex call site: 00867 zend_strtod
165 5298 zend_hash_add_mem call site: 05298 zend_error_noreturn
161 1678 zend_observer_error_notify call site: 01678 zend_call_known_instance_method_with_0_params
157 31 zend_string_realloc call site: 00031 zend_mm_realloc_heap
150 5751 zend_hash_index_add_new_ptr call site: 05751 _emalloc

Runtime coverage analysis

Covered functions
1154
Functions that are reachable but not covered
1168
Reachable functions
1563
Percentage of reachable functions covered
25.27%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-exif.c 1
sapi/fuzzer/fuzzer-sapi.c 3
main/main.c 13
Zend/zend_string.c 11
Zend/zend_hash.c 76
Zend/zend_types.h 13
Zend/zend.c 34
Zend/zend_compile.c 352
Zend/zend_execute_API.c 41
Zend/zend_smart_str.h 15
Zend/zend_string.h 20
Zend/zend_alloc.c 72
Zend/zend_bitset.h 1
Zend/zend_gc.c 16
Zend/zend_mmap.h 1
Zend/zend_variables.c 5
Zend/zend_variables.h 3
Zend/zend_gc.h 2
Zend/zend_exceptions.c 15
Zend/zend_operators.h 23
Zend/zend_operators.c 39
Zend/zend_API.c 64
Zend/zend_strtod.c 32
Zend/zend_smart_string.h 1
Zend/zend_arena.h 3
Zend/zend_hash.h 29
Zend/zend_API.h 9
Zend/zend_ast.h 18
Zend/zend_constants.c 12
Zend/zend_objects_API.h 7
Zend/zend_objects_API.c 9
Zend/zend_object_handlers.c 22
Zend/zend_inheritance.c 65
Zend/zend_execute.c 72
Zend/zend_attributes.c 11
Zend/zend_execute.h 12
Zend/zend_objects.c 4
Zend/zend_compile.h 4
Zend/zend_multiply.h 3
Zend/zend_closures.c 4
Zend/zend_exceptions.h 1
Zend/zend_language_scanner.l 27
Zend/zend_stack.c 10
Zend/zend_ptr_stack.c 6
Zend/zend_multibyte.c 5
Zend/zend_language_parser.c 3
Zend/zend_observer.c 13
Zend/zend_observer.h 7
Zend/zend_atomic.h 3
Zend/zend_signal.c 7
Zend/zend_ptr_stack.h 3
Zend/zend_ast.c 65
Zend/zend_opcode.c 25
Zend/zend_llist.c 6
Zend/zend_language_parser.y 1
Zend/zend_call_stack.h 2
Zend/zend_constants.h 1
Zend/zend_lazy_objects.h 5
Zend/zend_property_hooks.c 2
Zend/zend_lazy_objects.c 13
Zend/zend_smart_str.c 3
Zend/zend_enum.c 4
Zend/zend_vm_execute.h 3
Zend/zend_sort.c 6
Zend/zend_enum.h 2
Zend/zend_builtin_functions.c 3
Zend/zend_generators.c 1
main/output.c 31
Zend/zend_hrtime.h 1
Zend/zend_list.c 14
Zend/zend_stream.c 3
Zend/zend_float.c 2
Zend/zend_fibers.c 3
Zend/zend_weakrefs.c 2
Zend/zend_extensions.c 3
main/SAPI.c 19
main/strlcat.c 1
Zend/zend_ini.c 8
ext/standard/html.c 14
ext/standard/head.c 1
main/snprintf.c 9
main/strlcpy.c 1
main/php_variables.c 2
Zend/zend_virtual_cwd.c 4
Zend/Optimizer/zend_optimizer.c 1
Zend/Optimizer/zend_func_info.c 1
main/streams/streams.c 7
main/streams/filter.c 5
main/streams/transports.c 1
main/php_ini.c 1
main/php_ticks.c 2
main/streams/memory.c 2
ext/standard/var.c 4
ext/standard/basic_functions.c 3
main/rfc1867.c 1

Fuzzer: php-fuzz-unserialize

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 7874 84.7%
gold [1:9] 64 0.68%
yellow [10:29] 73 0.78%
greenyellow [30:49] 56 0.60%
lawngreen 50+ 1221 13.1%
All colors 9288 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
1044 4098 smart_str_appendc_ex call site: 04098 zend_ast_export_str
519 6198 zend_hash_add_constant call site: 06198 zend_error
316 7275 zend_hash_index_lookup call site: 07275 zend_undefined_index
278 3819 zend_hash_index_update_ptr call site: 03819 zend_compile_var
273 1956 zend_ast_get_zval call site: 01956 zend_ast_create_2
268 6817 zend_check_magic_method_implementation call site: 06817 zend_hash_add_ptr
214 2400 __zval_get_string_func call site: 02400 zval_try_get_string_func
165 5298 zend_hash_add_mem call site: 05298 zend_error_noreturn
157 31 zend_string_realloc call site: 00031 zend_mm_realloc_heap
146 2232 zend_hash_release call site: 02232 zend_array_destroy
144 6018 zend_build_properties_info_table call site: 06018 zend_verify_abstract_class
134 2753 zend_hash_str_find_ptr_lc call site: 02753 zend_concat_names

Runtime coverage analysis

Covered functions
1411
Functions that are reachable but not covered
1105
Reachable functions
1630
Percentage of reachable functions covered
32.21%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-unserialize.c 1
sapi/fuzzer/fuzzer-sapi.c 4
main/main.c 11
Zend/zend_string.c 11
Zend/zend_hash.c 76
Zend/zend_types.h 13
Zend/zend.c 35
Zend/zend_compile.c 352
Zend/zend_execute_API.c 41
Zend/zend_smart_str.h 15
Zend/zend_string.h 21
Zend/zend_alloc.c 72
Zend/zend_bitset.h 1
Zend/zend_gc.c 42
Zend/zend_mmap.h 1
Zend/zend_variables.c 5
Zend/zend_variables.h 3
Zend/zend_gc.h 4
Zend/zend_exceptions.c 15
Zend/zend_operators.h 23
Zend/zend_operators.c 39
Zend/zend_API.c 64
Zend/zend_strtod.c 32
Zend/zend_smart_string.h 1
Zend/zend_arena.h 3
Zend/zend_hash.h 28
Zend/zend_API.h 10
Zend/zend_ast.h 18
Zend/zend_constants.c 12
Zend/zend_objects_API.h 7
Zend/zend_objects_API.c 9
Zend/zend_object_handlers.c 20
Zend/zend_inheritance.c 65
Zend/zend_execute.c 77
Zend/zend_attributes.c 11
Zend/zend_execute.h 12
Zend/zend_objects.c 4
Zend/zend_compile.h 4
Zend/zend_multiply.h 3
Zend/zend_closures.c 4
Zend/zend_exceptions.h 1
Zend/zend_language_scanner.l 27
Zend/zend_stack.c 10
Zend/zend_ptr_stack.c 6
Zend/zend_multibyte.c 5
Zend/zend_language_parser.c 3
Zend/zend_observer.c 16
Zend/zend_observer.h 7
Zend/zend_atomic.h 3
Zend/zend_signal.c 7
Zend/zend_ptr_stack.h 3
Zend/zend_ast.c 65
Zend/zend_opcode.c 25
Zend/zend_llist.c 6
Zend/zend_language_parser.y 1
Zend/zend_call_stack.h 2
Zend/zend_constants.h 1
Zend/zend_lazy_objects.h 5
Zend/zend_property_hooks.c 2
Zend/zend_lazy_objects.c 13
Zend/zend_smart_str.c 3
Zend/zend_enum.c 4
Zend/zend_vm_execute.h 3
Zend/zend_sort.c 6
Zend/zend_enum.h 2
Zend/zend_builtin_functions.c 3
Zend/zend_generators.c 1
main/output.c 31
Zend/zend_hrtime.h 1
Zend/zend_list.c 9
Zend/zend_stream.c 3
Zend/zend_float.c 2
Zend/zend_fibers.c 20
Zend/zend_weakrefs.c 6
Zend/zend_extensions.c 3
main/SAPI.c 19
main/strlcat.c 1
Zend/zend_ini.c 11
ext/standard/html.c 14
ext/standard/head.c 1
main/snprintf.c 9
main/strlcpy.c 1
main/php_variables.c 2
Zend/zend_virtual_cwd.c 4
Zend/Optimizer/zend_optimizer.c 1
Zend/Optimizer/zend_func_info.c 1
main/streams/streams.c 2
main/streams/filter.c 1
main/streams/transports.c 1
main/php_ini.c 1
main/php_ticks.c 2
ext/standard/var_unserializer.re 21
ext/standard/incomplete_class.c 1
Zend/zend_weakrefs.h 2
ext/standard/basic_functions.c 3
main/rfc1867.c 1

Fuzzer: php-fuzz-unserializehash

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 7925 84.4%
gold [1:9] 76 0.80%
yellow [10:29] 81 0.86%
greenyellow [30:49] 42 0.44%
lawngreen 50+ 1262 13.4%
All colors 9386 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
1044 4099 smart_str_appendc_ex call site: 04099 zend_ast_export_str
519 6199 zend_hash_add_constant call site: 06199 zend_error
316 7276 zend_hash_index_lookup call site: 07276 zend_undefined_index
278 3820 zend_hash_index_update_ptr call site: 03820 zend_compile_var
273 1957 zend_ast_get_zval call site: 01957 zend_ast_create_2
268 6818 zend_check_magic_method_implementation call site: 06818 zend_hash_add_ptr
214 2401 __zval_get_string_func call site: 02401 zval_try_get_string_func
165 5299 zend_hash_add_mem call site: 05299 zend_error_noreturn
157 32 zend_string_realloc call site: 00032 zend_mm_realloc_heap
146 2233 zend_hash_release call site: 02233 zend_array_destroy
144 6019 zend_build_properties_info_table call site: 06019 zend_verify_abstract_class
134 2754 zend_hash_str_find_ptr_lc call site: 02754 zend_concat_names

Runtime coverage analysis

Covered functions
1564
Functions that are reachable but not covered
1102
Reachable functions
1643
Percentage of reachable functions covered
32.93%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-unserializehash.c 1
sapi/fuzzer/fuzzer-sapi.c 5
main/main.c 13
Zend/zend_string.c 11
Zend/zend_hash.c 78
Zend/zend_types.h 13
Zend/zend.c 35
Zend/zend_compile.c 352
Zend/zend_execute_API.c 41
Zend/zend_smart_str.h 15
Zend/zend_string.h 21
Zend/zend_alloc.c 72
Zend/zend_bitset.h 1
Zend/zend_gc.c 42
Zend/zend_mmap.h 1
Zend/zend_variables.c 5
Zend/zend_variables.h 3
Zend/zend_gc.h 5
Zend/zend_exceptions.c 15
Zend/zend_operators.h 23
Zend/zend_operators.c 39
Zend/zend_API.c 64
Zend/zend_strtod.c 32
Zend/zend_smart_string.h 1
Zend/zend_arena.h 3
Zend/zend_hash.h 28
Zend/zend_API.h 10
Zend/zend_ast.h 18
Zend/zend_constants.c 12
Zend/zend_objects_API.h 7
Zend/zend_objects_API.c 9
Zend/zend_object_handlers.c 22
Zend/zend_inheritance.c 65
Zend/zend_execute.c 77
Zend/zend_attributes.c 11
Zend/zend_execute.h 12
Zend/zend_objects.c 4
Zend/zend_compile.h 4
Zend/zend_multiply.h 3
Zend/zend_closures.c 4
Zend/zend_exceptions.h 1
Zend/zend_language_scanner.l 27
Zend/zend_stack.c 10
Zend/zend_ptr_stack.c 6
Zend/zend_multibyte.c 5
Zend/zend_language_parser.c 3
Zend/zend_observer.c 16
Zend/zend_observer.h 7
Zend/zend_atomic.h 3
Zend/zend_signal.c 7
Zend/zend_ptr_stack.h 3
Zend/zend_ast.c 65
Zend/zend_opcode.c 25
Zend/zend_llist.c 6
Zend/zend_language_parser.y 1
Zend/zend_call_stack.h 2
Zend/zend_constants.h 1
Zend/zend_lazy_objects.h 5
Zend/zend_property_hooks.c 2
Zend/zend_lazy_objects.c 13
Zend/zend_smart_str.c 3
Zend/zend_enum.c 4
Zend/zend_vm_execute.h 3
Zend/zend_sort.c 6
Zend/zend_enum.h 2
Zend/zend_builtin_functions.c 3
Zend/zend_generators.c 1
main/output.c 31
Zend/zend_hrtime.h 1
Zend/zend_list.c 10
Zend/zend_stream.c 3
Zend/zend_float.c 2
Zend/zend_fibers.c 20
Zend/zend_weakrefs.c 6
Zend/zend_extensions.c 3
main/SAPI.c 19
main/strlcat.c 1
Zend/zend_ini.c 11
ext/standard/html.c 14
ext/standard/head.c 1
main/snprintf.c 9
main/strlcpy.c 1
main/php_variables.c 2
Zend/zend_virtual_cwd.c 4
Zend/Optimizer/zend_optimizer.c 1
Zend/Optimizer/zend_func_info.c 1
main/streams/streams.c 2
main/streams/filter.c 1
main/streams/transports.c 1
main/php_ini.c 1
main/php_ticks.c 2
ext/standard/var_unserializer.re 21
ext/standard/incomplete_class.c 1
ext/standard/var.c 4
Zend/zend_weakrefs.h 2
ext/standard/basic_functions.c 3
main/rfc1867.c 1

Fuzzer: php-fuzz-parser

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 3979 43.5%
gold [1:9] 338 3.69%
yellow [10:29] 172 1.88%
greenyellow [30:49] 90 0.98%
lawngreen 50+ 4565 49.9%
All colors 9144 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
364 7227 zend_dval_to_lval_safe call site: 07227 zend_incompatible_double_to_long_error
155 6931 zend_file_context_end call site: 06931 zend_ast_destroy
129 7898 zend_llist_add_element call site: 07898 php_output_start_user
117 7593 zend_fetch_debug_backtrace call site: 07593 _zend_new_array
92 97 _zend_bailout call site: 00097 zend_mm_safe_error
90 1536 zend_throw_exception_internal call site: 01536 zend_user_exception_handler
87 8610 zend_gc_collect_cycles call site: 08610 gc_call_destructors_in_fiber
78 1360 zend_array_destroy call site: 01360 _emalloc
75 2964 zend_object_dtor_property call site: 02964 zend_throw_error
67 2262 zend_ast_destroy call site: 02262 zend_modifier_token_to_flag
64 8317 zend_hash_str_del call site: 08317 php_error_docref
56 32 zend_string_realloc call site: 00032 zend_mm_realloc_heap

Runtime coverage analysis

Covered functions
1779
Functions that are reachable but not covered
579
Reachable functions
1621
Percentage of reachable functions covered
64.28%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-parser.c 1
sapi/fuzzer/fuzzer-sapi.c 4
main/main.c 11
Zend/zend_string.c 11
Zend/zend_hash.c 78
Zend/zend_types.h 13
Zend/zend.c 35
Zend/zend_compile.c 352
Zend/zend_execute_API.c 43
Zend/zend_smart_str.h 15
Zend/zend_string.h 21
Zend/zend_alloc.c 72
Zend/zend_bitset.h 1
Zend/zend_gc.c 42
Zend/zend_mmap.h 1
Zend/zend_variables.c 5
Zend/zend_variables.h 3
Zend/zend_gc.h 4
Zend/zend_exceptions.c 15
Zend/zend_operators.h 23
Zend/zend_operators.c 39
Zend/zend_API.c 64
Zend/zend_strtod.c 32
Zend/zend_smart_string.h 1
Zend/zend_arena.h 3
Zend/zend_hash.h 34
Zend/zend_API.h 9
Zend/zend_ast.h 18
Zend/zend_constants.c 12
Zend/zend_objects_API.h 5
Zend/zend_objects_API.c 9
Zend/zend_object_handlers.c 20
Zend/zend_inheritance.c 65
Zend/zend_execute.c 73
Zend/zend_attributes.c 11
Zend/zend_execute.h 12
Zend/zend_objects.c 4
Zend/zend_compile.h 4
Zend/zend_multiply.h 3
Zend/zend_closures.c 4
Zend/zend_exceptions.h 1
Zend/zend_language_scanner.l 27
Zend/zend_stack.c 10
Zend/zend_ptr_stack.c 6
Zend/zend_multibyte.c 5
Zend/zend_language_parser.c 3
Zend/zend_observer.c 16
Zend/zend_observer.h 7
Zend/zend_atomic.h 3
Zend/zend_signal.c 7
Zend/zend_ptr_stack.h 3
Zend/zend_ast.c 65
Zend/zend_opcode.c 26
Zend/zend_llist.c 7
Zend/zend_language_parser.y 1
Zend/zend_call_stack.h 2
Zend/zend_constants.h 1
Zend/zend_lazy_objects.h 5
Zend/zend_property_hooks.c 2
Zend/zend_lazy_objects.c 12
Zend/zend_smart_str.c 3
Zend/zend_enum.c 4
Zend/zend_vm_execute.h 4
Zend/zend_sort.c 6
Zend/zend_enum.h 2
Zend/zend_builtin_functions.c 3
Zend/zend_generators.c 1
main/output.c 31
Zend/zend_hrtime.h 1
Zend/zend_list.c 9
Zend/zend_stream.c 6
Zend/zend_float.c 2
Zend/zend_fibers.c 20
Zend/zend_weakrefs.c 6
Zend/zend_extensions.c 3
main/SAPI.c 19
main/strlcat.c 1
Zend/zend_ini.c 11
ext/standard/html.c 14
ext/standard/head.c 1
main/snprintf.c 9
main/strlcpy.c 1
main/php_variables.c 7
Zend/zend_virtual_cwd.c 4
Zend/Optimizer/zend_optimizer.c 1
Zend/Optimizer/zend_func_info.c 1
main/streams/streams.c 2
main/streams/filter.c 1
main/streams/transports.c 1
main/php_ini.c 1
main/php_ticks.c 2
Zend/zend_weakrefs.h 2
ext/standard/basic_functions.c 3
main/rfc1867.c 1

Fuzzer: php-fuzz-execute

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 2822 30.8%
gold [1:9] 1767 19.3%
yellow [10:29] 933 10.2%
greenyellow [30:49] 427 4.66%
lawngreen 50+ 3195 34.9%
All colors 9144 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
85 104 zend_mmap_set_name call site: 00104 zend_mm_safe_error
72 4379 zend_ast_export_ex call site: 04379 smart_str_appends
67 2262 zend_ast_destroy call site: 02262 zend_modifier_token_to_flag
56 32 zend_string_realloc call site: 00032 zend_mm_realloc_heap
56 8226 zend_mm_shutdown call site: 08226 php_output_shutdown
45 8171 virtual_cwd_deactivate call site: 08171 zend_unregister_ini_entries_ex
42 4528 zend_ast_export_ex call site: 04528 smart_str_appends
40 2168 zend_ast_create_fcc call site: 02168 zend_ast_create_list_1
30 2095 zend_ast_create_ex_2 call site: 02095 zend_ast_list_add
30 2461 zend_ast_create_cast call site: 02461 zend_ast_create_cast
30 7610 zend_fetch_debug_backtrace call site: 07610 _zend_new_array
28 1979 zend_ast_create_1 call site: 01979 zend_ast_create_2

Runtime coverage analysis

Covered functions
4355
Functions that are reachable but not covered
270
Reachable functions
1621
Percentage of reachable functions covered
83.34%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-execute.c 1
sapi/fuzzer/fuzzer-sapi.c 4
main/main.c 11
Zend/zend_string.c 11
Zend/zend_hash.c 78
Zend/zend_types.h 13
Zend/zend.c 35
Zend/zend_compile.c 352
Zend/zend_execute_API.c 43
Zend/zend_smart_str.h 15
Zend/zend_string.h 21
Zend/zend_alloc.c 72
Zend/zend_bitset.h 1
Zend/zend_gc.c 42
Zend/zend_mmap.h 1
Zend/zend_variables.c 5
Zend/zend_variables.h 3
Zend/zend_gc.h 4
Zend/zend_exceptions.c 15
Zend/zend_operators.h 23
Zend/zend_operators.c 39
Zend/zend_API.c 64
Zend/zend_strtod.c 32
Zend/zend_smart_string.h 1
Zend/zend_arena.h 3
Zend/zend_hash.h 34
Zend/zend_API.h 9
Zend/zend_ast.h 18
Zend/zend_constants.c 12
Zend/zend_objects_API.h 5
Zend/zend_objects_API.c 9
Zend/zend_object_handlers.c 20
Zend/zend_inheritance.c 65
Zend/zend_execute.c 73
Zend/zend_attributes.c 11
Zend/zend_execute.h 12
Zend/zend_objects.c 4
Zend/zend_compile.h 4
Zend/zend_multiply.h 3
Zend/zend_closures.c 4
Zend/zend_exceptions.h 1
Zend/zend_language_scanner.l 27
Zend/zend_stack.c 10
Zend/zend_ptr_stack.c 6
Zend/zend_multibyte.c 5
Zend/zend_language_parser.c 3
Zend/zend_observer.c 16
Zend/zend_observer.h 7
Zend/zend_atomic.h 3
Zend/zend_signal.c 7
Zend/zend_ptr_stack.h 3
Zend/zend_ast.c 65
Zend/zend_opcode.c 26
Zend/zend_llist.c 7
Zend/zend_language_parser.y 1
Zend/zend_call_stack.h 2
Zend/zend_constants.h 1
Zend/zend_lazy_objects.h 5
Zend/zend_property_hooks.c 2
Zend/zend_lazy_objects.c 12
Zend/zend_smart_str.c 3
Zend/zend_enum.c 4
Zend/zend_vm_execute.h 4
Zend/zend_sort.c 6
Zend/zend_enum.h 2
Zend/zend_builtin_functions.c 3
Zend/zend_generators.c 1
main/output.c 31
Zend/zend_hrtime.h 1
Zend/zend_list.c 9
Zend/zend_stream.c 6
Zend/zend_float.c 2
Zend/zend_fibers.c 20
Zend/zend_weakrefs.c 6
Zend/zend_extensions.c 3
main/SAPI.c 19
main/strlcat.c 1
Zend/zend_ini.c 11
ext/standard/html.c 14
ext/standard/head.c 1
main/snprintf.c 9
main/strlcpy.c 1
main/php_variables.c 7
Zend/zend_virtual_cwd.c 4
Zend/Optimizer/zend_optimizer.c 1
Zend/Optimizer/zend_func_info.c 1
main/streams/streams.c 2
main/streams/filter.c 1
main/streams/transports.c 1
main/php_ini.c 1
main/php_ticks.c 2
Zend/zend_weakrefs.h 2
ext/standard/basic_functions.c 3
main/rfc1867.c 1

Fuzzer: php-fuzz-tracing-jit

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 1953 21.3%
gold [1:9] 835 9.11%
yellow [10:29] 637 6.95%
greenyellow [30:49] 349 3.80%
lawngreen 50+ 5388 58.8%
All colors 9162 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
85 100 zend_mmap_set_name call site: 00100 zend_mm_safe_error
67 2257 zend_ast_destroy call site: 02257 zend_modifier_token_to_flag
56 8228 zend_mm_shutdown call site: 08228 php_output_shutdown
54 29 zend_string_realloc call site: 00029 zend_mm_realloc_heap
45 8173 virtual_cwd_deactivate call site: 08173 zend_unregister_ini_entries_ex
40 2163 zend_ast_create_fcc call site: 02163 zend_ast_create_list_1
30 2090 zend_ast_create_ex_2 call site: 02090 zend_ast_list_add
30 2456 zend_ast_create_cast call site: 02456 zend_ast_create_cast
30 7605 zend_fetch_debug_backtrace call site: 07605 _zend_new_array
28 1974 zend_ast_create_1 call site: 01974 zend_ast_create_2
26 9005 destroy_zend_class call site: 09005 zval_internal_ptr_dtor
25 2528 zend_ast_list_rtrim call site: 02528 zend_ast_list_add

Runtime coverage analysis

Covered functions
6060
Functions that are reachable but not covered
235
Reachable functions
1622
Percentage of reachable functions covered
85.51%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-tracing-jit.c 1
Zend/zend_string.h 21
Zend/zend_alloc.c 72
Zend/zend.c 35
Zend/zend_compile.c 352
Zend/zend_execute_API.c 43
Zend/zend_smart_str.h 15
Zend/zend_types.h 13
Zend/zend_bitset.h 1
Zend/zend_gc.c 42
Zend/zend_mmap.h 1
Zend/zend_variables.c 5
Zend/zend_variables.h 3
Zend/zend_gc.h 4
Zend/zend_exceptions.c 15
Zend/zend_operators.h 23
Zend/zend_operators.c 39
Zend/zend_API.c 64
Zend/zend_strtod.c 32
Zend/zend_smart_string.h 1
Zend/zend_arena.h 3
Zend/zend_hash.h 34
Zend/zend_hash.c 78
Zend/zend_API.h 9
Zend/zend_string.c 11
Zend/zend_ast.h 18
Zend/zend_constants.c 12
Zend/zend_objects_API.h 5
Zend/zend_objects_API.c 9
Zend/zend_object_handlers.c 20
Zend/zend_inheritance.c 65
Zend/zend_execute.c 73
Zend/zend_attributes.c 11
Zend/zend_execute.h 12
Zend/zend_objects.c 4
Zend/zend_compile.h 4
Zend/zend_multiply.h 3
Zend/zend_closures.c 4
Zend/zend_exceptions.h 1
Zend/zend_language_scanner.l 27
Zend/zend_stack.c 10
Zend/zend_ptr_stack.c 6
Zend/zend_multibyte.c 5
Zend/zend_language_parser.c 3
Zend/zend_observer.c 16
Zend/zend_observer.h 7
Zend/zend_atomic.h 3
Zend/zend_signal.c 7
Zend/zend_ptr_stack.h 3
Zend/zend_ast.c 65
Zend/zend_opcode.c 26
Zend/zend_llist.c 7
Zend/zend_language_parser.y 1
Zend/zend_call_stack.h 2
Zend/zend_constants.h 1
Zend/zend_lazy_objects.h 5
Zend/zend_property_hooks.c 2
Zend/zend_lazy_objects.c 12
Zend/zend_smart_str.c 3
Zend/zend_enum.c 4
Zend/zend_vm_execute.h 4
Zend/zend_sort.c 6
Zend/zend_enum.h 2
Zend/zend_builtin_functions.c 3
Zend/zend_generators.c 1
Zend/zend_ini.c 11
sapi/fuzzer/fuzzer-sapi.c 4
main/main.c 11
main/output.c 31
Zend/zend_hrtime.h 1
Zend/zend_list.c 9
Zend/zend_stream.c 6
Zend/zend_float.c 2
Zend/zend_fibers.c 20
Zend/zend_weakrefs.c 6
Zend/zend_extensions.c 3
main/SAPI.c 19
main/strlcat.c 1
ext/standard/html.c 14
ext/standard/head.c 1
main/snprintf.c 9
main/strlcpy.c 1
main/php_variables.c 7
Zend/zend_virtual_cwd.c 4
Zend/Optimizer/zend_optimizer.c 1
Zend/Optimizer/zend_func_info.c 1
main/streams/streams.c 2
main/streams/filter.c 1
main/streams/transports.c 1
main/php_ini.c 1
main/php_ticks.c 2
Zend/zend_weakrefs.h 2
ext/standard/basic_functions.c 3
main/rfc1867.c 1
sapi/fuzzer/fuzzer-execute-common.h 1

Fuzzer: php-fuzz-function-jit

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 1933 21.1%
gold [1:9] 822 8.97%
yellow [10:29] 701 7.65%
greenyellow [30:49] 360 3.92%
lawngreen 50+ 5345 58.3%
All colors 9161 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
85 100 zend_mmap_set_name call site: 00100 zend_mm_safe_error
67 2257 zend_ast_destroy call site: 02257 zend_modifier_token_to_flag
56 8228 zend_mm_shutdown call site: 08228 php_output_shutdown
54 29 zend_string_realloc call site: 00029 zend_mm_realloc_heap
45 8173 virtual_cwd_deactivate call site: 08173 zend_unregister_ini_entries_ex
40 2163 zend_ast_create_fcc call site: 02163 zend_ast_create_list_1
30 2090 zend_ast_create_ex_2 call site: 02090 zend_ast_list_add
30 2456 zend_ast_create_cast call site: 02456 zend_ast_create_cast
30 7605 zend_fetch_debug_backtrace call site: 07605 _zend_new_array
28 1974 zend_ast_create_1 call site: 01974 zend_ast_create_2
26 9005 destroy_zend_class call site: 09005 zval_internal_ptr_dtor
25 2528 zend_ast_list_rtrim call site: 02528 zend_ast_list_add

Runtime coverage analysis

Covered functions
6089
Functions that are reachable but not covered
232
Reachable functions
1622
Percentage of reachable functions covered
85.7%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
sapi/fuzzer/fuzzer-function-jit.c 1
Zend/zend_string.h 21
Zend/zend_alloc.c 72
Zend/zend.c 35
Zend/zend_compile.c 352
Zend/zend_execute_API.c 43
Zend/zend_smart_str.h 15
Zend/zend_types.h 13
Zend/zend_bitset.h 1
Zend/zend_gc.c 42
Zend/zend_mmap.h 1
Zend/zend_variables.c 5
Zend/zend_variables.h 3
Zend/zend_gc.h 4
Zend/zend_exceptions.c 15
Zend/zend_operators.h 23
Zend/zend_operators.c 39
Zend/zend_API.c 64
Zend/zend_strtod.c 32
Zend/zend_smart_string.h 1
Zend/zend_arena.h 3
Zend/zend_hash.h 34
Zend/zend_hash.c 78
Zend/zend_API.h 9
Zend/zend_string.c 11
Zend/zend_ast.h 18
Zend/zend_constants.c 12
Zend/zend_objects_API.h 5
Zend/zend_objects_API.c 9
Zend/zend_object_handlers.c 20
Zend/zend_inheritance.c 65
Zend/zend_execute.c 73
Zend/zend_attributes.c 11
Zend/zend_execute.h 12
Zend/zend_objects.c 4
Zend/zend_compile.h 4
Zend/zend_multiply.h 3
Zend/zend_closures.c 4
Zend/zend_exceptions.h 1
Zend/zend_language_scanner.l 27
Zend/zend_stack.c 10
Zend/zend_ptr_stack.c 6
Zend/zend_multibyte.c 5
Zend/zend_language_parser.c 3
Zend/zend_observer.c 16
Zend/zend_observer.h 7
Zend/zend_atomic.h 3
Zend/zend_signal.c 7
Zend/zend_ptr_stack.h 3
Zend/zend_ast.c 65
Zend/zend_opcode.c 26
Zend/zend_llist.c 7
Zend/zend_language_parser.y 1
Zend/zend_call_stack.h 2
Zend/zend_constants.h 1
Zend/zend_lazy_objects.h 5
Zend/zend_property_hooks.c 2
Zend/zend_lazy_objects.c 12
Zend/zend_smart_str.c 3
Zend/zend_enum.c 4
Zend/zend_vm_execute.h 4
Zend/zend_sort.c 6
Zend/zend_enum.h 2
Zend/zend_builtin_functions.c 3
Zend/zend_generators.c 1
Zend/zend_ini.c 11
sapi/fuzzer/fuzzer-sapi.c 4
main/main.c 11
main/output.c 31
Zend/zend_hrtime.h 1
Zend/zend_list.c 9
Zend/zend_stream.c 6
Zend/zend_float.c 2
Zend/zend_fibers.c 20
Zend/zend_weakrefs.c 6
Zend/zend_extensions.c 3
main/SAPI.c 19
main/strlcat.c 1
ext/standard/html.c 14
ext/standard/head.c 1
main/snprintf.c 9
main/strlcpy.c 1
main/php_variables.c 7
Zend/zend_virtual_cwd.c 4
Zend/Optimizer/zend_optimizer.c 1
Zend/Optimizer/zend_func_info.c 1
main/streams/streams.c 2
main/streams/filter.c 1
main/streams/transports.c 1
main/php_ini.c 1
main/php_ticks.c 2
Zend/zend_weakrefs.h 2
ext/standard/basic_functions.c 3
main/rfc1867.c 1
sapi/fuzzer/fuzzer-execute-common.h 1

Fuzz engine guidance

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

sapi/fuzzer/fuzzer-json.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_declare_typed_property', 'zend_string_delref', 'zend_hash_add_constant', 'zend_hash_release', 'zend_ast_get_zval', 'zend_check_magic_method_implementation', 'zend_hash_add_mem', 'perform_delayable_implementation_check', '__zend_realloc', 'zval_get_long_func']

sapi/fuzzer/fuzzer-exif.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['smart_str_appendc_ex', 'zend_string_delref', 'zend_hash_add_constant', 'zend_declare_typed_property', 'zend_hash_release', 'zend_ast_get_zval', 'zend_check_magic_method_implementation', 'is_numeric_string_ex', 'zend_hash_add_mem', 'zend_observer_error_notify']

sapi/fuzzer/fuzzer-unserialize.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['smart_str_appendc_ex', 'zend_hash_add_constant', 'zend_hash_index_lookup', 'zend_hash_index_update_ptr', 'zend_ast_get_zval', 'zend_check_magic_method_implementation', '__zval_get_string_func', 'zend_hash_add_mem', 'zend_string_realloc', 'zend_hash_release']

sapi/fuzzer/fuzzer-unserializehash.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['smart_str_appendc_ex', 'zend_hash_add_constant', 'zend_hash_index_lookup', 'zend_hash_index_update_ptr', 'zend_ast_get_zval', 'zend_check_magic_method_implementation', '__zval_get_string_func', 'zend_hash_add_mem', 'zend_string_realloc', 'zend_hash_release']

sapi/fuzzer/fuzzer-parser.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_dval_to_lval_safe', 'zend_file_context_end', 'zend_llist_add_element', 'zend_fetch_debug_backtrace', '_zend_bailout', 'zend_throw_exception_internal', 'zend_gc_collect_cycles', 'zend_array_destroy', 'zend_object_dtor_property', 'zend_ast_destroy']

sapi/fuzzer/fuzzer-execute.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_mmap_set_name', 'zend_ast_export_ex', 'zend_ast_destroy', 'zend_string_realloc', 'zend_mm_shutdown', 'virtual_cwd_deactivate', 'zend_ast_create_fcc', 'zend_ast_create_ex_2', 'zend_ast_create_cast']

sapi/fuzzer/fuzzer-tracing-jit.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_mmap_set_name', 'zend_ast_destroy', 'zend_mm_shutdown', 'zend_string_realloc', 'virtual_cwd_deactivate', 'zend_ast_create_fcc', 'zend_ast_create_ex_2', 'zend_ast_create_cast', 'zend_fetch_debug_backtrace', 'zend_ast_create_1']

sapi/fuzzer/fuzzer-function-jit.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_mmap_set_name', 'zend_ast_destroy', 'zend_mm_shutdown', 'zend_string_realloc', 'virtual_cwd_deactivate', 'zend_ast_create_fcc', 'zend_ast_create_ex_2', 'zend_ast_create_cast', 'zend_fetch_debug_backtrace', 'zend_ast_create_1']

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
zend_mm_shutdown 108 21 19.44% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
zend_call_stack_init 34 12 35.29% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
zm_activate_zend_accelerator 113 35 30.97% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
accel_post_startup 159 65 40.88% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
accel_finish_startup 66 5 7.575% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
zend_jit_config 52 13 25.0% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
zend_shared_alloc_startup 88 46 52.27% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
php_pcre2_config 100 27 27.0% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
sapi_deactivate_module 35 11 31.42% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
sapi_header_op 156 74 47.43% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
php_binary_init 35 6 17.14% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
OnSetFacility 125 38 30.4% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
php_init_config 193 73 37.82% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
php_ini_parser_cb 92 20 21.73% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
php_build_argv 46 6 13.04% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
format_converter 446 163 36.54% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
xbuf_format_converter 445 244 54.83% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
zend_error_zstr_at 146 72 49.31% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
exif_scan_thumbnail 70 8 11.42% ['php-fuzz-exif']
php_image_type_to_mime_type 47 11 23.40% ['php-fuzz-exif']
php_verror 143 40 27.97% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
php_stream_memory_seek 59 25 42.37% ['php-fuzz-execute', 'php-fuzz-exif']
_php_stream_seek 77 28 36.36% ['php-fuzz-execute', 'php-fuzz-exif']
_convert_to_string 54 29 53.70% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
timelib_parse_posix_str 55 28 50.90% ['php-fuzz-tracing-jit', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
read_64bit_types 73 27 36.98% ['php-fuzz-tracing-jit', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
php_date_initialize_from_hash 46 10 21.73% ['php-fuzz-unserialize', 'php-fuzz-unserializehash']
php_date_period_initialize_from_hash 98 7 7.142% ['php-fuzz-unserialize', 'php-fuzz-unserializehash']
zim_SplPriorityQueue___unserialize 35 10 28.57% ['php-fuzz-unserialize']
zim_SplHeap___unserialize 35 11 31.42% ['php-fuzz-unserialize']
spl_heap_object_new_ex 49 25 51.02% ['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-unserialize']
spl_object_storage_attach 37 4 10.81% ['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-unserialize', 'php-fuzz-unserializehash']
uri_unserialize 43 11 25.58% ['php-fuzz-unserialize']
SHA256Transform 39 5 12.82% ['php-fuzz-unserializehash']
XXH32_finalize 63 24 38.09% ['php-fuzz-unserializehash']
zend_hash_merge 79 41 51.89% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
destroy_zend_class 209 101 48.32% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
convert_to_double 52 9 17.30% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
zend_get_file_handle_timestamp 68 26 38.23% ['php-fuzz-parser', 'php-fuzz-execute']
php_register_variable_ex 179 49 27.37% ['php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zend_dfa_optimize_calls 67 14 20.89% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
sccp_optimize_op_array 36 17 47.22% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ssa_verify_integrity 286 155 54.19% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zend_optimize 73 33 45.20% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zif_func_get_args 60 13 21.66% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
slow_index_convert_w 74 37 50.0% ['php-fuzz-tracing-jit', 'php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-exif', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
zend_array_key_exists_fast 53 29 54.71% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
convert_to_long 54 13 24.07% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
tsrm_realpath_r 156 62 39.74% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_SPEC_CONST_CONST_HANDLER 33 10 30.30% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_SUB_SPEC_CONST_CONST_HANDLER 33 10 30.30% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_MUL_SPEC_CONST_CONST_HANDLER 35 10 28.57% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_IS_EQUAL_SPEC_CONST_CONST_HANDLER 54 10 18.51% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_IS_EQUAL_SPEC_TMPVAR_TMPVAR_JMPNZ_HANDLER 54 26 48.14% ['php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_TMPVAR_CONST_JMPZ_HANDLER 54 21 38.88% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_HANDLER 43 19 44.18% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_JMPZ_HANDLER 43 19 44.18% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_JMPNZ_HANDLER 43 19 44.18% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_CONST_HANDLER 137 75 54.74% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_TMP_HANDLER 142 54 38.02% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_VAR_HANDLER 142 68 47.88% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_CV_HANDLER 137 46 33.57% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_TMPVAR_OP_DATA_CONST_HANDLER 138 59 42.75% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_TMPVAR_OP_DATA_TMP_HANDLER 143 50 34.96% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_CONST_HANDLER 137 73 53.28% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_TMP_HANDLER 142 50 35.21% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_VAR_HANDLER 142 60 42.25% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_CV_HANDLER 137 56 40.87% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_TMP_HANDLER 141 68 48.22% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_VAR_HANDLER 141 60 42.55% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_TMPVAR_OP_DATA_TMP_HANDLER 142 59 41.54% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_TMPVAR_OP_DATA_VAR_HANDLER 142 73 51.40% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_TMPVAR_OP_DATA_CV_HANDLER 137 47 34.30% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_UNUSED_OP_DATA_TMP_HANDLER 141 58 41.13% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_UNUSED_OP_DATA_VAR_HANDLER 141 63 44.68% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_UNUSED_OP_DATA_CV_HANDLER 136 69 50.73% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CV_OP_DATA_TMP_HANDLER 141 66 46.80% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CV_OP_DATA_VAR_HANDLER 141 64 45.39% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CV_OP_DATA_CV_HANDLER 136 74 54.41% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_CONST_HANDLER 136 71 52.20% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_TMP_HANDLER 138 59 42.75% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_VAR_HANDLER 138 39 28.26% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_CV_HANDLER 136 63 46.32% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CONST_OP_DATA_TMP_HANDLER 137 73 53.28% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_TMPVAR_OP_DATA_TMP_HANDLER 138 30 21.73% ['php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_TMP_HANDLER 137 29 21.16% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_CV_HANDLER 135 32 23.70% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CONST_OP_DATA_TMP_HANDLER 137 73 53.28% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CONST_OP_DATA_VAR_HANDLER 137 73 53.28% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_TMPVAR_OP_DATA_CV_HANDLER 136 41 30.14% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_CONST_HANDLER 135 35 25.92% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_OP_SPEC_VAR_UNUSED_HANDLER 89 40 44.94% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_QM_ASSIGN_SPEC_CONST_HANDLER 34 18 52.94% ['php-fuzz-execute']
ZEND_QM_ASSIGN_SPEC_TMP_HANDLER 34 14 41.17% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_QM_ASSIGN_SPEC_CV_HANDLER 34 16 47.05% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FAST_CONCAT_SPEC_CV_CV_HANDLER 115 46 40.0% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_RETURN_SPEC_CONST_HANDLER 69 21 30.43% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zend_leave_helper_SPEC 111 48 43.24% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_RETURN_SPEC_TMP_HANDLER 69 22 31.88% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_RETURN_SPEC_VAR_HANDLER 69 32 46.37% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_SEND_VAR_EX_SPEC_CV_UNUSED_HANDLER 55 20 36.36% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CONST_HANDLER 100 45 45.0% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_TMPVAR_HANDLER 101 47 46.53% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_UNUSED_HANDLER 100 21 21.0% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_CONST_HANDLER 101 34 33.66% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_UNUSED_HANDLER 101 16 15.84% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_CONST_HANDLER 101 39 38.61% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_TMPVAR_HANDLER 102 30 29.41% ['php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_UNUSED_HANDLER 101 31 30.69% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_CV_HANDLER 101 34 33.66% ['php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_CONST_HANDLER 100 50 50.0% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_UNUSED_HANDLER 100 27 27.0% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_UNSET_DIM_SPEC_VAR_CONST_HANDLER 93 46 49.46% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FE_RESET_R_SPEC_CONST_HANDLER 61 20 32.78% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FETCH_DIM_R_SPEC_CONST_TMPVAR_HANDLER 31 13 41.93% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_CONST_CONST_HANDLER 140 19 13.57% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_CONST_TMPVAR_HANDLER 141 20 14.18% ['php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_CONST_CV_HANDLER 140 19 13.57% ['php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_TMPVAR_CONST_HANDLER 141 58 41.13% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_TMPVAR_TMPVAR_HANDLER 142 46 32.39% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_TMPVAR_CV_HANDLER 141 20 14.18% ['php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_UNUSED_TMPVAR_HANDLER 141 36 25.53% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_UNUSED_CV_HANDLER 140 37 26.42% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_CV_TMPVAR_HANDLER 141 53 37.58% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_CV_CV_HANDLER 140 54 38.57% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_TMPVAR_CONST_HANDLER 104 37 35.57% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_CLONE_SPEC_CONST_HANDLER 50 19 38.0% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_RETURN_BY_REF_SPEC_CONST_HANDLER 47 23 48.93% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_RETURN_BY_REF_SPEC_TMP_HANDLER 50 21 42.0% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_RETURN_BY_REF_SPEC_CV_HANDLER 47 21 44.68% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_CONST_CONST_HANDLER 128 28 21.87% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CONST_HANDLER 128 56 43.75% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_CONST_TMPVAR_HANDLER 121 66 54.54% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_CONST_UNUSED_HANDLER 116 28 24.13% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_CV_HANDLER 116 58 50.0% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_UNUSED_UNUSED_HANDLER 116 36 31.03% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_SEND_VAR_SPEC_CV_UNUSED_HANDLER 39 19 48.71% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_VERIFY_RETURN_TYPE_SPEC_CONST_UNUSED_HANDLER 58 25 43.10% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_VERIFY_RETURN_TYPE_SPEC_TMP_UNUSED_HANDLER 58 26 44.82% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FE_RESET_RW_SPEC_CONST_HANDLER 84 22 26.19% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FE_RESET_RW_SPEC_TMP_HANDLER 86 29 33.72% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_INSTANCEOF_SPEC_TMPVAR_UNUSED_HANDLER 40 18 45.0% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_NAME_SPEC_TMPVAR_HANDLER 56 20 35.71% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_NAME_SPEC_CV_HANDLER 54 18 33.33% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_CONST_CONST_HANDLER 86 38 44.18% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_CONST_UNUSED_HANDLER 86 44 51.16% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_TMP_UNUSED_HANDLER 87 38 43.67% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_UNUSED_UNUSED_HANDLER 86 27 31.39% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_CV_UNUSED_HANDLER 86 47 54.65% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_CV_CV_HANDLER 86 41 47.67% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_GENERATOR_RETURN_SPEC_CONST_HANDLER 33 16 48.48% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_GENERATOR_RETURN_SPEC_TMP_HANDLER 33 14 42.42% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_YIELD_FROM_SPEC_CONST_HANDLER 78 22 28.20% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_COALESCE_SPEC_TMP_HANDLER 35 18 51.42% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_COALESCE_SPEC_CV_HANDLER 35 19 54.28% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_VAR_CONST_HANDLER 107 50 46.72% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_UNUSED_CONST_HANDLER 107 54 50.46% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_COUNT_SPEC_CONST_UNUSED_HANDLER 42 18 42.85% ['php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_COUNT_SPEC_TMPVAR_UNUSED_HANDLER 43 21 48.83% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_MATCH_SPEC_CONST_CONST_HANDLER 34 16 47.05% ['php-fuzz-execute']
ZEND_JMP_NULL_SPEC_CONST_HANDLER 37 19 51.35% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
timelib_fetch_timezone_offset 37 14 37.83% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_json_encode_array 191 95 49.73% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
cache_script_in_shared_memory 95 38 40.0% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zend_accel_error_va_args 53 8 15.09% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zend_accel_persist_class_table 68 24 35.29% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
check_char_prop 53 26 49.05% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
_pcre2_check_escape_8 179 59 32.96% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
caseCHAR_6caseCHAR_7caseCHAR_8caseCHAR_9 164 66 40.24%
parse_regex 1080 509 47.12% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
caseCHAR_5caseCHAR_6caseCHAR_7caseCHAR_8caseCHAR_9 407 126 30.95%
read_name 76 33 43.42% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
((posix_class==PC_GRAPH)?PT_PXGRAPH 1283 649 50.58%
first_significant_code 52 24 46.15% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
is_startline 65 28 43.07% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
_pcre2_extuni_8 39 19 48.71% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_pcre2_pattern_info 138 17 12.31% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
_pcre2_xclass_8 172 71 41.27% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_pcre_match_impl 228 97 42.54% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
populate_subpat_array 66 19 28.78% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
_preg_replace_common 53 19 35.84% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_preg_replace_func_impl 39 14 35.89% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_random_bytes_ex 74 18 24.32% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zim_Random_Engine_PcgOneseq128XslRr64___construct 37 16 43.24% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zim_Random_Engine_Xoshiro256StarStar___construct 43 18 41.86% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_random_range32 42 23 54.76% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zim_Reflection_getModifierNames 41 19 46.34% ['php-fuzz-execute']
zim_ReflectionParameter___construct 169 88 52.07% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zim_ReflectionParameter_getClass 40 18 45.0% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zim_ReflectionClass_getProperty 54 19 35.18% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zim_ReflectionProperty_getRawValue 48 26 54.16% ['php-fuzz-execute']
spl_array_read_dimension_ex 31 13 41.93% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
spl_array_get_dimension_ptr 82 43 52.43% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
spl_array_write_dimension_ex 52 28 53.84% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
spl_array_unset_dimension_ex 46 18 39.13% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
spl_array_get_hash_table_ptr 31 14 45.16% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
spl_filesystem_object_construct 36 16 44.44% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
spl_fixedarray_object_get_properties_for 31 17 54.83% ['php-fuzz-execute']
spl_dual_it_construct 132 71 53.78% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zif_extract 91 40 43.95% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zif_range 206 100 48.54% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
_php_search_array 83 42 50.60% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_compact_var 36 15 41.66% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_range_process_input 55 24 43.63% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_get_data_compare_func_unstable 57 18 31.57% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
_php_error_log_ex 37 11 29.72% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zif_file 74 31 41.89% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_getimagetype 88 37 42.04% ['php-fuzz-execute']
php_get_wbmp 43 6 13.95% ['php-fuzz-execute']
php_get_xbm 51 18 35.29% ['php-fuzz-execute']
php_getimagesize_from_stream 115 21 18.26% ['php-fuzz-execute']
php_handle_tiff 73 24 32.87% ['php-fuzz-execute']
php_stream_url_wrap_php 197 58 29.44% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zif_explode 31 17 54.83% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_basename 68 19 27.94% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_stripcslashes 56 20 35.71% ['php-fuzz-execute']
php_charmask 36 18 50.0% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_str_replace_in_subject 135 38 28.14% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
user_filter_factory_create 66 34 51.51% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_unserialize_with_options 106 49 46.22% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_log_err_with_severity 43 11 25.58% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_message_handler_for_zend 71 14 19.71% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_stream_filter_append_ex 65 13 20.0% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_stream_parse_fopen_modes 41 21 51.21% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_stdiop_read 35 17 48.57% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_stdiop_close 43 17 39.53% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
php_stdiop_set_option 152 14 9.210% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
_php_stream_copy_to_mem 72 26 36.11% ['php-fuzz-function-jit', 'php-fuzz-execute', 'php-fuzz-tracing-jit']
zend_ssa_replace_use_chain 35 16 45.71% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
convert_to_boolean 63 14 22.22% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
convert_to_object 41 17 41.46% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_EQUAL_SPEC_TMPVAR_TMPVAR_JMPZ_HANDLER 54 12 22.22% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_EQUAL_SPEC_CV_TMPVAR_JMPNZ_HANDLER 54 14 25.92% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_CONST_CONST_HANDLER 54 10 18.51% ['php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_TMPVAR_TMPVAR_JMPZ_HANDLER 54 12 22.22% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_TMPVAR_JMPNZ_HANDLER 54 13 24.07% ['php-fuzz-tracing-jit']
ZEND_IS_SMALLER_SPEC_CONST_TMPVARCV_JMPNZ_HANDLER 39 20 51.28% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_TMPVAR_OP_DATA_CV_HANDLER 138 33 23.91% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CONST_HANDLER 137 55 40.14% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_TMP_HANDLER 142 47 33.09% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_VAR_HANDLER 142 49 34.50% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CV_HANDLER 137 53 38.68% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_TMPVAR_OP_DATA_CONST_HANDLER 137 32 23.35% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_TMPVAR_OP_DATA_VAR_HANDLER 139 33 23.74% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CV_OP_DATA_CV_HANDLER 136 38 27.94% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_CONST_HANDLER 135 28 20.74% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_TMPVAR_OP_DATA_CONST_HANDLER 136 31 22.79% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_TMP_HANDLER 137 37 27.00% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_VAR_HANDLER 137 33 24.08% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_CV_HANDLER 135 40 29.62% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_OP_SPEC_VAR_CONST_HANDLER 89 45 50.56% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_OP_SPEC_VAR_TMPVAR_HANDLER 90 47 52.22% ['php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_OP_SPEC_UNUSED_CV_HANDLER 77 36 46.75% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SEND_VAR_NO_REF_EX_SPEC_VAR_CONST_HANDLER 57 23 40.35% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FAST_CONCAT_SPEC_CONST_CONST_HANDLER 115 27 23.47% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FAST_CONCAT_SPEC_TMPVAR_CV_HANDLER 116 58 50.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CV_HANDLER 100 53 53.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_TMPVAR_HANDLER 102 27 26.47% ['php-fuzz-tracing-jit']
ZEND_UNSET_DIM_SPEC_VAR_TMPVAR_HANDLER 94 35 37.23% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_UNSET_OBJ_SPEC_UNUSED_CONST_HANDLER 38 18 47.36% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_CONST_CONST_HANDLER 103 18 17.47% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_TMPVAR_TMPVAR_HANDLER 105 31 29.52% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_UNUSED_CONST_HANDLER 103 43 41.74% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_UNUSED_CV_HANDLER 103 28 27.18% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_CV_TMPVAR_HANDLER 104 30 28.84% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_CV_CV_HANDLER 103 43 41.74% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_TMPVAR_TMPVAR_HANDLER 136 52 38.23% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_TMPVAR_CV_HANDLER 131 63 48.09% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_TMPVAR_HANDLER 133 44 33.08% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CV_HANDLER 128 59 46.09% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_CV_TMPVAR_HANDLER 133 69 51.87% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_CONST_HANDLER 116 57 49.13% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_TMPVAR_HANDLER 121 42 34.71% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_UNUSED_TMPVAR_HANDLER 121 16 13.22% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ISSET_ISEMPTY_DIM_OBJ_SPEC_CONST_CONST_HANDLER 65 20 30.76% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SEND_VAR_SPEC_CV_CONST_HANDLER 39 17 43.58% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_TYPE_CHECK_SPEC_CONST_HANDLER 32 17 53.12% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INSTANCEOF_SPEC_TMPVAR_VAR_HANDLER 40 19 47.5% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_CONST_CONST_HANDLER 40 20 50.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_TMPVAR_TMPVAR_HANDLER 42 22 52.38% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_UNUSED_CONST_HANDLER 40 20 50.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_CONST_TMPVAR_HANDLER 87 35 40.22% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_CONST_CV_HANDLER 86 33 38.37% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_TMP_TMPVAR_HANDLER 88 32 36.36% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_VAR_CONST_HANDLER 88 34 38.63% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_VAR_CV_HANDLER 88 36 40.90% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_GENERATOR_RETURN_SPEC_VAR_HANDLER 33 18 54.54% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_GENERATOR_RETURN_SPEC_CV_HANDLER 33 14 42.42% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_COALESCE_SPEC_CONST_HANDLER 35 18 51.42% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_TMPVARCV_HANDLER 118 62 52.54% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_VAR_TMPVARCV_HANDLER 118 54 45.76% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_UNUSED_TMPVARCV_HANDLER 118 43 36.44% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IN_ARRAY_SPEC_CV_CONST_HANDLER 61 11 18.03% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_GET_CLASS_SPEC_UNUSED_UNUSED_HANDLER 38 13 34.21% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_SPEC_CONST_CONST_TAILCALL_HANDLER 33 10 30.30% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SUB_SPEC_CONST_CONST_TAILCALL_HANDLER 33 10 30.30% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_MUL_SPEC_CONST_CONST_TAILCALL_HANDLER 35 10 28.57% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_CONCAT_SPEC_CONST_TMPVAR_TAILCALL_HANDLER 69 35 50.72% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_CONCAT_SPEC_CONST_CV_TAILCALL_HANDLER 68 34 50.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_CONCAT_SPEC_CV_CONST_TAILCALL_HANDLER 68 34 50.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_EQUAL_SPEC_CONST_CONST_TAILCALL_HANDLER 54 10 18.51% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_EQUAL_SPEC_TMPVAR_CONST_JMPNZ_TAILCALL_HANDLER 54 23 42.59% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_EQUAL_SPEC_TMPVAR_TMPVAR_JMPZ_TAILCALL_HANDLER 54 12 22.22% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_EQUAL_SPEC_TMPVAR_TMPVAR_JMPNZ_TAILCALL_HANDLER 54 13 24.07% ['php-fuzz-tracing-jit']
ZEND_IS_EQUAL_SPEC_CV_TMPVAR_JMPZ_TAILCALL_HANDLER 54 21 38.88% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_EQUAL_SPEC_CV_TMPVAR_JMPNZ_TAILCALL_HANDLER 54 14 25.92% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_TMPVAR_CONST_TAILCALL_HANDLER 54 23 42.59% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_TMPVAR_CONST_JMPZ_TAILCALL_HANDLER 54 21 38.88% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_TMPVAR_TMPVAR_JMPZ_TAILCALL_HANDLER 54 12 22.22% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_TMPVAR_JMPZ_TAILCALL_HANDLER 54 21 38.88% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_TMPVAR_JMPNZ_TAILCALL_HANDLER 54 13 24.07% ['php-fuzz-tracing-jit']
ZEND_IS_SMALLER_SPEC_CONST_TMPVARCV_JMPNZ_TAILCALL_HANDLER 39 20 51.28% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_TAILCALL_HANDLER 43 19 44.18% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_JMPZ_TAILCALL_HANDLER 43 19 44.18% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_JMPNZ_TAILCALL_HANDLER 43 16 37.20% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_TMPVARCV_CONST_TAILCALL_HANDLER 43 16 37.20% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_TMPVARCV_CONST_JMPZ_TAILCALL_HANDLER 43 19 44.18% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_CONST_TAILCALL_HANDLER 137 75 54.74% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_TMP_TAILCALL_HANDLER 142 54 38.02% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_VAR_TAILCALL_HANDLER 142 68 47.88% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_CV_TAILCALL_HANDLER 137 46 33.57% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_TMPVAR_OP_DATA_CONST_TAILCALL_HANDLER 138 59 42.75% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_TMPVAR_OP_DATA_TMP_TAILCALL_HANDLER 143 50 34.96% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_TMPVAR_OP_DATA_CV_TAILCALL_HANDLER 138 33 23.91% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_CONST_TAILCALL_HANDLER 137 71 51.82% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_TMP_TAILCALL_HANDLER 142 50 35.21% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_VAR_TAILCALL_HANDLER 142 47 33.09% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_CV_TAILCALL_HANDLER 137 56 40.87% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CONST_TAILCALL_HANDLER 137 55 40.14% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_VAR_TAILCALL_HANDLER 142 49 34.50% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CV_TAILCALL_HANDLER 137 53 38.68% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_TMP_TAILCALL_HANDLER 141 68 48.22% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_VAR_TAILCALL_HANDLER 141 60 42.55% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_TMPVAR_OP_DATA_CONST_TAILCALL_HANDLER 137 70 51.09% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_TMPVAR_OP_DATA_TMP_TAILCALL_HANDLER 142 54 38.02% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_TMPVAR_OP_DATA_VAR_TAILCALL_HANDLER 142 71 50.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_TMPVAR_OP_DATA_CV_TAILCALL_HANDLER 137 47 34.30% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_UNUSED_OP_DATA_TMP_TAILCALL_HANDLER 141 58 41.13% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_UNUSED_OP_DATA_VAR_TAILCALL_HANDLER 141 63 44.68% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_UNUSED_OP_DATA_CV_TAILCALL_HANDLER 136 69 50.73% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CV_OP_DATA_TMP_TAILCALL_HANDLER 141 60 42.55% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CV_OP_DATA_VAR_TAILCALL_HANDLER 141 64 45.39% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CV_OP_DATA_CV_TAILCALL_HANDLER 136 74 54.41% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_CONST_TAILCALL_HANDLER 136 71 52.20% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_TMP_TAILCALL_HANDLER 138 59 42.75% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_VAR_TAILCALL_HANDLER 138 39 28.26% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_CV_TAILCALL_HANDLER 136 33 24.26% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_TMPVAR_OP_DATA_CONST_TAILCALL_HANDLER 137 32 23.35% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_TMPVAR_OP_DATA_VAR_TAILCALL_HANDLER 139 33 23.74% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CV_OP_DATA_CV_TAILCALL_HANDLER 136 38 27.94% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CONST_OP_DATA_TMP_TAILCALL_HANDLER 137 73 53.28% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_CONST_TAILCALL_HANDLER 135 28 20.74% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_TMP_TAILCALL_HANDLER 137 29 21.16% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_CV_TAILCALL_HANDLER 135 32 23.70% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CONST_OP_DATA_TMP_TAILCALL_HANDLER 137 73 53.28% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CONST_OP_DATA_VAR_TAILCALL_HANDLER 137 73 53.28% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CONST_OP_DATA_CV_TAILCALL_HANDLER 135 74 54.81% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_TMPVAR_OP_DATA_CONST_TAILCALL_HANDLER 136 31 22.79% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_TMPVAR_OP_DATA_CV_TAILCALL_HANDLER 136 38 27.94% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_CONST_TAILCALL_HANDLER 135 30 22.22% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_TMP_TAILCALL_HANDLER 137 37 27.00% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_VAR_TAILCALL_HANDLER 137 33 24.08% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_CV_TAILCALL_HANDLER 135 40 29.62% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_OP_SPEC_VAR_CONST_TAILCALL_HANDLER 89 45 50.56% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_OP_SPEC_VAR_TMPVAR_TAILCALL_HANDLER 90 47 52.22% ['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_OP_SPEC_VAR_UNUSED_TAILCALL_HANDLER 89 37 41.57% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_OP_SPEC_UNUSED_CV_TAILCALL_HANDLER 77 36 46.75% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_QM_ASSIGN_SPEC_TMP_TAILCALL_HANDLER 34 14 41.17% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_QM_ASSIGN_SPEC_CV_TAILCALL_HANDLER 34 16 47.05% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SEND_VAR_NO_REF_EX_SPEC_VAR_CONST_TAILCALL_HANDLER 57 23 40.35% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SEND_VAR_NO_REF_EX_SPEC_VAR_UNUSED_QUICK_TAILCALL_HANDLER 57 29 50.87% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FAST_CONCAT_SPEC_CONST_CONST_TAILCALL_HANDLER 115 27 23.47% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FAST_CONCAT_SPEC_TMPVAR_CV_TAILCALL_HANDLER 116 53 45.68% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FAST_CONCAT_SPEC_CV_CV_TAILCALL_HANDLER 115 46 40.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_RETURN_SPEC_CONST_TAILCALL_HANDLER 69 19 27.53% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_RETURN_SPEC_TMP_TAILCALL_HANDLER 69 22 31.88% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_RETURN_SPEC_VAR_TAILCALL_HANDLER 69 32 46.37% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SEND_VAR_EX_SPEC_CV_UNUSED_TAILCALL_HANDLER 55 20 36.36% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CONST_TAILCALL_HANDLER 100 45 45.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_TMPVAR_TAILCALL_HANDLER 101 47 46.53% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_UNUSED_TAILCALL_HANDLER 100 21 21.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CV_TAILCALL_HANDLER 100 53 53.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_CONST_TAILCALL_HANDLER 101 28 27.72% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_TMPVAR_TAILCALL_HANDLER 102 27 26.47% ['php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_UNUSED_TAILCALL_HANDLER 101 16 15.84% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_CONST_TAILCALL_HANDLER 101 39 38.61% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_UNUSED_TAILCALL_HANDLER 101 31 30.69% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_CONST_TAILCALL_HANDLER 100 50 50.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_UNUSED_TAILCALL_HANDLER 100 27 27.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_UNSET_DIM_SPEC_VAR_CONST_TAILCALL_HANDLER 93 41 44.08% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_UNSET_DIM_SPEC_VAR_TMPVAR_TAILCALL_HANDLER 94 35 37.23% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_UNSET_OBJ_SPEC_UNUSED_CONST_TAILCALL_HANDLER 38 18 47.36% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FE_RESET_R_SPEC_CONST_TAILCALL_HANDLER 61 18 29.50% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_CONST_CONST_TAILCALL_HANDLER 140 19 13.57% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_TMPVAR_TMPVAR_TAILCALL_HANDLER 142 21 14.78% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_UNUSED_TMPVAR_TAILCALL_HANDLER 141 36 25.53% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_UNUSED_CV_TAILCALL_HANDLER 140 37 26.42% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_CV_TMPVAR_TAILCALL_HANDLER 141 51 36.17% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_CV_CV_TAILCALL_HANDLER 140 54 38.57% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_CONST_CONST_TAILCALL_HANDLER 103 18 17.47% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_TMPVAR_CONST_TAILCALL_HANDLER 104 37 35.57% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_TMPVAR_TMPVAR_TAILCALL_HANDLER 105 31 29.52% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_UNUSED_CONST_TAILCALL_HANDLER 103 43 41.74% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_UNUSED_CV_TAILCALL_HANDLER 103 28 27.18% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_CV_TMPVAR_TAILCALL_HANDLER 104 30 28.84% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_IS_SPEC_CV_CV_TAILCALL_HANDLER 103 43 41.74% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_CLONE_SPEC_CONST_TAILCALL_HANDLER 50 19 38.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_RETURN_BY_REF_SPEC_CONST_TAILCALL_HANDLER 47 23 48.93% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_RETURN_BY_REF_SPEC_TMP_TAILCALL_HANDLER 50 21 42.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_RETURN_BY_REF_SPEC_CV_TAILCALL_HANDLER 47 21 44.68% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_CONST_CONST_TAILCALL_HANDLER 128 28 21.87% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_TMPVAR_TMPVAR_TAILCALL_HANDLER 136 52 38.23% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_TMPVAR_CV_TAILCALL_HANDLER 131 63 48.09% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CONST_TAILCALL_HANDLER 128 56 43.75% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_TMPVAR_TAILCALL_HANDLER 133 44 33.08% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CV_TAILCALL_HANDLER 128 59 46.09% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_CV_TMPVAR_TAILCALL_HANDLER 133 69 51.87% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_CONST_TMPVAR_TAILCALL_HANDLER 121 66 54.54% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_CONST_UNUSED_TAILCALL_HANDLER 116 28 24.13% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_CONST_TAILCALL_HANDLER 116 57 49.13% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_TMPVAR_TAILCALL_HANDLER 121 42 34.71% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_CV_TAILCALL_HANDLER 116 58 50.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_UNUSED_TMPVAR_TAILCALL_HANDLER 121 16 13.22% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_UNUSED_UNUSED_TAILCALL_HANDLER 116 36 31.03% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ISSET_ISEMPTY_DIM_OBJ_SPEC_CONST_CONST_TAILCALL_HANDLER 65 20 30.76% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SEND_VAR_SPEC_CV_CONST_TAILCALL_HANDLER 39 17 43.58% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SEND_VAR_SPEC_CV_UNUSED_TAILCALL_HANDLER 39 19 48.71% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_TYPE_CHECK_SPEC_CONST_TAILCALL_HANDLER 32 17 53.12% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_VERIFY_RETURN_TYPE_SPEC_CONST_UNUSED_TAILCALL_HANDLER 58 25 43.10% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_VERIFY_RETURN_TYPE_SPEC_TMP_UNUSED_TAILCALL_HANDLER 58 26 44.82% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FE_RESET_RW_SPEC_CONST_TAILCALL_HANDLER 84 22 26.19% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FE_RESET_RW_SPEC_TMP_TAILCALL_HANDLER 86 29 33.72% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INSTANCEOF_SPEC_TMPVAR_VAR_TAILCALL_HANDLER 40 19 47.5% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INSTANCEOF_SPEC_TMPVAR_UNUSED_TAILCALL_HANDLER 40 18 45.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_CONST_CONST_TAILCALL_HANDLER 40 20 50.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_TMPVAR_TMPVAR_TAILCALL_HANDLER 42 22 52.38% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_UNUSED_CONST_TAILCALL_HANDLER 40 20 50.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_NAME_SPEC_TMPVAR_TAILCALL_HANDLER 56 20 35.71% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_NAME_SPEC_CV_TAILCALL_HANDLER 54 18 33.33% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_CALL_TRAMPOLINE_SPEC_TAILCALL_HANDLER 115 54 46.95% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_CONST_CONST_TAILCALL_HANDLER 86 36 41.86% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_CONST_TMPVAR_TAILCALL_HANDLER 87 35 40.22% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_CONST_UNUSED_TAILCALL_HANDLER 86 40 46.51% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_CONST_CV_TAILCALL_HANDLER 86 33 38.37% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_TMP_TMPVAR_TAILCALL_HANDLER 88 32 36.36% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_TMP_UNUSED_TAILCALL_HANDLER 87 38 43.67% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_VAR_CONST_TAILCALL_HANDLER 88 34 38.63% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_VAR_CV_TAILCALL_HANDLER 88 36 40.90% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_UNUSED_UNUSED_TAILCALL_HANDLER 86 27 31.39% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_CV_UNUSED_TAILCALL_HANDLER 86 47 54.65% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_SPEC_CV_CV_TAILCALL_HANDLER 86 41 47.67% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_GENERATOR_RETURN_SPEC_CONST_TAILCALL_HANDLER 33 16 48.48% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_GENERATOR_RETURN_SPEC_TMP_TAILCALL_HANDLER 33 14 42.42% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_GENERATOR_RETURN_SPEC_VAR_TAILCALL_HANDLER 33 18 54.54% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_GENERATOR_RETURN_SPEC_CV_TAILCALL_HANDLER 33 14 42.42% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_YIELD_FROM_SPEC_CONST_TAILCALL_HANDLER 78 20 25.64% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_COALESCE_SPEC_CONST_TAILCALL_HANDLER 35 18 51.42% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_COALESCE_SPEC_TMP_TAILCALL_HANDLER 35 18 51.42% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_COALESCE_SPEC_CV_TAILCALL_HANDLER 35 19 54.28% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_TMPVARCV_TAILCALL_HANDLER 118 62 52.54% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_VAR_CONST_TAILCALL_HANDLER 107 50 46.72% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_VAR_TMPVARCV_TAILCALL_HANDLER 118 54 45.76% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_UNUSED_CONST_TAILCALL_HANDLER 107 54 50.46% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_UNUSED_TMPVARCV_TAILCALL_HANDLER 118 43 36.44% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IN_ARRAY_SPEC_CV_CONST_TAILCALL_HANDLER 61 11 18.03% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_COUNT_SPEC_TMPVAR_UNUSED_TAILCALL_HANDLER 43 21 48.83% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_GET_CLASS_SPEC_UNUSED_UNUSED_TAILCALL_HANDLER 38 13 34.21% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_JMP_NULL_SPEC_CONST_TAILCALL_HANDLER 37 19 51.35% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
timelib_diff_with_tzid 58 26 44.82% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
php_date_modify 62 17 27.41% ['php-fuzz-tracing-jit']
zif_json_decode 42 21 50.0% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
find_recurse 104 19 18.26% ['php-fuzz-tracing-jit']
_pcre2_find_bracket_8 115 37 32.17% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
reflection_property_check_lazy_compatible 33 14 42.42% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
_const_string 38 20 52.63% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
spl_array_has_dimension_ex 47 25 53.19% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zim_SplFileObject___construct 36 11 30.55% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zim_SplFixedArray_fromArray 52 25 48.07% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zim_MultipleIterator_attachIterator 32 17 53.12% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
spl_multiple_iterator_get_all 60 28 46.66% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zif_min 70 31 44.28% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zif_max 70 26 37.14% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zif_array_diff 104 12 11.53% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zif_array_key_exists 36 6 16.66% ['php-fuzz-tracing-jit']
php_array_diff_key 66 14 21.21% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
php_stat 234 29 12.39% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
map_from_unicode 102 12 11.76% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
write_octet_sequence 32 14 43.75% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zif_substr_replace 237 47 19.83% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
php_trim_int 78 36 46.15% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
try_setlocale_str 39 11 28.20% ['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_SMALLER_SPEC_CONST_CONST_HANDLER 39 10 25.64% ['php-fuzz-function-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_TMPVAR_HANDLER 101 27 26.73% ['php-fuzz-function-jit']
ZEND_IS_SMALLER_SPEC_CONST_CONST_TAILCALL_HANDLER 39 10 25.64% ['php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_TMP_TAILCALL_HANDLER 142 47 33.09% ['php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_TMPVAR_OP_DATA_TMP_TAILCALL_HANDLER 138 30 21.73% ['php-fuzz-function-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_TMPVAR_TAILCALL_HANDLER 101 27 26.73% ['php-fuzz-function-jit']
ZEND_FETCH_DIM_R_SPEC_CONST_TMPVAR_TAILCALL_HANDLER 31 13 41.93% ['php-fuzz-function-jit']
ZEND_COUNT_SPEC_CONST_UNUSED_TAILCALL_HANDLER 42 18 42.85% ['php-fuzz-function-jit']
php_timezone_to_string 31 7 22.58% ['php-fuzz-function-jit']
check_lookbehinds 116 57 49.13% ['php-fuzz-function-jit']
get_branchlength 284 42 14.78% ['php-fuzz-function-jit']

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
/src/php-src/ext/lexbor/lexbor/core/array.h [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/text.c [] []
/src/php-src/ext/lexbor/lexbor/css/log.c [] []
/src/php-src/ext/pcre/php_pcre_arginfo.h [] []
/src/php-src/ext/date/php_date.h [] []
/src/php-src/ext/reflection/php_reflection.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/audio_element.c [] []
/src/php-src/ext/standard/uuencode.c [] []
/src/php-src/ext/lexbor/lexbor/core/dobject.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_frameset.c [] []
/src/php-src/ext/lexbor/lexbor/unicode/idna.c [] []
/src/php-src/ext/standard/info.c [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_script.c [] []
/src/php-src/ext/uri/uriparser/src/UriSetHostIpFuture.c [] []
/src/php-src/ext/standard/browscap.c [] []
/src/php-src/Zend/zend_interfaces_arginfo.h [] []
/src/php-src/ext/opcache/jit/zend_jit_vm_helpers.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/unknown_element.c [] []
/src/php-src/ext/opcache/zend_file_cache.c [] []
/src/php-src/Zend/Optimizer/zend_inference.h [] []
/src/php-src/ext/standard/link.c [] []
/src/php-src/ext/json/json_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/map_element.c [] []
/src/php-src/Zend/zend_observer.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_col_element.c [] []
/src/php-src/ext/hash/hash_murmur.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/input_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/object_element.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document.c [] []
/src/php-src/main/streams/cast.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/template_insertion.h [] []
/src/php-src/ext/standard/array.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/text_area_element.c [] []
/src/php-src/ext/standard/type.c [] []
/src/php-src/Zend/zend_string.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/core/sbst.h [] []
/src/php-src/ext/standard/mail.c [] []
/src/php-src/ext/lexbor/lexbor/core/mraw.c [] []
/src/php-src/ext/spl/spl_dllist_arginfo.h [] []
/src/php-src/sapi/fuzzer/fuzzer-unserializehash.c ['php-fuzz-unserializehash'] ['php-fuzz-unserializehash']
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/before_head.c [] []
/src/php-src/ext/standard/filestat.c [] []
/src/php-src/Zend/zend_fibers.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/standard/crypt_freesec.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/anchor_element.c [] []
/src/php-src/ext/standard/credits.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/script_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/u_list_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_rawtext.c [] []
/src/php-src/ext/uri/uriparser/src/UriSetUserInfo.c [] []
/src/php-src/ext/lexbor/lexbor/dom/collection.h [] []
/src/php-src/ext/opcache/jit/zend_jit_trace.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/div_element.c [] []
/src/php-src/Zend/zend_generators.h [] []
/src/php-src/ext/standard/php_fopen_wrapper.c [] []
/src/php-src/Zend/zend_default_classes.c [] []
/src/php-src/ext/opcache/zend_accelerator_util_funcs.c [] []
/src/php-src/Zend/Optimizer/pass3.c [] []
/src/php-src/Zend/zend_types.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_ptr_stack.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/random/csprng.c [] []
/src/php-src/ext/lexbor/lexbor/core/conv.h [] []
/src/php-src/Zend/zend_atomic.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/Optimizer/scdf.c [] []
/src/php-src/ext/opcache/jit/zend_jit_helpers.c [] []
/src/php-src/main/streams/transports.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_constants_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/embed_element.c [] []
/src/php-src/ext/hash/hash.c [] []
/src/php-src/ext/standard/var_unserializer.re ['php-fuzz-unserialize', 'php-fuzz-unserializehash'] ['php-fuzz-unserialize', 'php-fuzz-unserializehash']
/src/php-src/ext/lexbor/lexbor/html/interfaces/slot_element.c [] []
/src/php-src/ext/random/engine_mt19937.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/form_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/time_element.c [] []
/src/php-src/ext/hash/hash_haval.c [] []
/src/php-src/ext/random/engine_xoshiro256starstar.c [] []
/src/php-src/ext/standard/exec.c [] []
/src/php-src/ext/opcache/zend_persist_calc.c [] []
/src/php-src/main/php_ini.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_exceptions_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/parser.c [] []
/src/php-src/ext/standard/password.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/quote_element.c [] []
/src/php-src/ext/standard/flock_compat.c [] []
/src/php-src/ext/opcache/jit/ir/ir_fold_hash.h [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_study.c [] []
/src/php-src/ext/opcache/jit/ir/ir_perf.c [] []
/src/php-src/ext/random/gammasection.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/image_element.c [] []
/src/php-src/ext/standard/html.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/o_list_element.c [] []
/src/php-src/ext/standard/uniqid.c [] []
/src/php-src/ext/spl/spl_heap.c [] []
/src/php-src/Zend/zend_gc.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/hash/xxhash/xxhash.h [] []
/src/php-src/main/streams/userspace_arginfo.h [] []
/src/php-src/Zend/zend_strtod.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/dom/interfaces/attr.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/head_element.c [] []
/src/php-src/sapi/fuzzer/fuzzer-execute-common.h ['php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/date/lib/timelib.c [] []
/src/php-src/ext/exif/exif_arginfo.h [] []
/src/php-src/Zend/zend_inheritance.h [] []
/src/php-src/Zend/zend_weakrefs.h ['php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/tokenizer.h [] []
/src/php-src/ext/uri/uriparser/src/UriSetHostIp4.c [] []
/src/php-src/Zend/Optimizer/zend_func_info.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/sapi/fuzzer/fuzzer-json.c ['php-fuzz-json'] ['php-fuzz-json']
/src/php-src/ext/standard/basic_functions_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/menu_element.c [] []
/src/php-src/ext/standard/basic_functions.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/uri/uriparser/src/UriSetPath.c [] []
/src/php-src/ext/lexbor/lexbor/core/conv.c [] []
/src/php-src/sapi/fuzzer/fuzzer-unserialize.c ['php-fuzz-unserialize'] ['php-fuzz-unserialize']
/src/php-src/ext/lexbor/lexbor/html/interfaces/document.c [] []
/src/php-src/ext/date/lib/parse_posix.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_select_in_table.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_cell.c [] []
/src/php-src/ext/spl/spl_exceptions_arginfo.h [] []
/src/php-src/ext/spl/spl_fixedarray_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/dialog_element.c [] []
/src/php-src/ext/lexbor/lexbor/core/hash.c [] []
/src/php-src/Zend/Optimizer/optimize_func_calls.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/hr_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/media_element.c [] []
/src/php-src/Zend/zend_operators.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/standard/base64.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/progress_element.c [] []
/src/php-src/ext/uri/uriparser/src/UriSetPort.c [] []
/src/php-src/ext/opcache/jit/ir/ir_emit.c [] []
/src/php-src/ext/standard/sha1.c [] []
/src/php-src/Zend/zend_float.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/pcre/pcre2lib/pcre2_substring.c [] []
/src/php-src/Zend/Optimizer/zend_ssa.c [] []
/src/php-src/Zend/zend_multiply.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/random/php_random_csprng.h [] []
/src/php-src/ext/random/zend_utils.c [] []
/src/php-src/Zend/zend_fibers_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/document.h [] []
/src/php-src/Zend/Optimizer/zend_worklist.h [] []
/src/php-src/main/php_streams.h [] []
/src/php-src/Zend/zend_stream.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/encoding.h [] []
/src/php-src/ext/spl/spl_iterators_arginfo.h [] []
/src/php-src/Zend/Optimizer/zend_optimizer_internal.h [] []
/src/php-src/Zend/Optimizer/zend_ssa.h [] []
/src/php-src/main/main.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/Optimizer/zend_inference.c [] []
/src/php-src/Zend/zend_list.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/heading_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_head.c [] []
/src/php-src/ext/random/random_arginfo.h [] []
/src/php-src/Zend/zend_alloc.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/select_element.c [] []
/src/php-src/ext/lexbor/lexbor/css/parser.c [] []
/src/php-src/ext/standard/md5.c [] []
/src/php-src/ext/uri/uriparser/src/UriSetScheme.c [] []
/src/php-src/sapi/fuzzer/fuzzer-tracing-jit.c ['php-fuzz-tracing-jit'] ['php-fuzz-tracing-jit']
/src/php-src/ext/pcre/pcre2lib/pcre2_auto_possess.c [] []
/src/php-src/ext/lexbor/lexbor/css/selectors/pseudo_state.c [] []
/src/php-src/main/php_content_types.c [] []
/src/php-src/ext/json/php_json_encoder.h [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/node.h [] []
/src/php-src/Zend/zend_object_handlers.h [] []
/src/php-src/ext/lexbor/lexbor/encoding/encoding.h [] []
/src/php-src/ext/spl/spl_directory.c [] []
/src/php-src/ext/standard/ftok.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/text.c [] []
/src/php-src/ext/standard/dir.c [] []
/src/php-src/main/php_variables.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_smart_str.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/opcache/zend_accelerator_module.c [] []
/src/php-src/ext/random/php_random_uint128.h [] []
/src/php-src/ext/standard/url.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/active_formatting.c [] []
/src/php-src/ext/date/lib/parse_iso_intervals.re [] []
/src/php-src/main/streams/xp_socket.c [] []
/src/php-src/ext/lexbor/lexbor/core/array_obj.h [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer/error.c [] []
/src/php-src/ext/opcache/jit/ir/ir.c [] []
/src/php-src/Zend/zend_constants.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_variables.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/hash/hash_joaat.c [] []
/src/php-src/ext/uri/php_uri_common.h [] []
/src/php-src/Zend/zend_atomic.c [] []
/src/php-src/ext/opcache/jit/zend_jit_internal.h [] []
/src/php-src/ext/hash/hash_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/css/state.c [] []
/src/php-src/main/php_open_temporary_file.c [] []
/src/php-src/ext/opcache/zend_accelerator_debug.c [] []
/src/php-src/main/SAPI.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/main/internal_functions_cli.c [] []
/src/php-src/ext/lexbor/lexbor/css/selectors/selectors.c [] []
/src/php-src/ext/spl/spl_heap_arginfo.h [] []
/src/php-src/Zend/zend_property_hooks.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/hash/sha3/generic64lc/KeccakHash.c [] []
/src/php-src/ext/opcache/jit/ir/ir_ra.c [] []
/src/php-src/main/safe_bcmp.c [] []
/src/php-src/ext/hash/hash_sha.c [] []
/src/php-src/ext/opcache/jit/ir/ir_gdb.c [] []
/src/php-src/ext/lexbor/lexbor/encoding/decode.c [] []
/src/php-src/Zend/zend_stack.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/standard/crypt.c [] []
/src/php-src/ext/standard/filters.c [] []
/src/php-src/ext/spl/spl_observer.c [] []
/src/php-src/ext/uri/uriparser/src/UriSetQuery.c [] []
/src/php-src/ext/lexbor/lexbor/unicode/unicode.c [] []
/src/php-src/ext/hash/hash_gost.c [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_comment.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_match.c [] []
/src/php-src/Zend/zend_hash.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/tree/error.c [] []
/src/php-src/Zend/zend_gdb.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document_type.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/title_element.c [] []
/src/php-src/main/rfc1867.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/initial.c [] []
/src/php-src/main/output.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/standard/php_crypt_r.c [] []
/src/php-src/Zend/zend_generators_arginfo.h [] []
/src/php-src/Zend/Optimizer/ssa_integrity.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/d_list_element.c [] []
/src/php-src/ext/random/random.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_string_utils.c [] []
/src/php-src/ext/lexbor/lexbor/encoding/multi.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/data_list_element.c [] []
/src/php-src/ext/standard/dl.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_element.c [] []
/src/php-src/ext/standard/iptc.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/processing_instruction.c [] []
/src/php-src/ext/opcache/jit/ir/dynasm/dasm_x86.h [] []
/src/php-src/Zend/zend_cpuinfo.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/option_element.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_compile.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/param_element.c [] []
/src/php-src/ext/random/php_random.h [] []
/src/php-src/ext/uri/uriparser/src/UriEscape.c [] []
/src/php-src/ext/lexbor/lexbor/html/token_attr.c [] []
/src/php-src/ext/standard/pack.c [] []
/src/php-src/ext/standard/css.c [] []
/src/php-src/ext/pcre/php_pcre.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/details_element.c [] []
/src/php-src/main/getopt.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_head_noscript.c [] []
/src/php-src/ext/standard/crypt_blowfish.c [] []
/src/php-src/ext/standard/incomplete_class.c ['php-fuzz-unserialize', 'php-fuzz-unserializehash'] ['php-fuzz-unserialize', 'php-fuzz-unserializehash']
/src/php-src/ext/date/lib/interval.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_match_data.c [] []
/src/php-src/ext/lexbor/lexbor/core/mem.c [] []
/src/php-src/ext/spl/spl_fixedarray.c [] []
/src/php-src/ext/standard/file.c [] []
/src/php-src/ext/uri/uri_parser_whatwg.c [] []
/src/php-src/ext/uri/uriparser/src/UriSetHostIp6.c [] []
/src/php-src/Zend/zend_llist.h [] []
/src/php-src/Zend/Optimizer/zend_dfg.c [] []
/src/php-src/sapi/fuzzer/fuzzer-parser.c ['php-fuzz-parser'] ['php-fuzz-parser']
/src/php-src/ext/lexbor/lexbor/core/dtoa.c [] []
/src/php-src/Zend/zend_observer.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/standard/user_filters_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/node.c [] []
/src/php-src/Zend/zend_exceptions.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/Optimizer/zend_call_graph.c [] []
/src/php-src/ext/date/lib/tm2unixtime.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_convert.c [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/anb.c [] []
/src/php-src/ext/lexbor/lexbor/core/bst.c [] []
/src/php-src/Zend/zend_fibers.h [] []
/src/php-src/ext/spl/spl_iterators.c [] []
/src/php-src/Zend/Optimizer/dce.c [] []
/src/php-src/ext/opcache/zend_accelerator_hash.h [] []
/src/php-src/ext/lexbor/lexbor/dom/interface.c [] []
/src/php-src/ext/opcache/jit/zend_jit_ir.c [] []
/src/php-src/ext/standard/password_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/base_element.c [] []
/src/php-src/ext/lexbor/lexbor/unicode/unicode.h [] []
/src/php-src/Zend/zend_lazy_objects.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/standard/proc_open.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/source_element.c [] []
/src/php-src/ext/standard/soundex.c [] []
/src/php-src/ext/json/json_encoder.c [] []
/src/php-src/ext/json/json.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/window.c [] []
/src/php-src/ext/uri/uriparser/src/UriRecompose.c [] []
/src/php-src/main/strlcat.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/uri/uriparser/src/UriIp4Base.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_select.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/foreign_content.c [] []
/src/php-src/ext/uri/uriparser/src/UriSetHostAuto.c [] []
/src/php-src/ext/standard/metaphone.c [] []
/src/php-src/main/snprintf.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/spl/spl_array_arginfo.h [] []
/src/php-src/Zend/Optimizer/zend_dump.c [] []
/src/php-src/Zend/zend_hash.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/main/streams/streams.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/core/diyfp.h [] []
/src/php-src/ext/opcache/zend_accelerator_blacklist.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_find_bracket.c [] []
/src/php-src/ext/lexbor/lexbor/core/plog.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/processing_instruction.h [] []
/src/php-src/ext/standard/libavifinfo/avifinfo.c [] []
/src/php-src/Zend/zend_objects_API.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/dom/interfaces/attr.c [] []
/src/php-src/ext/uri/uriparser/src/UriShorten.c [] []
/src/php-src/ext/standard/microtime.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_after_body.c [] []
/src/php-src/ext/standard/crc32.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/style_element.c [] []
/src/php-src/ext/uri/uri_parser_php_parse_url.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_chkdint.c [] []
/src/php-src/main/main_arginfo.h [] []
/src/php-src/Zend/zend_enum.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/pcre/pcre2lib/pcre2_ord2utf.c [] []
/src/php-src/ext/standard/strnatcmp.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/canvas_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/iframe_element.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_script_run.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/data_element.c [] []
/src/php-src/Zend/zend_smart_string.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/date/lib/astro.c [] []
/src/php-src/Zend/zend_lazy_objects.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/tree/open_elements.h [] []
/src/php-src/Zend/zend_ini_parser.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_table.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/mod_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/meter_element.c [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/syntax.c [] []
/src/php-src/ext/lexbor/lexbor/css/css.c [] []
/src/php-src/ext/uri/uriparser/src/UriCopy.c [] []
/src/php-src/main/php_ticks.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_exceptions.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/ns/ns.c [] []
/src/php-src/ext/hash/sha3/generic64lc/KeccakP-1600-opt64.c [] []
/src/php-src/ext/json/json_scanner.c ['php-fuzz-json'] ['php-fuzz-json']
/src/php-src/ext/lexbor/lexbor/html/interfaces/element.c [] []
/src/php-src/Zend/zend_gc.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/standard/datetime.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_body.c [] []
/src/php-src/main/php_network.h [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer.c [] []
/src/php-src/ext/uri/uriparser/src/UriSetHostRegName.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_context.c [] []
/src/php-src/Zend/zend_language_parser.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_attributes_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/core/mraw.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_row_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/parser.h [] []
/src/php-src/main/streams/plain_wrapper.c [] []
/src/php-src/Zend/zend_call_stack.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/spl/spl_observer_arginfo.h [] []
/src/php-src/ext/standard/math.c [] []
/src/php-src/ext/hash/hash_adler32.c [] []
/src/php-src/ext/lexbor/lexbor/encoding/encoding.c [] []
/src/php-src/ext/standard/base64.h [] []
/src/php-src/Zend/zend_extensions.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_enum_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_frameset.c [] []
/src/php-src/ext/spl/spl_dllist.c [] []
/src/php-src/Zend/zend_sort.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/opcache/shared_alloc_shm.c [] []
/src/php-src/ext/standard/http_fopen_wrapper.c [] []
/src/php-src/Zend/Optimizer/block_pass.c [] []
/src/php-src/Zend/zend_constants.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/standard/crypt_sha512.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document_type.h [] []
/src/php-src/Zend/zend_objects_API.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/standard/crypt_sha256.c [] []
/src/php-src/ext/random/randomizer.c [] []
/src/php-src/Zend/zend_generators.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_execute_API.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_column_group.c [] []
/src/php-src/ext/reflection/php_reflection_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_after_frameset.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_valid_utf.c [] []
/src/php-src/ext/standard/syslog.c [] []
/src/php-src/Zend/zend_weakrefs_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/character_data.c [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state.c [] []
/src/php-src/Zend/Optimizer/escape_analysis.c [] []
/src/php-src/Zend/zend_language_scanner.l ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/main/php_ini_builder.h [] []
/src/php-src/ext/lexbor/lexbor/html/interface.c [] []
/src/php-src/ext/lexbor/lexbor/core/str.h [] []
/src/php-src/Zend/zend_objects.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/standard/levenshtein.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/link_element.c [] []
/src/php-src/ext/opcache/jit/ir/ir_gcm.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_xclass.c [] []
/src/php-src/Zend/zend_ini_scanner.l [] []
/src/php-src/Zend/Optimizer/compact_vars.c [] []
/src/php-src/Zend/zend_ast.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_string.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_builtin_functions_arginfo.h [] []
/src/php-src/ext/date/lib/dow.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_table_text.c [] []
/src/php-src/Zend/zend_iterators.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_head.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_row.c [] []
/src/php-src/main/php_ini_builder.c [] []
/src/php-src/ext/opcache/jit/ir/ir_dump.c [] []
/src/php-src/ext/standard/net.c [] []
/src/php-src/ext/opcache/zend_shared_alloc.h [] []
/src/php-src/Zend/Optimizer/nop_removal.c [] []
/src/php-src/Zend/zend_ini_parser.y [] []
/src/php-src/ext/uri/uriparser/src/UriQuery.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_config.c [] []
/src/php-src/ext/standard/http.c [] []
/src/php-src/ext/date/lib/parse_tz.c [] []
/src/php-src/ext/random/engine_pcgoneseq128xslrr64.c [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/state.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_error.c [] []
/src/php-src/ext/standard/var.c ['php-fuzz-exif', 'php-fuzz-unserializehash'] ['php-fuzz-exif', 'php-fuzz-unserializehash']
/src/php-src/ext/lexbor/lexbor/url/url.c [] []
/src/php-src/ext/standard/formatted_print.c [] []
/src/php-src/ext/lexbor/lexbor/css/selectors/state.c [] []
/src/php-src/ext/spl/spl_exceptions.c [] []
/src/php-src/ext/uri/uriparser/src/UriCompare.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_newline.c [] []
/src/php-src/ext/standard/image.c [] []
/src/php-src/ext/standard/quot_print.c [] []
/src/php-src/ext/opcache/zend_accelerator_api.c [] []
/src/php-src/Zend/zend_attributes.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/output_element.c [] []
/src/php-src/ext/standard/head.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/Optimizer/optimize_temp_vars_5.c [] []
/src/php-src/ext/lexbor/lexbor/core/shs.c [] []
/src/php-src/ext/hash/murmur/PMurHash.c [] []
/src/php-src/ext/uri/uriparser/src/UriSetHostCommon.c [] []
/src/php-src/ext/lexbor/lexbor/html/token.c [] []
/src/php-src/Zend/zend_interfaces.c [] []
/src/php-src/ext/opcache/zend_shared_alloc.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/element.h [] []
/src/php-src/ext/spl/spl_array.c [] []
/src/php-src/ext/hash/hash_sha3.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/frame_set_element.c [] []
/src/php-src/ext/lexbor/lexbor/css/selectors/selector.c [] []
/src/php-src/ext/lexbor/lexbor/html/interface_res.h [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/error.c [] []
/src/php-src/ext/lexbor/lexbor/ports/posix/lexbor/core/memory.c [] []
/src/php-src/ext/standard/streamsfuncs.c [] []
/src/php-src/ext/standard/url_scanner_ex.re [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/shadow_root.c [] []
/src/php-src/Zend/zend_hrtime.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/button_element.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/element.c [] []
/src/php-src/ext/hash/hash_sha_sse2.c [] []
/src/php-src/ext/lexbor/lexbor/core/hash.h [] []
/src/php-src/ext/lexbor/lexbor/core/array_obj.c [] []
/src/php-src/Zend/zend_signal.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/Optimizer/sccp.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_match.c [] []
/src/php-src/ext/lexbor/lexbor/core/print.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/html_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/paragraph_element.c [] []
/src/php-src/ext/opcache/jit/ir/ir_strtab.c [] []
/src/php-src/ext/lexbor/lexbor/tag/tag.h [] []
/src/php-src/ext/opcache/jit/zend_jit.c [] []
/src/php-src/Zend/zend_llist.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_virtual_cwd.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/video_element.c [] []
/src/php-src/ext/opcache/jit/ir/ir_sccp.c [] []
/src/php-src/ext/lexbor/lexbor/core/diyfp.c [] []
/src/php-src/Zend/zend_mmap.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/hash/hash_whirlpool.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_caption.c [] []
/src/php-src/Zend/zend_interfaces.h [] []
/src/php-src/ext/standard/versioning.c [] []
/src/php-src/Zend/zend_call_stack.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/li_element.c [] []
/src/php-src/ext/uri/uriparser/src/UriFile.c [] []
/src/php-src/Zend/zend_hrtime.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_misc.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/body_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/before_html.c [] []
/src/php-src/main/streams/memory.c ['php-fuzz-exif'] ['php-fuzz-exif']
/src/php-src/main/streams/mmap.c [] []
/src/php-src/Zend/Optimizer/compact_literals.c [] []
/src/php-src/ext/date/php_date_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_template.c [] []
/src/php-src/ext/uri/php_uri_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/template_element.c [] []
/src/php-src/Zend/zend_ast.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/opcache/jit/ir/ir_cfg.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_caption_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/open_elements.c [] []
/src/php-src/ext/hash/sha3/generic64lc/KeccakSponge.inc [] []
/src/php-src/ext/hash/hash_xxhash.c [] []
/src/php-src/Zend/Optimizer/pass1.c [] []
/src/php-src/ext/lexbor/lexbor/css/selectors/pseudo.c [] []
/src/php-src/ext/standard/file_arginfo.h [] []
/src/php-src/ext/standard/string.c [] []
/src/php-src/Zend/zend_opcode.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/sapi/fuzzer/fuzzer-function-jit.c ['php-fuzz-function-jit'] ['php-fuzz-function-jit']
/src/php-src/Zend/zend_compile.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer.h [] []
/src/php-src/ext/uri/uriparser/src/UriParse.c [] []
/src/php-src/Zend/zend_enum.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/opcache/ZendAccelerator.c [] []
/src/php-src/ext/uri/uriparser/src/UriSetFragment.c [] []
/src/php-src/Zend/zend_ini.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/uri/uriparser/src/UriVersion.c [] []
/src/php-src/ext/hash/hash_fnv.c [] []
/src/php-src/main/strlcpy.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-exif', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_vm_execute.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/hash/hash_tiger.c [] []
/src/php-src/ext/uri/php_uri.c [] []
/src/php-src/ext/lexbor/lexbor/core/strtod.c [] []
/src/php-src/ext/opcache/jit/ir/ir_x86.dasc [] []
/src/php-src/ext/uri/uri_parser_rfc3986.c [] []
/src/php-src/Zend/zend_compile.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/spl/spl_functions.c [] []
/src/php-src/ext/standard/dns.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_body.c [] []
/src/php-src/ext/hash/php_hash.h [] []
/src/php-src/Zend/zend_closures.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_cpuinfo.h [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_extuni.c [] []
/src/php-src/Zend/zend_operators.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/core/plog.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/frame_element.c [] []
/src/php-src/ext/uri/uriparser/src/UriNormalize.c [] []
/src/php-src/ext/lexbor/lexbor/html/token.h [] []
/src/php-src/ext/standard/fsock.c [] []
/src/php-src/ext/opcache/jit/ir/ir_patch.c [] []
/src/php-src/ext/hash/hash_ripemd.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/cdata_section.c [] []
/src/php-src/ext/lexbor/lexbor/core/serialize.c [] []
/src/php-src/ext/date/php_date.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/opt_group_element.c [] []
/src/php-src/main/fopen_wrappers.c [] []
/src/php-src/ext/hash/murmur/PMurHash128.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/font_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_table_body.c [] []
/src/php-src/main/php_odbc_utils.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree/active_formatting.h [] []
/src/php-src/main/streams/filter.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/label_element.c [] []
/src/php-src/ext/lexbor/lexbor/css/selectors/selectors.h [] []
/src/php-src/ext/uri/uriparser/src/UriParseBase.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_dfa_match.c [] []
/src/php-src/Zend/zend_ptr_stack.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/spl/php_spl.c [] []
/src/php-src/Zend/zend.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/tree.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/pre_element.c [] []
/src/php-src/ext/hash/hash_md.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/area_element.c [] []
/src/php-src/Zend/Optimizer/scdf.h [] []
/src/php-src/sapi/fuzzer/fuzzer-sapi.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/main/streams/glob_wrapper.c [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_rcdata.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document.h [] []
/src/php-src/Zend/zend_smart_str.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/legend_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_section_element.c [] []
/src/php-src/ext/standard/user_filters.c [] []
/src/php-src/Zend/zend_bitset.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/opcache/jit/ir/ir_check.c [] []
/src/php-src/ext/lexbor/lexbor/core/mem.h [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/field_set_element.c [] []
/src/php-src/ext/opcache/zend_accelerator_hash.c [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/token.h [] []
/src/php-src/Zend/zend_attributes.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_cell_element.c [] []
/src/php-src/Zend/zend_multibyte.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document_fragment.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_pattern_info.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/directory_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/parser.c [] []
/src/php-src/Zend/zend_arena.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/spl/spl_directory_arginfo.h [] []
/src/php-src/ext/standard/assert.c [] []
/src/php-src/ext/opcache/jit/ir/ir_save.c [] []
/src/php-src/Zend/zend_API.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/punycode/punycode.c [] []
/src/php-src/ext/uri/uriparser/src/UriResolve.c [] []
/src/php-src/sapi/fuzzer/fuzzer-exif.c ['php-fuzz-exif'] ['php-fuzz-exif']
/src/php-src/ext/opcache/shared_alloc_mmap.c [] []
/src/php-src/ext/uri/uriparser/src/UriNormalizeBase.c [] []
/src/php-src/ext/lexbor/lexbor/dom/interfaces/comment.c [] []
/src/php-src/main/streams/userspace.c [] []
/src/php-src/ext/lexbor/lexbor/html/tree.h [] []
/src/php-src/ext/standard/hrtime.c [] []
/src/php-src/ext/lexbor/lexbor/encoding/encode.c [] []
/src/php-src/ext/lexbor/php_lexbor.c [] []
/src/php-src/ext/date/lib/unixtime2tm.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_substitute.c [] []
/src/php-src/ext/standard/php_password.h [] []
/src/php-src/Zend/zend_API.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_highlight.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_serialize.c [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer.c [] []
/src/php-src/Zend/zend_language_parser.y ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/meta_element.c [] []
/src/php-src/ext/hash/hash_crc32.c [] []
/src/php-src/ext/lexbor/lexbor/core/array.c [] []
/src/php-src/ext/date/lib/parse_date.re [] []
/src/php-src/ext/standard/ftp_fopen_wrapper.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/marquee_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/picture_element.c [] []
/src/php-src/ext/opcache/zend_persist.c [] []
/src/php-src/main/php_glob.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_maketables.c [] []
/src/php-src/ext/lexbor/lexbor/css/parser.h [] []
/src/php-src/Zend/zend_system_id.c [] []
/src/php-src/ext/uri/php_uri_common.c [] []
/src/php-src/sapi/fuzzer/fuzzer-execute.c ['php-fuzz-execute'] ['php-fuzz-execute']
/src/php-src/Zend/zend_object_handlers.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_closures_arginfo.h [] []
/src/php-src/ext/lexbor/lexbor/core/str.c [] []
/src/php-src/ext/uri/uriparser/src/UriCommon.c [] []
/src/php-src/ext/hash/hash_snefru.c [] []
/src/php-src/Zend/zend_vm_opcodes.c [] []
/src/php-src/Zend/zend_execute.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/main/spprintf.c [] []
/src/php-src/Zend/zend_variables.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_weakrefs.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/standard/pageinfo.c [] []
/src/php-src/Zend/zend_builtin_functions.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/zend_inheritance.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/exif/exif.c [] []
/src/php-src/ext/standard/scanf.c [] []
/src/php-src/ext/lexbor/lexbor/tag/tag.c [] []
/src/php-src/ext/uri/uriparser/src/UriMemory.c [] []
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_doctype.c [] []
/src/php-src/Zend/Optimizer/zend_cfg.c [] []
/src/php-src/ext/lexbor/lexbor/html/encoding.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/br_element.c [] []
/src/php-src/ext/standard/dir_arginfo.h [] []
/src/php-src/ext/uri/uriparser/src/UriIp4.c [] []
/src/php-src/ext/lexbor/lexbor/core/shs.h [] []
/src/php-src/ext/lexbor/lexbor/html/tag.h [] []
/src/php-src/ext/lexbor/lexbor/css/syntax/token.c [] []
/src/php-src/main/network.c [] []
/src/php-src/ext/json/json_parser.tab.c ['php-fuzz-json'] ['php-fuzz-json']
/src/php-src/ext/lexbor/lexbor/core/avl.c [] []
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_compile.c [] []
/src/php-src/ext/lexbor/lexbor/core/swar.h [] []
/src/php-src/Zend/Optimizer/zend_optimizer.c ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/span_element.c [] []
/src/php-src/ext/lexbor/lexbor/html/interfaces/track_element.c [] []
/src/php-src/Zend/zend_execute.h ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit'] ['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit']
/src/php-src/Zend/Optimizer/dfa_pass.c [] []
/src/php-src/main/php_syslog.c [] []
/src/php-src/ext/lexbor/lexbor/core/dobject.h [] []

Directories in report

Directory
/src/php-src/Zend/
/src/php-src/ext/lexbor/lexbor/ports/posix/lexbor/core/
/src/php-src/ext/date/lib/
/src/php-src/ext/opcache/jit/
/src/php-src/ext/uri/uriparser/src/
/src/php-src/ext/spl/
/src/php-src/ext/reflection/
/src/php-src/ext/date/
/src/php-src/ext/standard/
/src/php-src/ext/random/
/src/php-src/ext/opcache/jit/ir/
/src/php-src/ext/pcre/pcre2lib/
/src/php-src/ext/hash/murmur/
/src/php-src/ext/lexbor/lexbor/punycode/
/src/php-src/ext/hash/xxhash/
/src/php-src/ext/lexbor/lexbor/url/
/src/php-src/ext/hash/
/src/php-src/ext/hash/sha3/generic64lc/
/src/php-src/ext/lexbor/lexbor/encoding/
/src/php-src/ext/lexbor/lexbor/html/tree/
/src/php-src/ext/lexbor/lexbor/css/syntax/
/src/php-src/ext/lexbor/
/src/php-src/ext/lexbor/lexbor/dom/interfaces/
/src/php-src/main/
/src/php-src/ext/lexbor/lexbor/html/
/src/php-src/ext/lexbor/lexbor/css/
/src/php-src/ext/exif/
/src/php-src/ext/lexbor/lexbor/unicode/
/src/php-src/ext/lexbor/lexbor/ns/
/src/php-src/ext/pcre/
/src/php-src/ext/standard/libavifinfo/
/src/php-src/sapi/fuzzer/
/src/php-src/ext/lexbor/lexbor/css/selectors/
/src/php-src/ext/lexbor/lexbor/dom/
/src/php-src/ext/uri/
/src/php-src/ext/lexbor/lexbor/tag/
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/
/src/php-src/ext/opcache/
/src/php-src/ext/lexbor/lexbor/core/
/src/php-src/ext/opcache/jit/ir/dynasm/
/src/php-src/main/streams/
/src/php-src/ext/lexbor/lexbor/html/interfaces/
/src/php-src/ext/lexbor/lexbor/html/tokenizer/
/src/php-src/ext/json/
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer/
/src/php-src/Zend/Optimizer/