High level conclusions

Fuzzer php-fuzz-json is blocked:

The runtime code coverage of php-fuzz-json covers 21.94% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer php-fuzz-exif is blocked:

The runtime code coverage of php-fuzz-exif covers 25.22% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 11.78% of cyclomatic complexity.

Fuzzers reach 11.80% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

1640 / 13892

Cyclomatic complexity statically reachable by fuzzers

15884 / 134762

Runtime code coverage of functions

4309 / 13892

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: php-fuzz-exif

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	7954	89.9%
gold	[1:9]	35	0.39%
yellow	[10:29]	49	0.55%
greenyellow	[30:49]	35	0.39%
lawngreen	50+	769	8.69%
All colors	8842	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1041	4100	smart_str_appendc_ex	call site: 04100	zend_ast_export_str
624	7085	zend_string_delref	call site: 07085	zend_hash_update
519	6195	zend_hash_add_constant	call site: 06195	zend_error
387	3712	zend_declare_typed_property	call site: 03712	zend_compile_property_hooks
382	2232	zend_hash_release	call site: 02232	zend_array_destroy
288	1941	zend_ast_get_zval	call site: 01941	zend_ast_create_2
269	6814	zend_check_magic_method_implementation	call site: 06814	zend_hash_add_ptr
201	843	is_numeric_string_ex	call site: 00843	zend_strtod
165	5300	zend_hash_add_mem	call site: 05300	zend_error_noreturn
158	1666	zend_observer_error_notify	call site: 01666	zend_call_known_instance_method_with_0_params
157	31	zend_string_realloc	call site: 00031	zend_mm_realloc_heap
147	5754	zend_hash_index_add_new_ptr	call site: 05754	_emalloc

Runtime coverage analysis

Covered functions

1158

Functions that are reachable but not covered

1171

Reachable functions

1566

Percentage of reachable functions covered

25.22%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-exif.c	1
sapi/fuzzer/fuzzer-sapi.c	3
main/main.c	13
Zend/zend_string.c	11
Zend/zend_hash.c	76
Zend/zend_types.h	13
Zend/zend.c	34
Zend/zend_compile.c	352
Zend/zend_execute_API.c	41
Zend/zend_smart_str.h	15
Zend/zend_string.h	20
Zend/zend_alloc.c	72
Zend/zend_bitset.h	1
Zend/zend_gc.c	16
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	2
Zend/zend_exceptions.c	13
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	64
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	29
Zend/zend_API.h	9
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	7
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	22
Zend/zend_inheritance.c	65
Zend/zend_execute.c	72
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	4
Zend/zend_compile.h	4
Zend/zend_multiply.h	3
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	13
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	25
Zend/zend_llist.c	6
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	13
Zend/zend_smart_str.c	3
Zend/zend_enum.c	4
Zend/zend_vm_execute.h	3
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	14
Zend/zend_stream.c	3
Zend/zend_float.c	2
Zend/zend_fibers.c	3
Zend/zend_weakrefs.c	2
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
Zend/zend_ini.c	8
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	2
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	7
main/streams/filter.c	5
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
main/streams/memory.c	2
ext/standard/var.c	4
ext/standard/basic_functions.c	3
main/rfc1867.c	1

Fuzzer: php-fuzz-json

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	7934	90.5%
gold	[1:9]	38	0.43%
yellow	[10:29]	52	0.59%
greenyellow	[30:49]	35	0.39%
lawngreen	50+	702	8.01%
All colors	8761	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1429	3712	zend_declare_typed_property	call site: 03712	zend_compile_property_hooks
640	7085	zend_string_delref	call site: 07085	zend_hash_update
519	6195	zend_hash_add_constant	call site: 06195	zend_error
382	2232	zend_hash_release	call site: 02232	zend_array_destroy
288	1941	zend_ast_get_zval	call site: 01941	zend_ast_create_2
269	6814	zend_check_magic_method_implementation	call site: 06814	zend_hash_add_ptr
165	5300	zend_hash_add_mem	call site: 05300	zend_error_noreturn
163	27	__zend_realloc	call site: 00027	_erealloc
161	5740	perform_delayable_implementation_check	call site: 05740	add_compatibility_obligation
160	1664	zval_get_long_func	call site: 01664	zend_call_known_instance_method_with_0_params
157	1459	zend_arena_create	call site: 01459	zendparse
145	2753	zend_hash_str_find_ptr_lc	call site: 02753	zend_concat_names

Runtime coverage analysis

Covered functions

1004

Functions that are reachable but not covered

1206

Reachable functions

1545

Percentage of reachable functions covered

21.94%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-json.c	1
sapi/fuzzer/fuzzer-sapi.c	2
main/main.c	11
Zend/zend_string.c	11
Zend/zend_hash.c	74
Zend/zend_types.h	13
Zend/zend.c	34
Zend/zend_compile.c	352
Zend/zend_execute_API.c	41
Zend/zend_smart_str.h	15
Zend/zend_string.h	20
Zend/zend_alloc.c	72
Zend/zend_bitset.h	1
Zend/zend_gc.c	16
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	1
Zend/zend_exceptions.c	13
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	64
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	28
Zend/zend_API.h	9
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	5
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	20
Zend/zend_inheritance.c	65
Zend/zend_execute.c	72
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	4
Zend/zend_compile.h	4
Zend/zend_multiply.h	3
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	13
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	25
Zend/zend_llist.c	6
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	12
Zend/zend_smart_str.c	3
Zend/zend_enum.c	4
Zend/zend_vm_execute.h	3
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	9
Zend/zend_stream.c	3
Zend/zend_float.c	2
Zend/zend_fibers.c	3
Zend/zend_weakrefs.c	2
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
Zend/zend_ini.c	8
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	2
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
ext/json/json_parser.tab.c	6
ext/json/json_scanner.c	6
ext/standard/basic_functions.c	3
main/rfc1867.c	1

Fuzzer: php-fuzz-unserializehash

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	7950	84.4%
gold	[1:9]	77	0.81%
yellow	[10:29]	87	0.92%
greenyellow	[30:49]	38	0.40%
lawngreen	50+	1258	13.3%
All colors	9410	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1041	4101	smart_str_appendc_ex	call site: 04101	zend_ast_export_str
519	6196	zend_hash_add_constant	call site: 06196	zend_error
317	7273	zend_hash_index_lookup	call site: 07273	zend_undefined_index
288	1942	zend_ast_get_zval	call site: 01942	zend_ast_create_2
277	3823	zend_hash_index_update_ptr	call site: 03823	zend_compile_var
269	6815	zend_check_magic_method_implementation	call site: 06815	zend_hash_add_ptr
214	2401	__zval_get_string_func	call site: 02401	zval_try_get_string_func
165	5301	zend_hash_add_mem	call site: 05301	zend_error_noreturn
157	32	zend_string_realloc	call site: 00032	zend_mm_realloc_heap
146	2233	zend_hash_release	call site: 02233	zend_array_destroy
144	6016	zend_build_properties_info_table	call site: 06016	zend_verify_abstract_class
134	2754	zend_hash_str_find_ptr_lc	call site: 02754	zend_concat_names

Runtime coverage analysis

Covered functions

1571

Functions that are reachable but not covered

1109

Reachable functions

1647

Percentage of reachable functions covered

32.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-unserializehash.c	1
sapi/fuzzer/fuzzer-sapi.c	5
main/main.c	13
Zend/zend_string.c	11
Zend/zend_hash.c	78
Zend/zend_types.h	13
Zend/zend.c	35
Zend/zend_compile.c	352
Zend/zend_execute_API.c	41
Zend/zend_smart_str.h	15
Zend/zend_string.h	21
Zend/zend_alloc.c	72
Zend/zend_bitset.h	1
Zend/zend_gc.c	43
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	5
Zend/zend_exceptions.c	13
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	64
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	28
Zend/zend_API.h	10
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	7
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	22
Zend/zend_inheritance.c	65
Zend/zend_execute.c	77
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	4
Zend/zend_compile.h	4
Zend/zend_multiply.h	3
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	16
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	25
Zend/zend_llist.c	6
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	13
Zend/zend_smart_str.c	3
Zend/zend_enum.c	4
Zend/zend_vm_execute.h	3
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	10
Zend/zend_stream.c	3
Zend/zend_float.c	2
Zend/zend_fibers.c	20
Zend/zend_weakrefs.c	6
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
Zend/zend_ini.c	11
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	2
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
ext/standard/var_unserializer.re	21
ext/standard/incomplete_class.c	1
ext/standard/var.c	4
Zend/zend_weakrefs.h	2
ext/standard/basic_functions.c	3
main/rfc1867.c	1

Fuzzer: php-fuzz-unserialize

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	7895	84.8%
gold	[1:9]	65	0.69%
yellow	[10:29]	80	0.85%
greenyellow	[30:49]	44	0.47%
lawngreen	50+	1224	13.1%
All colors	9308	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1041	4100	smart_str_appendc_ex	call site: 04100	zend_ast_export_str
519	6195	zend_hash_add_constant	call site: 06195	zend_error
317	7272	zend_hash_index_lookup	call site: 07272	zend_undefined_index
288	1941	zend_ast_get_zval	call site: 01941	zend_ast_create_2
277	3822	zend_hash_index_update_ptr	call site: 03822	zend_compile_var
269	6814	zend_check_magic_method_implementation	call site: 06814	zend_hash_add_ptr
214	2400	__zval_get_string_func	call site: 02400	zval_try_get_string_func
165	5300	zend_hash_add_mem	call site: 05300	zend_error_noreturn
157	31	zend_string_realloc	call site: 00031	zend_mm_realloc_heap
146	2232	zend_hash_release	call site: 02232	zend_array_destroy
144	6015	zend_build_properties_info_table	call site: 06015	zend_verify_abstract_class
134	2753	zend_hash_str_find_ptr_lc	call site: 02753	zend_concat_names

Runtime coverage analysis

Covered functions

1412

Functions that are reachable but not covered

1112

Reachable functions

1634

Percentage of reachable functions covered

31.95%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-unserialize.c	1
sapi/fuzzer/fuzzer-sapi.c	4
main/main.c	11
Zend/zend_string.c	11
Zend/zend_hash.c	76
Zend/zend_types.h	13
Zend/zend.c	35
Zend/zend_compile.c	352
Zend/zend_execute_API.c	41
Zend/zend_smart_str.h	15
Zend/zend_string.h	21
Zend/zend_alloc.c	72
Zend/zend_bitset.h	1
Zend/zend_gc.c	43
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	4
Zend/zend_exceptions.c	13
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	64
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	28
Zend/zend_API.h	10
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	7
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	20
Zend/zend_inheritance.c	65
Zend/zend_execute.c	77
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	4
Zend/zend_compile.h	4
Zend/zend_multiply.h	3
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	16
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	25
Zend/zend_llist.c	6
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	13
Zend/zend_smart_str.c	3
Zend/zend_enum.c	4
Zend/zend_vm_execute.h	3
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	9
Zend/zend_stream.c	3
Zend/zend_float.c	2
Zend/zend_fibers.c	20
Zend/zend_weakrefs.c	6
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
Zend/zend_ini.c	11
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	2
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
ext/standard/var_unserializer.re	21
ext/standard/incomplete_class.c	1
Zend/zend_weakrefs.h	2
ext/standard/basic_functions.c	3
main/rfc1867.c	1

Fuzzer: php-fuzz-parser

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3983	43.4%
gold	[1:9]	346	3.77%
yellow	[10:29]	133	1.45%
greenyellow	[30:49]	68	0.74%
lawngreen	50+	4633	50.5%
All colors	9163	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
366	7223	zend_dval_to_lval_safe	call site: 07223	zend_incompatible_double_to_long_error
155	6929	zend_file_context_end	call site: 06929	zend_ast_destroy
129	7900	zend_llist_add_element	call site: 07900	php_output_start_user
119	7591	zend_fetch_debug_backtrace	call site: 07591	_zend_new_array
92	97	_zend_bailout	call site: 00097	zend_mm_safe_error
91	1526	zend_exception_set_previous	call site: 01526	zend_user_exception_handler
89	8606	zend_gc_collect_cycles	call site: 08606	gc_call_destructors_in_fiber
75	2964	zend_object_dtor_property	call site: 02964	zend_throw_error
74	1336	zend_array_destroy	call site: 01336	_emalloc
67	2262	zend_ast_destroy	call site: 02262	zend_modifier_token_to_flag
65	8317	zend_hash_str_del	call site: 08317	php_error_docref
56	32	zend_string_realloc	call site: 00032	zend_mm_realloc_heap

Runtime coverage analysis

Covered functions

1785

Functions that are reachable but not covered

581

Reachable functions

1625

Percentage of reachable functions covered

64.25%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-parser.c	1
sapi/fuzzer/fuzzer-sapi.c	4
main/main.c	11
Zend/zend_string.c	11
Zend/zend_hash.c	78
Zend/zend_types.h	13
Zend/zend.c	35
Zend/zend_compile.c	352
Zend/zend_execute_API.c	43
Zend/zend_smart_str.h	15
Zend/zend_string.h	21
Zend/zend_alloc.c	72
Zend/zend_bitset.h	1
Zend/zend_gc.c	43
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	4
Zend/zend_exceptions.c	13
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	64
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	34
Zend/zend_API.h	9
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	5
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	20
Zend/zend_inheritance.c	65
Zend/zend_execute.c	73
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	4
Zend/zend_compile.h	4
Zend/zend_multiply.h	3
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	16
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	26
Zend/zend_llist.c	7
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	12
Zend/zend_smart_str.c	3
Zend/zend_enum.c	4
Zend/zend_vm_execute.h	4
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	9
Zend/zend_stream.c	6
Zend/zend_float.c	2
Zend/zend_fibers.c	20
Zend/zend_weakrefs.c	6
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
Zend/zend_ini.c	11
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	7
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
Zend/zend_weakrefs.h	2
ext/standard/basic_functions.c	3
main/rfc1867.c	1

Fuzzer: php-fuzz-function-jit

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6538	71.2%
gold	[1:9]	562	6.12%
yellow	[10:29]	355	3.86%
greenyellow	[30:49]	202	2.20%
lawngreen	50+	1519	16.5%
All colors	9176	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
236	4328	zend_ast_export_ex	call site: 04328	smart_str_append
92	93	_zend_bailout	call site: 00093	zend_mm_safe_error
92	6062	zend_compile_class_decl	call site: 06062	zend_add_literal
91	7295	zval_undefined_cv	call site: 07295	zend_array_destroy
89	8608	zend_gc_collect_cycles	call site: 08608	gc_call_destructors_in_fiber
88	5587	zend_is_class_subtype_of_type	call site: 05587	register_unresolved_classes
86	6623	zend_compile_expr_inner	call site: 06623	zend_compile_throw
83	7946	get_next_char	call site: 07946	php_output_handler_start
79	2528	zend_ast_list_rtrim	call site: 02528	zend_ast_list_add
77	7406	zend_ast_evaluate_inner	call site: 07406	zend_ast_evaluate_ex
75	2959	zend_object_dtor_property	call site: 02959	zend_throw_error
67	2257	zend_ast_destroy	call site: 02257	zend_modifier_token_to_flag

Runtime coverage analysis

Covered functions

2345

Functions that are reachable but not covered

742

Reachable functions

1626

Percentage of reachable functions covered

54.37%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-function-jit.c	1
Zend/zend_string.h	21
Zend/zend_alloc.c	72
Zend/zend.c	35
Zend/zend_compile.c	352
Zend/zend_execute_API.c	43
Zend/zend_smart_str.h	15
Zend/zend_types.h	13
Zend/zend_bitset.h	1
Zend/zend_gc.c	43
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	4
Zend/zend_exceptions.c	13
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	64
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	34
Zend/zend_hash.c	78
Zend/zend_API.h	9
Zend/zend_string.c	11
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	5
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	20
Zend/zend_inheritance.c	65
Zend/zend_execute.c	73
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	4
Zend/zend_compile.h	4
Zend/zend_multiply.h	3
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	16
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	26
Zend/zend_llist.c	7
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	12
Zend/zend_smart_str.c	3
Zend/zend_enum.c	4
Zend/zend_vm_execute.h	4
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
Zend/zend_ini.c	11
sapi/fuzzer/fuzzer-sapi.c	4
main/main.c	11
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	9
Zend/zend_stream.c	6
Zend/zend_float.c	2
Zend/zend_fibers.c	20
Zend/zend_weakrefs.c	6
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	7
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
Zend/zend_weakrefs.h	2
ext/standard/basic_functions.c	3
main/rfc1867.c	1
sapi/fuzzer/fuzzer-execute-common.h	1

Fuzzer: php-fuzz-tracing-jit

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6716	73.1%
gold	[1:9]	158	1.72%
yellow	[10:29]	313	3.41%
greenyellow	[30:49]	191	2.08%
lawngreen	50+	1799	19.6%
All colors	9177	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
505	4119	smart_str_append_ex	call site: 04119	smart_str_appendc
108	6046	zend_compile_class_decl	call site: 06046	zend_build_properties_info_table
92	93	_zend_bailout	call site: 00093	zend_mm_safe_error
89	7394	zend_fetch_dimension_address_read	call site: 07394	zend_ast_evaluate_ex
89	8608	zend_gc_collect_cycles	call site: 08608	gc_call_destructors_in_fiber
87	5799	zval_get_tmp_string	call site: 05799	zval_get_string_func
82	6985	zend_get_constant_str_impl	call site: 06985	zend_get_constant_ptr
79	2528	zend_ast_list_rtrim	call site: 02528	zend_ast_list_add
78	5625	zend_zval_type_name	call site: 05625	zend_error_noreturn
75	2959	zend_object_dtor_property	call site: 02959	zend_throw_error
74	3708	zend_declare_typed_property	call site: 03708	zend_compile_property_hooks
72	8972	shutdown_executor	call site: 08972	i_zval_ptr_dtor

Runtime coverage analysis

Covered functions

2417

Functions that are reachable but not covered

777

Reachable functions

1626

Percentage of reachable functions covered

52.21%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-tracing-jit.c	1
Zend/zend_string.h	21
Zend/zend_alloc.c	72
Zend/zend.c	35
Zend/zend_compile.c	352
Zend/zend_execute_API.c	43
Zend/zend_smart_str.h	15
Zend/zend_types.h	13
Zend/zend_bitset.h	1
Zend/zend_gc.c	43
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	4
Zend/zend_exceptions.c	13
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	64
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	34
Zend/zend_hash.c	78
Zend/zend_API.h	9
Zend/zend_string.c	11
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	5
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	20
Zend/zend_inheritance.c	65
Zend/zend_execute.c	73
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	4
Zend/zend_compile.h	4
Zend/zend_multiply.h	3
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	16
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	26
Zend/zend_llist.c	7
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	12
Zend/zend_smart_str.c	3
Zend/zend_enum.c	4
Zend/zend_vm_execute.h	4
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
Zend/zend_ini.c	11
sapi/fuzzer/fuzzer-sapi.c	4
main/main.c	11
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	9
Zend/zend_stream.c	6
Zend/zend_float.c	2
Zend/zend_fibers.c	20
Zend/zend_weakrefs.c	6
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	7
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
Zend/zend_weakrefs.h	2
ext/standard/basic_functions.c	3
main/rfc1867.c	1
sapi/fuzzer/fuzzer-execute-common.h	1

Fuzzer: php-fuzz-execute

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4326	47.2%
gold	[1:9]	920	10.0%
yellow	[10:29]	446	4.86%
greenyellow	[30:49]	172	1.87%
lawngreen	50+	3299	36.0%
All colors	9163	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
85	104	zend_mmap_set_name	call site: 00104	zend_mm_safe_error
67	2262	zend_ast_destroy	call site: 02262	zend_modifier_token_to_flag
56	32	zend_string_realloc	call site: 00032	zend_mm_realloc_heap
56	8226	zend_mm_shutdown	call site: 08226	php_output_shutdown
51	6631	zend_compile_throw	call site: 06631	zend_compile_match
46	5365	zend_compile_if	call site: 05365	zend_compile_switch
45	8171	virtual_cwd_deactivate	call site: 08171	zend_unregister_ini_entries_ex
44	2164	zend_ast_arg_list_add	call site: 02164	zend_ast_create_arg_list_0
37	7086	zend_string_delref	call site: 07086	zend_hash_update
36	7048	zend_ast_evaluate_inner	call site: 07048	zend_ast_evaluate_ex
35	7605	zend_hash_next_index_insert_new	call site: 07605	_zend_new_array
33	5855	zend_can_early_bind	call site: 05855	class_constant_types_compatible

Runtime coverage analysis

Covered functions

3186

Functions that are reachable but not covered

403

Reachable functions

1625

Percentage of reachable functions covered

75.2%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-execute.c	1
sapi/fuzzer/fuzzer-sapi.c	4
main/main.c	11
Zend/zend_string.c	11
Zend/zend_hash.c	78
Zend/zend_types.h	13
Zend/zend.c	35
Zend/zend_compile.c	352
Zend/zend_execute_API.c	43
Zend/zend_smart_str.h	15
Zend/zend_string.h	21
Zend/zend_alloc.c	72
Zend/zend_bitset.h	1
Zend/zend_gc.c	43
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	4
Zend/zend_exceptions.c	13
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	64
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	34
Zend/zend_API.h	9
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	5
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	20
Zend/zend_inheritance.c	65
Zend/zend_execute.c	73
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	4
Zend/zend_compile.h	4
Zend/zend_multiply.h	3
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	16
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	26
Zend/zend_llist.c	7
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	12
Zend/zend_smart_str.c	3
Zend/zend_enum.c	4
Zend/zend_vm_execute.h	4
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	9
Zend/zend_stream.c	6
Zend/zend_float.c	2
Zend/zend_fibers.c	20
Zend/zend_weakrefs.c	6
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
Zend/zend_ini.c	11
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	7
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
Zend/zend_weakrefs.h	2
ext/standard/basic_functions.c	3
main/rfc1867.c	1

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
zif_opcache_compile_file	/src/php-src/ext/opcache/zend_accelerator_module.c	2	['N/A', 'N/A']	163	0	150	32	7	2852	0	44131	31208

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

3140 / 13892

Cyclomatic complexity statically reachable by fuzzers

47038 / 134762

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

sapi/fuzzer/fuzzer-exif.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['smart_str_appendc_ex', 'zend_string_delref', 'zend_hash_add_constant', 'zend_declare_typed_property', 'zend_hash_release', 'zend_ast_get_zval', 'zend_check_magic_method_implementation', 'is_numeric_string_ex', 'zend_hash_add_mem', 'zend_observer_error_notify']

sapi/fuzzer/fuzzer-json.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_declare_typed_property', 'zend_string_delref', 'zend_hash_add_constant', 'zend_hash_release', 'zend_ast_get_zval', 'zend_check_magic_method_implementation', 'zend_hash_add_mem', '__zend_realloc', 'perform_delayable_implementation_check', 'zval_get_long_func']

sapi/fuzzer/fuzzer-unserializehash.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['smart_str_appendc_ex', 'zend_hash_add_constant', 'zend_hash_index_lookup', 'zend_ast_get_zval', 'zend_hash_index_update_ptr', 'zend_check_magic_method_implementation', '__zval_get_string_func', 'zend_hash_add_mem', 'zend_string_realloc', 'zend_hash_release']

sapi/fuzzer/fuzzer-unserialize.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['smart_str_appendc_ex', 'zend_hash_add_constant', 'zend_hash_index_lookup', 'zend_ast_get_zval', 'zend_hash_index_update_ptr', 'zend_check_magic_method_implementation', '__zval_get_string_func', 'zend_hash_add_mem', 'zend_string_realloc', 'zend_hash_release']

sapi/fuzzer/fuzzer-parser.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_dval_to_lval_safe', 'zend_file_context_end', 'zend_llist_add_element', 'zend_fetch_debug_backtrace', '_zend_bailout', 'zend_exception_set_previous', 'zend_gc_collect_cycles', 'zend_object_dtor_property', 'zend_array_destroy', 'zend_ast_destroy']

sapi/fuzzer/fuzzer-function-jit.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_ast_export_ex', '_zend_bailout', 'zend_compile_class_decl', 'zval_undefined_cv', 'zend_gc_collect_cycles', 'zend_is_class_subtype_of_type', 'zend_compile_expr_inner', 'get_next_char', 'zend_ast_list_rtrim', 'zend_ast_evaluate_inner']

sapi/fuzzer/fuzzer-tracing-jit.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['smart_str_append_ex', 'zend_compile_class_decl', '_zend_bailout', 'zend_fetch_dimension_address_read', 'zend_gc_collect_cycles', 'zval_get_tmp_string', 'zend_get_constant_str_impl', 'zend_ast_list_rtrim', 'zend_zval_type_name', 'zend_object_dtor_property']

sapi/fuzzer/fuzzer-execute.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_mmap_set_name', 'zend_ast_destroy', 'zend_string_realloc', 'zend_mm_shutdown', 'zend_compile_throw', 'zend_compile_if', 'virtual_cwd_deactivate', 'zend_ast_arg_list_add', 'zend_string_delref', 'zend_ast_evaluate_inner']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
zend_error_zstr_at	146	57	39.04%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_mm_shutdown	108	21	19.44%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_call_stack_init	34	12	35.29%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_hash_rehash	93	48	51.61%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_hash_clean	71	25	35.21%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
track_class_dependency	32	6	18.75%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
exif_scan_thumbnail	70	8	11.42%	['php-fuzz-exif']
zm_activate_zend_accelerator	113	35	30.97%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
accel_post_startup	159	65	40.88%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
accel_finish_startup	66	5	7.575%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_jit_config	52	13	25.0%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_shared_alloc_startup	88	46	52.27%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
php_pcre2_config	100	20	20.0%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
php_image_type_to_mime_type	47	11	23.40%	['php-fuzz-exif']
sapi_deactivate_module	35	11	31.42%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
sapi_header_op	156	78	50.0%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
OnUpdateBaseDir	50	9	18.0%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
php_verror	143	40	27.97%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
php_error_cb	159	78	49.05%	['php-fuzz-exif', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
php_binary_init	35	6	17.14%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
OnSetFacility	125	38	30.4%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
php_init_config	193	73	37.82%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
php_ini_parser_cb	92	20	21.73%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
php_build_argv	46	6	13.04%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
format_converter	446	153	34.30%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
xbuf_format_converter	445	237	53.25%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
php_stream_memory_seek	59	25	42.37%	['php-fuzz-exif', 'php-fuzz-execute']
_php_stream_free	101	53	52.47%	['php-fuzz-exif', 'php-fuzz-execute']
_php_stream_read	62	26	41.93%	['php-fuzz-exif', 'php-fuzz-execute']
_php_stream_seek	77	20	25.97%	['php-fuzz-exif', 'php-fuzz-execute']
zend_get_type_by_const	33	18	54.54%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_parse_arg_impl	234	100	42.73%	['php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_check_type_slow	47	23	48.93%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_check_and_resolve_property_or_class_constant_class_type	34	8	23.52%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_std_read_property	211	94	44.54%	['php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
_convert_to_string	54	28	51.85%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
timelib_parse_posix_str	55	28	50.90%	['php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
read_64bit_types	73	27	36.98%	['php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
php_date_initialize_from_hash	46	10	21.73%	['php-fuzz-unserialize', 'php-fuzz-unserializehash']
php_date_period_initialize_from_hash	98	7	7.142%	['php-fuzz-unserialize', 'php-fuzz-unserializehash']
SHA256Transform	39	5	12.82%	['php-fuzz-unserializehash']
XXH32_finalize	63	24	38.09%	['php-fuzz-unserializehash']
spl_perform_autoload	36	4	11.11%	['php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-unserializehash']
spl_dual_it_free_storage	33	15	45.45%	['php-fuzz-unserialize', 'php-fuzz-function-jit', 'php-fuzz-unserializehash']
spl_object_storage_attach	37	4	10.81%	['php-fuzz-unserialize', 'php-fuzz-unserializehash']
spl_object_storage_new_ex	39	18	46.15%	['php-fuzz-unserialize', 'php-fuzz-unserializehash']
zend_std_unset_property	108	29	26.85%	['php-fuzz-unserialize', 'php-fuzz-execute']
spl_array_object_new_ex	69	24	34.78%	['php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit']
zim_SplPriorityQueue___unserialize	35	10	28.57%	['php-fuzz-unserialize']
zim_SplHeap___unserialize	35	16	45.71%	['php-fuzz-unserialize']
spl_heap_object_new_ex	49	25	51.02%	['php-fuzz-unserialize']
uri_unserialize	43	16	37.20%	['php-fuzz-unserialize']
zend_ast_export_zval	55	17	30.90%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_hash_copy	37	18	48.64%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_hash_merge	79	41	51.89%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_array_dup_elements	47	25	53.19%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_try_early_bind	97	46	47.42%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
destroy_zend_class	207	99	47.82%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
convert_to_double	52	9	17.30%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
convert_to_array	39	18	46.15%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_stream_fixup	71	7	9.859%	['php-fuzz-execute', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_get_file_handle_timestamp	68	15	22.05%	['php-fuzz-execute', 'php-fuzz-parser']
persistent_compile_file	206	107	51.94%	['php-fuzz-execute', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
opcache_compile_file	101	52	51.48%	['php-fuzz-execute', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
php_register_variable_ex	179	97	54.18%	['php-fuzz-execute', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_optimize_block	711	386	54.28%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_jmp_optimization	172	94	54.65%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_dfa_optimize_calls	67	14	20.89%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_dfa_optimize_op_array	487	240	49.28%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_ssa_replace_control_link	68	34	50.0%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
is_escape_use	95	36	37.89%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_optimize_func_calls	186	92	49.46%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_try_inline_call	43	8	18.60%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_optimizer_pass1	279	109	39.06%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
sccp_optimize_op_array	36	17	47.22%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
sccp_visit_instr	781	265	33.93%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ct_eval_add_array_elem	46	17	36.95%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
sccp_mark_feasible_successors	111	48	43.24%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ssa_verify_integrity	286	155	54.19%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_mark_reachable_blocks	106	42	39.62%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_get_func_info	49	25	51.02%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_may_throw_ex	393	171	43.51%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_inference_calc_binary_op_range	258	136	52.71%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
_zend_update_type_info	1483	767	51.71%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_inference_calc_range	145	72	49.65%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
can_convert_to_double	103	26	25.24%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_optimizer_update_op1_const	151	16	10.59%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_optimizer_update_op2_const	170	35	20.58%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_fetch_class_const_info	48	15	31.25%	['php-fuzz-function-jit']
zend_optimizer_get_called_func	105	43	40.95%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_optimize	73	33	45.20%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
_zend_ssa_rename_op	236	120	50.84%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
place_essa_pis	274	145	52.91%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_update_class_constants	120	63	52.5%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_ast_evaluate_inner	582	163	28.00%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_fe_reset_iterator	34	17	50.0%	['php-fuzz-execute', 'php-fuzz-function-jit']
zend_do_link_class	266	134	50.37%	['php-fuzz-execute', 'php-fuzz-function-jit']
zend_std_get_method	55	29	52.72%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_objects_destroy_object	61	29	47.54%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
increment_function	78	31	39.74%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
tsrm_realpath_r	156	74	47.43%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_vm_set_opcode_handler_ex	278	138	49.64%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SUB_SPEC_CONST_CONST_HANDLER	33	10	30.30%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_EQUAL_SPEC_TMPVAR_CONST_JMPZ_HANDLER	54	18	33.33%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_CV_HANDLER	54	12	22.22%	['php-fuzz-function-jit']
ZEND_CAST_SPEC_VAR_HANDLER	41	17	41.46%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FAST_CONCAT_SPEC_TMPVAR_CONST_HANDLER	116	53	45.68%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_RETURN_SPEC_CONST_HANDLER	69	19	27.53%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_leave_helper_SPEC	111	36	32.43%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_UNUSED_HANDLER	101	16	15.84%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FE_RESET_R_SPEC_CV_HANDLER	61	30	49.18%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_fe_fetch_object_helper_SPEC	105	45	42.85%	['php-fuzz-execute', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_R_SPEC_CV_CONST_INLINE_HANDLER	140	44	31.42%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SEND_VAR_SPEC_VAR_UNUSED_HANDLER	40	18	45.0%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SEND_VAR_SPEC_CV_UNUSED_HANDLER	39	19	48.71%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_dispatch_try_catch_finally_helper_SPEC	54	20	37.03%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_COALESCE_SPEC_TMP_HANDLER	35	18	51.42%	['php-fuzz-execute', 'php-fuzz-function-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_CONST_CONST_HANDLER	107	52	48.59%	['php-fuzz-execute', 'php-fuzz-function-jit']
ZEND_JMP_NULL_SPEC_CV_HANDLER	37	20	54.05%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SUB_SPEC_CONST_CONST_TAILCALL_HANDLER	33	10	30.30%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_CONCAT_SPEC_CV_TMPVAR_TAILCALL_HANDLER	69	37	53.62%	['php-fuzz-function-jit']
ZEND_IS_SMALLER_SPEC_CONST_TMPVARCV_TAILCALL_HANDLER	39	11	28.20%	['php-fuzz-function-jit']
ZEND_CAST_SPEC_VAR_TAILCALL_HANDLER	41	14	34.14%	['php-fuzz-function-jit']
ZEND_FAST_CONCAT_SPEC_CONST_TMPVAR_TAILCALL_HANDLER	116	63	54.31%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_FAST_CONCAT_SPEC_TMPVAR_CONST_TAILCALL_HANDLER	116	53	45.68%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_ROPE_END_SPEC_TMP_CONST_TAILCALL_HANDLER	53	29	54.71%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_DO_FCALL_SPEC_RETVAL_USED_TAILCALL_HANDLER	100	52	52.0%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_RETURN_SPEC_CONST_TAILCALL_HANDLER	69	19	27.53%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_leave_helper_SPEC_TAILCALL	111	58	52.25%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INCLUDE_OR_EVAL_SPEC_CONST_TAILCALL_HANDLER	69	30	43.47%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_INIT_METHOD_CALL_SPEC_CV_CONST_TAILCALL_HANDLER	128	55	42.96%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SEND_VAR_SPEC_VAR_UNUSED_TAILCALL_HANDLER	40	18	45.0%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_SEND_VAR_SPEC_CV_UNUSED_TAILCALL_HANDLER	39	19	48.71%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
ZEND_HANDLE_EXCEPTION_SPEC_TAILCALL_HANDLER	41	17	41.46%	['php-fuzz-function-jit']
zend_dispatch_try_catch_finally_helper_SPEC_TAILCALL	54	10	18.51%	['php-fuzz-function-jit']
ZEND_COALESCE_SPEC_TMP_TAILCALL_HANDLER	35	15	42.85%	['php-fuzz-function-jit']
timelib_fetch_timezone_offset	37	7	18.91%	['php-fuzz-execute', 'php-fuzz-function-jit']
timezone_initialize	31	15	48.38%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
cache_script_in_shared_memory	95	38	40.0%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_accel_error_va_args	53	8	15.09%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_accel_load_script	41	22	53.65%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
_zend_accel_function_hash_copy	37	17	45.94%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_persist_class_entry	181	82	45.30%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_update_parent_ce	135	26	19.25%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_hash_persist	69	33	47.82%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_persist_class_method	66	20	30.30%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_persist_ast	41	22	53.65%	['php-fuzz-function-jit']
zend_persist_class_constant	42	19	45.23%	['php-fuzz-function-jit']
zend_persist_property_info	54	20	37.03%	['php-fuzz-function-jit']
zend_accel_persist_class_table	68	24	35.29%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_persist_class_entry_calc	125	62	49.6%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
zend_persist_class_method_calc	32	11	34.37%	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
spl_array_get_hash_table_ptr	31	7	22.58%	['php-fuzz-execute', 'php-fuzz-function-jit']
spl_dual_it_construct	132	29	21.96%	['php-fuzz-function-jit']
php_resolve_path	119	59	49.57%	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
php_output_handler_op	119	39	32.77%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
opline_supports_assign_contraction	44	18	40.90%	['php-fuzz-tracing-jit']
find_adjusted_tmp_var	47	16	34.04%	['php-fuzz-tracing-jit']
zend_print_zval_r_to_buf	64	23	35.93%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
zim_Closure_call	76	19	25.0%	['php-fuzz-tracing-jit']
zend_fetch_dimension_address_read	138	44	31.88%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
slow_index_convert_w	74	19	25.67%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_fetch_dimension_address	125	45	36.0%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
zend_std_get_property_ptr_ptr	95	36	37.89%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
decrement_function	99	46	46.46%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_SPEC_CONST_CONST_HANDLER	33	10	30.30%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_MUL_SPEC_CONST_CONST_HANDLER	35	10	28.57%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_CONCAT_SPEC_CONST_CV_HANDLER	68	17	25.0%	['php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_CONST_JMPZ_HANDLER	54	29	53.70%	['php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_TMPVAR_JMPZ_HANDLER	54	13	24.07%	['php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_CV_JMPZ_HANDLER	54	18	33.33%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_TMP_HANDLER	142	43	30.28%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_CV_HANDLER	137	52	37.95%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_TMP_HANDLER	142	45	31.69%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CV_HANDLER	137	45	32.84%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_TMP_HANDLER	141	52	36.87%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_CV_HANDLER	136	45	33.08%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_TMPVAR_OP_DATA_TMP_HANDLER	142	47	33.09%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CV_OP_DATA_TMP_HANDLER	141	46	32.62%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CONST_OP_DATA_CONST_HANDLER	135	56	41.48%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_TMP_HANDLER	137	29	21.16%	['php-fuzz-tracing-jit']
ZEND_QM_ASSIGN_SPEC_CV_HANDLER	34	16	47.05%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_FAST_CONCAT_SPEC_TMPVAR_TMPVAR_HANDLER	117	40	34.18%	['php-fuzz-tracing-jit']
ZEND_FAST_CONCAT_SPEC_CV_TMPVAR_HANDLER	116	49	42.24%	['php-fuzz-tracing-jit']
ZEND_SEND_VAR_EX_SPEC_CV_UNUSED_QUICK_HANDLER	55	24	43.63%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CONST_HANDLER	100	26	26.0%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_TMPVAR_HANDLER	101	38	37.62%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_UNUSED_HANDLER	100	18	18.0%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
ZEND_UNSET_DIM_SPEC_CV_CONST_HANDLER	92	23	25.0%	['php-fuzz-tracing-jit']
ZEND_UNSET_DIM_SPEC_CV_CV_HANDLER	92	23	25.0%	['php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_CV_CV_HANDLER	140	36	25.71%	['php-fuzz-tracing-jit']
ZEND_ADD_SPEC_CONST_CONST_TAILCALL_HANDLER	33	10	30.30%	['php-fuzz-tracing-jit']
ZEND_SUB_SPEC_CONST_TMPVARCV_TAILCALL_HANDLER	33	11	33.33%	['php-fuzz-tracing-jit']
ZEND_SUB_SPEC_TMPVARCV_CONST_TAILCALL_HANDLER	33	16	48.48%	['php-fuzz-tracing-jit']
ZEND_MUL_SPEC_CONST_CONST_TAILCALL_HANDLER	35	10	28.57%	['php-fuzz-tracing-jit']
ZEND_MUL_SPEC_TMPVARCV_CONST_TAILCALL_HANDLER	35	18	51.42%	['php-fuzz-tracing-jit']
ZEND_CONCAT_SPEC_TMPVAR_TMPVAR_TAILCALL_HANDLER	70	17	24.28%	['php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_TMPVAR_TMPVAR_TAILCALL_HANDLER	54	16	29.62%	['php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_CONST_TAILCALL_HANDLER	54	29	53.70%	['php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_CONST_JMPZ_TAILCALL_HANDLER	54	29	53.70%	['php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_TMPVAR_JMPZ_TAILCALL_HANDLER	54	13	24.07%	['php-fuzz-tracing-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_CV_JMPZ_TAILCALL_HANDLER	54	18	33.33%	['php-fuzz-tracing-jit']
ZEND_IS_SMALLER_SPEC_TMPVARCV_CONST_TAILCALL_HANDLER	39	13	33.33%	['php-fuzz-tracing-jit']
ZEND_IS_SMALLER_SPEC_TMPVARCV_CONST_JMPNZ_TAILCALL_HANDLER	39	20	51.28%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_TMP_TAILCALL_HANDLER	142	43	30.28%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_CV_TAILCALL_HANDLER	137	52	37.95%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_TMP_TAILCALL_HANDLER	142	45	31.69%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CV_TAILCALL_HANDLER	137	45	32.84%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_TMP_TAILCALL_HANDLER	141	45	31.91%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_CV_TAILCALL_HANDLER	136	45	33.08%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_TMPVAR_OP_DATA_TMP_TAILCALL_HANDLER	142	47	33.09%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CV_OP_DATA_TMP_TAILCALL_HANDLER	141	46	32.62%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CONST_OP_DATA_CONST_TAILCALL_HANDLER	135	51	37.77%	['php-fuzz-tracing-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_TMP_TAILCALL_HANDLER	137	29	21.16%	['php-fuzz-tracing-jit']
ZEND_QM_ASSIGN_SPEC_CV_TAILCALL_HANDLER	34	16	47.05%	['php-fuzz-tracing-jit']
ZEND_CAST_SPEC_CONST_TAILCALL_HANDLER	39	19	48.71%	['php-fuzz-tracing-jit']
ZEND_ROPE_ADD_SPEC_TMP_TMPVAR_TAILCALL_HANDLER	31	17	54.83%	['php-fuzz-tracing-jit']
ZEND_SEND_VAR_EX_SPEC_CV_UNUSED_QUICK_TAILCALL_HANDLER	55	19	34.54%	['php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_UNUSED_TAILCALL_HANDLER	100	18	18.0%	['php-fuzz-tracing-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_UNUSED_TAILCALL_HANDLER	101	16	15.84%	['php-fuzz-tracing-jit']
ZEND_UNSET_DIM_SPEC_CV_CONST_TAILCALL_HANDLER	92	23	25.0%	['php-fuzz-tracing-jit']
ZEND_UNSET_DIM_SPEC_CV_CV_TAILCALL_HANDLER	92	23	25.0%	['php-fuzz-tracing-jit']
zend_fetch_var_address_helper_SPEC_CV_UNUSED_TAILCALL	89	37	41.57%	['php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_CV_CONST_TAILCALL_INLINE_HANDLER	140	21	15.0%	['php-fuzz-tracing-jit']
ZEND_FETCH_OBJ_R_SPEC_CV_CV_TAILCALL_HANDLER	140	36	25.71%	['php-fuzz-tracing-jit']
php_trim_int	78	31	39.74%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
php_str_replace_in_subject	135	33	24.44%	['php-fuzz-execute', 'php-fuzz-tracing-jit']
print_hash	46	25	54.34%	['php-fuzz-execute']
zend_wrong_parameter_error	38	11	28.94%	['php-fuzz-execute']
zend_parse_arg_long_weak	57	28	49.12%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
object_init_with_constructor	47	22	46.80%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
array_set_zval_key	40	15	37.5%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_get_default_from_internal_arg_info	33	15	45.45%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_is_callable_check_func	219	104	47.48%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_is_callable_check_class	85	26	30.58%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_get_attribute_object	66	30	45.45%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
is_a_impl	39	18	46.15%	['php-fuzz-execute']
zend_get_class_constant_ex	90	16	17.77%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_verify_ref_assignable_zval	54	19	35.18%	['php-fuzz-execute']
zend_unfinished_execution_gc_ex	64	32	50.0%	['php-fuzz-execute']
zend_handle_undef_args	90	27	30.0%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_verify_weak_scalar_type_hint	41	22	53.65%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_fetch_static_property_address_ex	69	31	44.92%	['php-fuzz-execute']
zend_handle_fetch_obj_flags	35	14	40.0%	['php-fuzz-execute']
zend_get_arg_offset_by_name	31	16	51.61%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_binary_assign_op_obj_dim	31	17	54.83%	['php-fuzz-execute']
zend_fetch_property_address	127	53	41.73%	['php-fuzz-execute']
zend_isset_dim_slow	33	8	24.24%	['php-fuzz-execute']
zend_init_dynamic_call_string	68	22	32.35%	['php-fuzz-execute']
zend_fetch_class	43	18	41.86%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_generator_dtor_storage	91	17	18.68%	['php-fuzz-execute']
zend_traits_init_trait_structures	124	37	29.83%	['php-fuzz-execute']
zend_do_traits_method_binding	37	18	48.64%	['php-fuzz-execute']
zend_add_trait_method	40	16	40.0%	['php-fuzz-execute']
zend_do_traits_property_binding	108	12	11.11%	['php-fuzz-execute']
zend_object_make_lazy	116	39	33.62%	['php-fuzz-execute']
zend_std_get_debug_info	38	9	23.68%	['php-fuzz-execute']
zend_check_property_access	41	22	53.65%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_std_get_static_method	49	20	40.81%	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_std_compare_objects	108	35	32.40%	['php-fuzz-execute']
zend_string_toupper_ex	38	20	52.63%	['php-fuzz-execute']
zendi_smart_streq	34	17	50.0%	['php-fuzz-execute']
zho_declared_it_fetch_current	60	32	53.33%	['php-fuzz-execute']
ZEND_CONCAT_SPEC_CV_CONST_HANDLER	68	34	50.0%	['php-fuzz-execute']
ZEND_CONCAT_SPEC_CV_CV_HANDLER	68	36	52.94%	['php-fuzz-execute']
ZEND_IS_EQUAL_SPEC_TMPVAR_CONST_HANDLER	54	13	24.07%	['php-fuzz-execute']
ZEND_IS_EQUAL_SPEC_TMPVAR_CONST_JMPNZ_HANDLER	54	27	50.0%	['php-fuzz-execute']
ZEND_IS_EQUAL_SPEC_TMPVAR_TMPVAR_HANDLER	54	13	24.07%	['php-fuzz-execute']
ZEND_IS_EQUAL_SPEC_TMPVAR_TMPVAR_JMPZ_HANDLER	54	12	22.22%	['php-fuzz-execute']
ZEND_IS_EQUAL_SPEC_CV_TMPVAR_HANDLER	54	29	53.70%	['php-fuzz-execute']
ZEND_IS_EQUAL_SPEC_CV_CV_HANDLER	54	12	22.22%	['php-fuzz-execute']
ZEND_IS_NOT_EQUAL_SPEC_TMPVAR_TMPVAR_JMPZ_HANDLER	54	12	22.22%	['php-fuzz-execute']
ZEND_IS_SMALLER_SPEC_TMPVARCV_TMPVARCV_JMPZ_HANDLER	39	17	43.58%	['php-fuzz-execute']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_HANDLER	43	11	25.58%	['php-fuzz-execute']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_JMPZ_HANDLER	43	13	30.23%	['php-fuzz-execute']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_TMPVARCV_CONST_HANDLER	43	16	37.20%	['php-fuzz-execute']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_TMPVARCV_CONST_JMPZ_HANDLER	43	19	44.18%	['php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_CONST_HANDLER	136	33	24.26%	['php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_VAR_HANDLER	141	45	31.91%	['php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_CV_TMPVAR_OP_DATA_VAR_HANDLER	142	45	31.69%	['php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_CV_CV_OP_DATA_CV_HANDLER	136	46	33.82%	['php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CONST_OP_DATA_CONST_HANDLER	135	27	20.0%	['php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CONST_OP_DATA_TMP_HANDLER	137	51	37.22%	['php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CONST_OP_DATA_CV_HANDLER	135	27	20.0%	['php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_CV_CONST_OP_DATA_TMP_HANDLER	137	45	32.84%	['php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_CV_CONST_OP_DATA_VAR_HANDLER	137	43	31.38%	['php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_CV_CONST_OP_DATA_CV_HANDLER	135	32	23.70%	['php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_VAR_HANDLER	137	31	22.62%	['php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_CV_HANDLER	135	30	22.22%	['php-fuzz-execute']
ZEND_ASSIGN_DIM_OP_SPEC_VAR_CONST_HANDLER	89	43	48.31%	['php-fuzz-execute']
ZEND_ASSIGN_DIM_OP_SPEC_VAR_TMPVAR_HANDLER	90	45	50.0%	['php-fuzz-execute']
ZEND_ASSIGN_DIM_OP_SPEC_CV_CONST_HANDLER	88	44	50.0%	['php-fuzz-execute']
ZEND_ASSIGN_DIM_OP_SPEC_CV_TMPVAR_HANDLER	89	46	51.68%	['php-fuzz-execute']
ZEND_ASSIGN_DIM_OP_SPEC_CV_CV_HANDLER	88	19	21.59%	['php-fuzz-execute']
ZEND_QM_ASSIGN_SPEC_CONST_HANDLER	34	18	52.94%	['php-fuzz-execute']
ZEND_QM_ASSIGN_SPEC_TMP_HANDLER	34	14	41.17%	['php-fuzz-execute']
ZEND_QM_ASSIGN_SPEC_VAR_HANDLER	34	18	52.94%	['php-fuzz-execute']
ZEND_SEND_VAR_NO_REF_EX_SPEC_VAR_UNUSED_QUICK_HANDLER	57	22	38.59%	['php-fuzz-execute']
ZEND_CAST_SPEC_TMP_HANDLER	40	14	35.0%	['php-fuzz-execute']
ZEND_CAST_SPEC_CV_HANDLER	39	13	33.33%	['php-fuzz-execute']
ZEND_FAST_CONCAT_SPEC_CONST_CV_HANDLER	115	36	31.30%	['php-fuzz-execute']
ZEND_RETURN_SPEC_TMP_HANDLER	69	16	23.18%	['php-fuzz-execute']
ZEND_RETURN_SPEC_VAR_HANDLER	69	26	37.68%	['php-fuzz-execute']
ZEND_RETURN_SPEC_CV_HANDLER	69	32	46.37%	['php-fuzz-execute']
ZEND_NEW_SPEC_VAR_UNUSED_HANDLER	57	19	33.33%	['php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_CONST_HANDLER	101	29	28.71%	['php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_TMPVAR_HANDLER	102	32	31.37%	['php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_UNUSED_HANDLER	101	21	20.79%	['php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_TMPVAR_HANDLER	101	32	31.68%	['php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_UNUSED_HANDLER	100	25	25.0%	['php-fuzz-execute']
ZEND_UNSET_OBJ_SPEC_UNUSED_CONST_HANDLER	38	18	47.36%	['php-fuzz-execute']
ZEND_FE_RESET_R_SPEC_CONST_HANDLER	61	15	24.59%	['php-fuzz-execute']
ZEND_FE_RESET_R_SPEC_TMP_HANDLER	63	13	20.63%	['php-fuzz-execute']
ZEND_FE_RESET_R_SPEC_VAR_HANDLER	67	16	23.88%	['php-fuzz-execute']
zend_fetch_var_address_helper_SPEC_CONST_UNUSED	89	27	30.33%	['php-fuzz-execute']
zend_fetch_var_address_helper_SPEC_TMPVAR_UNUSED	91	50	54.94%	['php-fuzz-execute']
ZEND_FETCH_DIM_R_SPEC_TMPVAR_CONST_HANDLER	31	16	51.61%	['php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_TMPVAR_CONST_HANDLER	141	20	14.18%	['php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_UNUSED_CONST_INLINE_HANDLER	140	59	42.14%	['php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_UNUSED_TMPVAR_HANDLER	141	29	20.56%	['php-fuzz-execute']
ZEND_FETCH_OBJ_IS_SPEC_UNUSED_CONST_HANDLER	103	26	25.24%	['php-fuzz-execute']
ZEND_FETCH_CLASS_SPEC_UNUSED_TMPVAR_HANDLER	38	20	52.63%	['php-fuzz-execute']
ZEND_FETCH_CLASS_SPEC_UNUSED_CV_HANDLER	37	16	43.24%	['php-fuzz-execute']
ZEND_CLONE_SPEC_CV_HANDLER	50	22	44.0%	['php-fuzz-execute']
ZEND_INIT_METHOD_CALL_SPEC_TMPVAR_CONST_HANDLER	131	54	41.22%	['php-fuzz-execute']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_CONST_CONST_HANDLER	116	53	45.68%	['php-fuzz-execute']
ZEND_ISSET_ISEMPTY_DIM_OBJ_SPEC_TMPVAR_CONST_HANDLER	66	19	28.78%	['php-fuzz-execute']
ZEND_SEND_VAL_EX_SPEC_TMP_UNUSED_QUICK_HANDLER	33	17	51.51%	['php-fuzz-execute']
ZEND_SEND_VAR_SPEC_CV_CONST_HANDLER	39	17	43.58%	['php-fuzz-execute']
ZEND_SEND_ARRAY_SPEC_HANDLER	135	43	31.85%	['php-fuzz-execute']
ZEND_STRLEN_SPEC_TMPVAR_HANDLER	55	11	20.0%	['php-fuzz-execute']
ZEND_TYPE_CHECK_SPEC_CONST_HANDLER	32	13	40.62%	['php-fuzz-execute']
ZEND_VERIFY_RETURN_TYPE_SPEC_CONST_UNUSED_HANDLER	58	22	37.93%	['php-fuzz-execute']
ZEND_VERIFY_RETURN_TYPE_SPEC_TMP_UNUSED_HANDLER	58	21	36.20%	['php-fuzz-execute']
ZEND_VERIFY_RETURN_TYPE_SPEC_VAR_UNUSED_HANDLER	58	23	39.65%	['php-fuzz-execute']
ZEND_JMP_SET_SPEC_CV_HANDLER	36	19	52.77%	['php-fuzz-execute']
ZEND_FETCH_CLASS_NAME_SPEC_UNUSED_HANDLER	54	19	35.18%	['php-fuzz-execute']
ZEND_RECV_VARIADIC_SPEC_UNUSED_HANDLER	63	28	44.44%	['php-fuzz-execute']
ZEND_SEND_UNPACK_SPEC_HANDLER	183	18	9.836%	['php-fuzz-execute']
ZEND_COALESCE_SPEC_CONST_HANDLER	35	18	51.42%	['php-fuzz-execute']
ZEND_COALESCE_SPEC_CV_HANDLER	35	11	31.42%	['php-fuzz-execute']
ZEND_SEND_FUNC_ARG_SPEC_VAR_UNUSED_HANDLER	41	15	36.58%	['php-fuzz-execute']
ZEND_GET_CLASS_SPEC_CV_UNUSED_HANDLER	38	16	42.10%	['php-fuzz-execute']
zend_weakmap_get_object_key_entry_gc	31	14	45.16%	['php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser', 'php-fuzz-tracing-jit']
zend_weakref_unregister	36	15	41.66%	['php-fuzz-execute']
zend_weakmap_read_dimension	33	7	21.21%	['php-fuzz-execute']
do_range_limit_days	34	18	52.94%	['php-fuzz-execute']
php_json_encode_array	191	101	52.87%	['php-fuzz-execute']
persistent_zend_resolve_path	62	30	48.38%	['php-fuzz-execute']
check_char_prop	53	14	26.41%	['php-fuzz-execute']
_pcre2_check_escape_8	179	36	20.11%	['php-fuzz-execute']
caseCHAR_6caseCHAR_7caseCHAR_8caseCHAR_9	164	55	33.53%
parse_regex	1080	560	51.85%	['php-fuzz-execute']
caseCHAR_5caseCHAR_6caseCHAR_7caseCHAR_8caseCHAR_9	407	151	37.10%
get_ucp	106	36	33.96%	['php-fuzz-execute']
read_name	76	32	42.10%	['php-fuzz-execute']
get_branchlength	284	92	32.39%	['php-fuzz-execute']
parsed_skip	71	19	26.76%	['php-fuzz-execute']
((posix_class==PC_GRAPH)?PT_PXGRAPH	1283	661	51.51%
find_recurse	104	28	26.92%	['php-fuzz-execute']
is_anchored	47	24	51.06%	['php-fuzz-execute']
first_significant_code	52	24	46.15%	['php-fuzz-execute']
find_firstassertedcu	62	28	45.16%	['php-fuzz-execute']
is_startline	65	19	29.23%	['php-fuzz-execute']
_pcre2_extuni_8	39	12	30.76%	['php-fuzz-execute']
_pcre2_find_bracket_8	115	35	30.43%	['php-fuzz-execute']
match	4416	1843	41.73%	['php-fuzz-execute']
match_ref	87	10	11.49%	['php-fuzz-execute']
php_pcre2_pattern_info	138	17	12.31%	['php-fuzz-execute']
_pcre2_valid_utf_8	144	45	31.25%	['php-fuzz-execute']
_pcre2_xclass_8	172	62	36.04%	['php-fuzz-execute']
php_pcre_match_impl	228	99	43.42%	['php-fuzz-execute']
zim_ReflectionClass_getProperty	54	15	27.77%	['php-fuzz-execute']
read_attributes	36	13	36.11%	['php-fuzz-execute']
_property_string	84	45	53.57%	['php-fuzz-execute']
_extension_string	107	57	53.27%	['php-fuzz-execute']
format_default_value	41	4	9.756%	['php-fuzz-execute']
zif_count	48	9	18.75%	['php-fuzz-execute']
zif_array_shift	97	29	29.89%	['php-fuzz-execute']
zif_array_key_exists	36	6	16.66%	['php-fuzz-execute']
php_splice	161	49	30.43%	['php-fuzz-execute']
php_get_data_compare_func_unstable	57	10	17.54%	['php-fuzz-execute']
zif_assert	61	25	40.98%	['php-fuzz-execute']
php_sprintf_appenddouble	78	31	39.74%	['php-fuzz-execute']
map_from_unicode	102	12	11.76%	['php-fuzz-execute']
write_octet_sequence	32	14	43.75%	['php-fuzz-execute']
php_getimagetype	88	34	38.63%	['php-fuzz-execute']
php_get_wbmp	43	6	13.95%	['php-fuzz-execute']
php_get_xbm	51	18	35.29%	['php-fuzz-execute']
php_getimagesize_from_stream	115	15	13.04%	['php-fuzz-execute']
zif_pack	374	84	22.45%	['php-fuzz-execute']
zif_str_pad	55	18	32.72%	['php-fuzz-execute']
php_char_to_str_ex	56	13	23.21%	['php-fuzz-execute']
php_unserialize_with_options	106	42	39.62%	['php-fuzz-execute']
php_var_serialize_intern	229	84	36.68%	['php-fuzz-execute']
php_message_handler_for_zend	71	14	19.71%	['php-fuzz-execute']
php_stream_parse_fopen_modes	41	21	51.21%	['php-fuzz-execute']
_php_stream_fopen	77	18	23.37%	['php-fuzz-execute']
_php_stream_fill_read_buffer	123	33	26.82%	['php-fuzz-execute']
php_stream_locate_url_wrapper	91	21	23.07%	['php-fuzz-execute']
_php_stream_open_wrapper_ex	128	48	37.5%	['php-fuzz-execute']
php_stream_display_wrapper_errors	61	21	34.42%	['php-fuzz-execute']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree.c	[]	[]
/src/php-src/Zend/zend_interfaces.c	[]	[]
/src/php-src/Zend/zend_mmap.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-execute']
/src/php-src/Zend/zend_constants.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/standard/assert.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriRecompose.c	[]	[]
/src/php-src/ext/opcache/jit/zend_jit_ir.c	[]	[]
/src/php-src/ext/standard/http_fopen_wrapper.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_after_frameset.c	[]	[]
/src/php-src/Zend/zend_interfaces_arginfo.h	[]	[]
/src/php-src/sapi/fuzzer/fuzzer-function-jit.c	['php-fuzz-function-jit']	['php-fuzz-function-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/br_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_caption.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/syntax.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/d_list_element.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_gcm.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/link_element.c	[]	[]
/src/php-src/main/strlcat.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/main/streams/userspace_arginfo.h	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_string_utils.c	[]	[]
/src/php-src/ext/hash/hash_crc32.c	[]	[]
/src/php-src/Zend/Optimizer/compact_literals.c	[]	[]
/src/php-src/Zend/zend_weakrefs.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_extensions.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/date/lib/parse_date.re	[]	[]
/src/php-src/ext/standard/proc_open.c	[]	[]
/src/php-src/ext/opcache/zend_accelerator_blacklist.c	[]	[]
/src/php-src/ext/standard/info.c	[]	[]
/src/php-src/Zend/Optimizer/optimize_func_calls.c	[]	[]
/src/php-src/Zend/zend_vm_opcodes.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_strtab.c	[]	[]
/src/php-src/ext/opcache/zend_persist_calc.c	[]	[]
/src/php-src/main/SAPI.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/core/avl.c	[]	[]
/src/php-src/ext/standard/levenshtein.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/array.c	[]	[]
/src/php-src/ext/hash/hash_joaat.c	[]	[]
/src/php-src/ext/standard/uniqid.c	[]	[]
/src/php-src/Zend/zend_execute.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_variables.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer/error.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/u_list_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_doctype.c	[]	[]
/src/php-src/Zend/zend_inheritance.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/spl/spl_heap_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_head.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/frame_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/html_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/collection.h	[]	[]
/src/php-src/ext/random/randomizer.c	[]	[]
/src/php-src/Zend/Optimizer/ssa_integrity.c	[]	[]
/src/php-src/ext/standard/crypt_sha512.c	[]	[]
/src/php-src/ext/opcache/jit/zend_jit_helpers.c	[]	[]
/src/php-src/Zend/zend_smart_string.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/main/php_content_types.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/legend_element.c	[]	[]
/src/php-src/main/streams/filter.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/main/streams/streams.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_signal.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/uri/uriparser/src/UriIp4Base.c	[]	[]
/src/php-src/ext/random/engine_xoshiro256starstar.c	[]	[]
/src/php-src/main/getopt.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_newline.c	[]	[]
/src/php-src/ext/spl/spl_directory.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/array_obj.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/picture_element.c	[]	[]
/src/php-src/ext/date/php_date.h	[]	[]
/src/php-src/ext/standard/string.c	[]	[]
/src/php-src/main/streams/xp_socket.c	[]	[]
/src/php-src/Zend/zend_observer.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/encoding/encode.c	[]	[]
/src/php-src/Zend/zend_builtin_functions.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/uri/uriparser/src/UriSetHostAuto.c	[]	[]
/src/php-src/ext/opcache/ZendAccelerator.c	[]	[]
/src/php-src/Zend/Optimizer/sccp.c	[]	[]
/src/php-src/Zend/zend_ast.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_section_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/conv.h	[]	[]
/src/php-src/main/safe_bcmp.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/input_element.c	[]	[]
/src/php-src/ext/exif/exif_arginfo.h	[]	[]
/src/php-src/Zend/zend_default_classes.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/anchor_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/quote_element.c	[]	[]
/src/php-src/Zend/Optimizer/zend_ssa.h	[]	[]
/src/php-src/ext/spl/spl_dllist.c	[]	[]
/src/php-src/ext/hash/xxhash/xxhash.h	[]	[]
/src/php-src/ext/lexbor/lexbor/core/str.c	[]	[]
/src/php-src/ext/date/lib/astro.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/strtod.c	[]	[]
/src/php-src/ext/standard/crypt.c	[]	[]
/src/php-src/sapi/fuzzer/fuzzer-unserializehash.c	['php-fuzz-unserializehash']	['php-fuzz-unserializehash']
/src/php-src/Zend/zend_cpuinfo.c	[]	[]
/src/php-src/Zend/zend_constants.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/interfaces/image_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_frameset.c	[]	[]
/src/php-src/ext/hash/hash_fnv.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_sccp.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_maketables.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/media_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/style_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/token.h	[]	[]
/src/php-src/Zend/Optimizer/nop_removal.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetHostIp6.c	[]	[]
/src/php-src/Zend/zend_alloc.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/main/streams/userspace.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_match.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/track_element.c	[]	[]
/src/php-src/ext/json/json.c	[]	[]
/src/php-src/Zend/zend_generators.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/standard/php_fopen_wrapper.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_emit.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/template_element.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriEscape.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetScheme.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/output_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/bst.c	[]	[]
/src/php-src/main/php_ini_builder.h	[]	[]
/src/php-src/Zend/zend_weakrefs_arginfo.h	[]	[]
/src/php-src/ext/json/json_parser.tab.c	['php-fuzz-json']	['php-fuzz-json']
/src/php-src/Zend/zend_string.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_select.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/selectors/selector.c	[]	[]
/src/php-src/Zend/zend_execute.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/pcre/pcre2lib/pcre2_auto_possess.c	[]	[]
/src/php-src/ext/uri/uri_parser_rfc3986.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/text.c	[]	[]
/src/php-src/ext/json/php_json_encoder.h	[]	[]
/src/php-src/ext/uri/php_uri_common.c	[]	[]
/src/php-src/main/strlcpy.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-execute']
/src/php-src/ext/opcache/shared_alloc_mmap.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_row.c	[]	[]
/src/php-src/ext/standard/url.c	[]	[]
/src/php-src/ext/standard/dir_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/processing_instruction.c	[]	[]
/src/php-src/ext/standard/php_password.h	[]	[]
/src/php-src/Zend/zend_virtual_cwd.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_system_id.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/cdata_section.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_context.c	[]	[]
/src/php-src/ext/opcache/zend_accelerator_debug.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_extuni.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/details_element.c	[]	[]
/src/php-src/Zend/zend_objects.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/standard/flock_compat.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/encoding.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/node.h	[]	[]
/src/php-src/Zend/zend_lazy_objects.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/interfaces/opt_group_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/shadow_root.c	[]	[]
/src/php-src/Zend/zend_fibers_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/core/shs.c	[]	[]
/src/php-src/ext/random/random.c	[]	[]
/src/php-src/Zend/zend_compile.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_ini_parser.y	[]	[]
/src/php-src/Zend/Optimizer/zend_optimizer_internal.h	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_perf.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_column_group.c	[]	[]
/src/php-src/ext/date/php_date.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_script.c	[]	[]
/src/php-src/ext/standard/incomplete_class.c	['php-fuzz-unserializehash', 'php-fuzz-unserialize']	['php-fuzz-unserializehash', 'php-fuzz-unserialize']
/src/php-src/ext/lexbor/lexbor/html/tokenizer.c	[]	[]
/src/php-src/ext/lexbor/lexbor/ports/posix/lexbor/core/memory.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/log.c	[]	[]
/src/php-src/ext/standard/streamsfuncs.c	[]	[]
/src/php-src/Zend/zend_bitset.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/hash/php_hash.h	[]	[]
/src/php-src/ext/hash/sha3/generic64lc/KeccakP-1600-opt64.c	[]	[]
/src/php-src/ext/pcre/php_pcre_arginfo.h	[]	[]
/src/php-src/Zend/Optimizer/pass3.c	[]	[]
/src/php-src/ext/spl/spl_array_arginfo.h	[]	[]
/src/php-src/main/snprintf.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/opcache/jit/ir/dynasm/dasm_x86.h	[]	[]
/src/php-src/main/streams/glob_wrapper.c	[]	[]
/src/php-src/ext/opcache/zend_accelerator_module.c	[]	[]
/src/php-src/ext/hash/hash_md.c	[]	[]
/src/php-src/Zend/zend_API.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/Optimizer/zend_cfg.c	[]	[]
/src/php-src/Zend/zend_stream.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/sapi/fuzzer/fuzzer-execute-common.h	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/opcache/jit/ir/ir_ra.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/iframe_element.c	[]	[]
/src/php-src/ext/standard/microtime.c	[]	[]
/src/php-src/Zend/Optimizer/compact_vars.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/comment.c	[]	[]
/src/php-src/Zend/Optimizer/dce.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/mem.h	[]	[]
/src/php-src/ext/spl/spl_functions.c	[]	[]
/src/php-src/ext/hash/hash_sha_sse2.c	[]	[]
/src/php-src/ext/opcache/zend_accelerator_hash.h	[]	[]
/src/php-src/ext/standard/basic_functions.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/spl/spl_heap.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/param_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/error.c	[]	[]
/src/php-src/ext/hash/hash_whirlpool.c	[]	[]
/src/php-src/main/internal_functions_cli.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriCopy.c	[]	[]
/src/php-src/sapi/fuzzer/fuzzer-exif.c	['php-fuzz-exif']	['php-fuzz-exif']
/src/php-src/ext/uri/uriparser/src/UriIp4.c	[]	[]
/src/php-src/ext/spl/spl_array.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_chkdint.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/audio_element.c	[]	[]
/src/php-src/ext/date/lib/parse_iso_intervals.re	[]	[]
/src/php-src/ext/lexbor/lexbor/core/str.h	[]	[]
/src/php-src/Zend/zend_exceptions.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_ini_parser.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/array.h	[]	[]
/src/php-src/Zend/zend_execute_API.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/opcache/zend_file_cache.c	[]	[]
/src/php-src/Zend/zend_atomic.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_enum.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/opcache/jit/ir/ir_patch.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree.h	[]	[]
/src/php-src/Zend/zend_operators.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/interfaces/video_element.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriVersion.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/paragraph_element.c	[]	[]
/src/php-src/ext/opcache/shared_alloc_shm.c	[]	[]
/src/php-src/ext/spl/spl_fixedarray.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/mraw.h	[]	[]
/src/php-src/ext/uri/uriparser/src/UriParseBase.c	[]	[]
/src/php-src/Zend/zend_variables.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/json/json_scanner.c	['php-fuzz-json']	['php-fuzz-json']
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_match.c	[]	[]
/src/php-src/ext/standard/math.c	[]	[]
/src/php-src/ext/standard/html.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/standard/metaphone.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriParse.c	[]	[]
/src/php-src/Zend/zend_atomic.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_ord2utf.c	[]	[]
/src/php-src/ext/standard/head.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_attributes_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/object_element.c	[]	[]
/src/php-src/Zend/zend_closures.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/Optimizer/block_pass.c	[]	[]
/src/php-src/Zend/zend_object_handlers.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/pre_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/state.c	[]	[]
/src/php-src/Zend/zend_closures_arginfo.h	[]	[]
/src/php-src/Zend/zend_enum_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer.c	[]	[]
/src/php-src/Zend/zend_smart_str.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/opcache/jit/zend_jit.c	[]	[]
/src/php-src/ext/standard/exec.c	[]	[]
/src/php-src/Zend/zend_language_parser.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/standard/credits.c	[]	[]
/src/php-src/Zend/Optimizer/zend_func_info.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/standard/image.c	[]	[]
/src/php-src/ext/standard/scanf.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetHostIpFuture.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/span_element.c	[]	[]
/src/php-src/ext/standard/libavifinfo/avifinfo.c	[]	[]
/src/php-src/main/streams/transports.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/standard/soundex.c	[]	[]
/src/php-src/Zend/Optimizer/scdf.c	[]	[]
/src/php-src/ext/spl/php_spl.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/dobject.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_template.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_error.c	[]	[]
/src/php-src/ext/standard/array.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetQuery.c	[]	[]
/src/php-src/Zend/Optimizer/zend_inference.c	[]	[]
/src/php-src/ext/lexbor/lexbor/encoding/encoding.h	[]	[]
/src/php-src/Zend/zend_attributes.h	[]	[]
/src/php-src/ext/date/lib/dow.c	[]	[]
/src/php-src/ext/date/lib/parse_posix.c	[]	[]
/src/php-src/Zend/zend_enum.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-function-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/encoding/decode.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_select_in_table.c	[]	[]
/src/php-src/ext/spl/spl_iterators_arginfo.h	[]	[]
/src/php-src/ext/date/lib/unixtime2tm.c	[]	[]
/src/php-src/main/php_glob.c	[]	[]
/src/php-src/ext/opcache/zend_shared_alloc.h	[]	[]
/src/php-src/Zend/zend_inheritance.h	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interface.c	[]	[]
/src/php-src/ext/date/lib/timelib.c	[]	[]
/src/php-src/Zend/zend_ptr_stack.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/css/selectors/pseudo.c	[]	[]
/src/php-src/ext/opcache/zend_accelerator_util_funcs.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_rcdata.c	[]	[]
/src/php-src/Zend/zend_opcode.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/main/network.c	[]	[]
/src/php-src/ext/standard/url_scanner_ex.re	[]	[]
/src/php-src/main/main_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/window.c	[]	[]
/src/php-src/Zend/Optimizer/escape_analysis.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_element.c	[]	[]
/src/php-src/ext/standard/filestat.c	[]	[]
/src/php-src/ext/date/lib/parse_tz.c	[]	[]
/src/php-src/ext/hash/hash_gost.c	[]	[]
/src/php-src/ext/uri/uri_parser_whatwg.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/directory_element.c	[]	[]
/src/php-src/ext/standard/fsock.c	[]	[]
/src/php-src/ext/lexbor/lexbor/unicode/unicode.h	[]	[]
/src/php-src/ext/standard/uuencode.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/data_element.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriCommon.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/before_head.c	[]	[]
/src/php-src/Zend/zend_builtin_functions_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/token_attr.c	[]	[]
/src/php-src/Zend/zend_hash.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_compile.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_iterators.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriNormalize.c	[]	[]
/src/php-src/Zend/Optimizer/zend_worklist.h	[]	[]
/src/php-src/ext/random/php_random.h	[]	[]
/src/php-src/ext/standard/pageinfo.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer/error.c	[]	[]
/src/php-src/ext/standard/ftp_fopen_wrapper.c	[]	[]
/src/php-src/ext/random/engine_pcgoneseq128xslrr64.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_serialize.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/parser.c	[]	[]
/src/php-src/ext/random/random_arginfo.h	[]	[]
/src/php-src/main/main.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/standard/formatted_print.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/heading_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/title_element.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetHostCommon.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/conv.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_save.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/slot_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interface_res.h	[]	[]
/src/php-src/Zend/zend_weakrefs.h	['php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-execute']
/src/php-src/Zend/zend_string.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/opcache/jit/ir/ir_check.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_body.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_valid_utf.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/active_formatting.c	[]	[]
/src/php-src/Zend/zend_ini_scanner.l	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_compile.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tag.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/open_elements.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_cfg.c	[]	[]
/src/php-src/Zend/Optimizer/zend_inference.h	[]	[]
/src/php-src/ext/lexbor/lexbor/css/selectors/selectors.c	[]	[]
/src/php-src/Zend/Optimizer/optimize_temp_vars_5.c	[]	[]
/src/php-src/Zend/zend_sort.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/hash/hash.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_caption_element.c	[]	[]
/src/php-src/Zend/zend_multibyte.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/uri/php_uri_arginfo.h	[]	[]
/src/php-src/main/output.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/interfaces/o_list_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_body.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetUserInfo.c	[]	[]
/src/php-src/Zend/Optimizer/scdf.h	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_script_run.c	[]	[]
/src/php-src/ext/hash/hash_snefru.c	[]	[]
/src/php-src/ext/opcache/zend_accelerator_hash.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_table.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/attr.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/option_element.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetFragment.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/swar.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/open_elements.h	[]	[]
/src/php-src/ext/lexbor/lexbor/core/hash.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/parser.h	[]	[]
/src/php-src/Zend/zend_arena.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/interfaces/meter_element.c	[]	[]
/src/php-src/Zend/zend_fibers.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_hash.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/pcre/pcre2lib/pcre2_convert.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_dump.c	[]	[]
/src/php-src/ext/standard/link.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetPort.c	[]	[]
/src/php-src/Zend/zend_constants_arginfo.h	[]	[]
/src/php-src/Zend/zend_exceptions_arginfo.h	[]	[]
/src/php-src/main/php_ini_builder.c	[]	[]
/src/php-src/ext/hash/hash_ripemd.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/label_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/unicode/unicode.c	[]	[]
/src/php-src/Zend/zend_cpuinfo.h	[]	[]
/src/php-src/ext/standard/quot_print.c	[]	[]
/src/php-src/main/php_ini.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_API.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/hash/sha3/generic64lc/KeccakSponge.inc	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/div_element.c	[]	[]
/src/php-src/Zend/zend_list.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/interfaces/canvas_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/button_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer.h	[]	[]
/src/php-src/Zend/zend_ast.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/main/php_syslog.c	[]	[]
/src/php-src/ext/random/php_random_uint128.h	[]	[]
/src/php-src/ext/uri/uriparser/src/UriCompare.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_xclass.c	[]	[]
/src/php-src/ext/standard/datetime.c	[]	[]
/src/php-src/ext/standard/md5.c	[]	[]
/src/php-src/ext/standard/var_unserializer.re	['php-fuzz-unserializehash', 'php-fuzz-unserialize']	['php-fuzz-unserializehash', 'php-fuzz-unserialize']
/src/php-src/ext/lexbor/lexbor/html/interfaces/frame_set_element.c	[]	[]
/src/php-src/ext/reflection/php_reflection_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_row_element.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_gdb.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/element.c	[]	[]
/src/php-src/ext/standard/dl.c	[]	[]
/src/php-src/ext/standard/http.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_comment.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_fold_hash.h	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/element.h	[]	[]
/src/php-src/ext/uri/php_uri_common.h	[]	[]
/src/php-src/ext/lexbor/lexbor/core/diyfp.c	[]	[]
/src/php-src/ext/hash/sha3/generic64lc/KeccakHash.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/text_area_element.c	[]	[]
/src/php-src/ext/standard/net.c	[]	[]
/src/php-src/Zend/zend_float.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/encoding.h	[]	[]
/src/php-src/ext/lexbor/php_lexbor.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/marquee_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/token.c	[]	[]
/src/php-src/ext/lexbor/lexbor/url/url.c	[]	[]
/src/php-src/ext/lexbor/lexbor/tag/tag.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_study.c	[]	[]
/src/php-src/ext/standard/hrtime.c	[]	[]
/src/php-src/ext/uri/php_uri.c	[]	[]
/src/php-src/Zend/zend_attributes.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/css/selectors/selectors.h	[]	[]
/src/php-src/ext/lexbor/lexbor/core/mraw.c	[]	[]
/src/php-src/ext/reflection/php_reflection.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_misc.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_config.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/source_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/active_formatting.h	[]	[]
/src/php-src/Zend/zend_objects_API.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_language_scanner.l	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_gc.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_property_hooks.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-execute']
/src/php-src/Zend/zend_objects_API.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/tree/template_insertion.h	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_match_data.c	[]	[]
/src/php-src/ext/standard/file.c	[]	[]
/src/php-src/ext/standard/strnatcmp.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/head_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/meta_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/initial.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_pattern_info.c	[]	[]
/src/php-src/main/php_variables.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_gdb.c	[]	[]
/src/php-src/main/streams/mmap.c	[]	[]
/src/php-src/ext/json/json_encoder.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/document.h	[]	[]
/src/php-src/Zend/zend_llist.h	[]	[]
/src/php-src/ext/date/lib/tm2unixtime.c	[]	[]
/src/php-src/Zend/zend_multiply.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/css/selectors/state.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/area_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/punycode/punycode.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/array_obj.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/map_element.c	[]	[]
/src/php-src/Zend/zend_hrtime.c	[]	[]
/src/php-src/ext/json/json_arginfo.h	[]	[]
/src/php-src/Zend/zend_strtod.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/interfaces/field_set_element.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_substring.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/attr.h	[]	[]
/src/php-src/ext/spl/spl_observer_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/menu_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/serialize.c	[]	[]
/src/php-src/ext/standard/versioning.c	[]	[]
/src/php-src/ext/hash/murmur/PMurHash128.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/token.h	[]	[]
/src/php-src/ext/lexbor/lexbor/core/print.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/plog.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/hr_element.c	[]	[]
/src/php-src/ext/standard/dir.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_cell.c	[]	[]
/src/php-src/Zend/zend_ini.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/uri/uriparser/src/UriShorten.c	[]	[]
/src/php-src/ext/spl/spl_exceptions.c	[]	[]
/src/php-src/ext/opcache/jit/zend_jit_vm_helpers.c	[]	[]
/src/php-src/Zend/zend_ptr_stack.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_vm_execute.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/standard/dns.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriNormalizeBase.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_after_body.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/plog.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/form_element.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_find_bracket.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document.h	[]	[]
/src/php-src/ext/lexbor/lexbor/core/shs.h	[]	[]
/src/php-src/Zend/zend_fibers.h	[]	[]
/src/php-src/ext/random/engine_mt19937.c	[]	[]
/src/php-src/ext/standard/user_filters.c	[]	[]
/src/php-src/ext/random/zend_utils.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_cell_element.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_x86.dasc	[]	[]
/src/php-src/ext/standard/crypt_sha256.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/base_element.c	[]	[]
/src/php-src/ext/standard/basic_functions_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/progress_element.c	[]	[]
/src/php-src/Zend/zend_types.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/standard/base64.h	[]	[]
/src/php-src/main/streams/plain_wrapper.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interface.c	[]	[]
/src/php-src/Zend/zend_generators_arginfo.h	[]	[]
/src/php-src/ext/standard/file_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/font_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/before_html.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/character_data.c	[]	[]
/src/php-src/Zend/zend_observer.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/main/fopen_wrappers.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document_type.c	[]	[]
/src/php-src/main/rfc1867.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	[]
/src/php-src/ext/standard/pack.c	[]	[]
/src/php-src/sapi/fuzzer/fuzzer-tracing-jit.c	['php-fuzz-tracing-jit']	['php-fuzz-tracing-jit']
/src/php-src/ext/standard/crc32.c	[]	[]
/src/php-src/ext/date/lib/interval.c	[]	[]
/src/php-src/ext/opcache/jit/zend_jit_trace.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/token.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/script_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document_type.h	[]	[]
/src/php-src/ext/standard/var.c	['php-fuzz-exif', 'php-fuzz-unserializehash']	['php-fuzz-exif', 'php-fuzz-unserializehash']
/src/php-src/sapi/fuzzer/fuzzer-parser.c	['php-fuzz-parser']	['php-fuzz-parser']
/src/php-src/ext/lexbor/lexbor/html/interfaces/unknown_element.c	[]	[]
/src/php-src/ext/spl/spl_fixedarray_arginfo.h	[]	[]
/src/php-src/ext/standard/browscap.c	[]	[]
/src/php-src/Zend/zend_generators.h	[]	[]
/src/php-src/ext/opcache/zend_shared_alloc.c	[]	[]
/src/php-src/main/php_odbc_utils.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/processing_instruction.h	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetPath.c	[]	[]
/src/php-src/ext/opcache/zend_accelerator_api.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_rawtext.c	[]	[]
/src/php-src/Zend/Optimizer/dfa_pass.c	[]	[]
/src/php-src/ext/uri/uri_parser_php_parse_url.c	[]	[]
/src/php-src/Zend/zend_highlight.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetHostIp4.c	[]	[]
/src/php-src/ext/spl/spl_iterators.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/css.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/dobject.h	[]	[]
/src/php-src/Zend/zend_exceptions.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/sapi/fuzzer/fuzzer-unserialize.c	['php-fuzz-unserialize']	['php-fuzz-unserialize']
/src/php-src/ext/hash/hash_arginfo.h	[]	[]
/src/php-src/Zend/zend_hrtime.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/Zend/zend_lazy_objects.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/spl/spl_observer.c	[]	[]
/src/php-src/Zend/Optimizer/zend_optimizer.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/text.c	[]	[]
/src/php-src/sapi/fuzzer/fuzzer-sapi.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/interfaces/time_element.c	[]	[]
/src/php-src/Zend/zend_interfaces.h	[]	[]
/src/php-src/Zend/Optimizer/zend_ssa.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_compile.c	[]	[]
/src/php-src/ext/spl/spl_exceptions_arginfo.h	[]	[]
/src/php-src/ext/pcre/php_pcre.c	[]	[]
/src/php-src/ext/spl/spl_dllist_arginfo.h	[]	[]
/src/php-src/ext/standard/filters.c	[]	[]
/src/php-src/ext/hash/murmur/PMurHash.c	[]	[]
/src/php-src/ext/standard/syslog.c	[]	[]
/src/php-src/ext/standard/php_crypt_r.c	[]	[]
/src/php-src/ext/opcache/jit/zend_jit_internal.h	[]	[]
/src/php-src/ext/hash/hash_xxhash.c	[]	[]
/src/php-src/ext/hash/hash_sha3.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/dialog_element.c	[]	[]
/src/php-src/ext/random/gammasection.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_frameset.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/data_list_element.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriResolve.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/mem.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/mod_element.c	[]	[]
/src/php-src/ext/standard/crypt_freesec.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_head_noscript.c	[]	[]
/src/php-src/Zend/zend_object_handlers.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/main/php_streams.h	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/anb.c	[]	[]
/src/php-src/ext/lexbor/lexbor/ns/ns.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/state.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/dtoa.c	[]	[]
/src/php-src/main/php_open_temporary_file.c	[]	[]
/src/php-src/ext/hash/hash_adler32.c	[]	[]
/src/php-src/ext/hash/hash_tiger.c	[]	[]
/src/php-src/ext/standard/password_arginfo.h	[]	[]
/src/php-src/ext/uri/uriparser/src/UriFile.c	[]	[]
/src/php-src/ext/hash/hash_sha.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_table_text.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/hash.h	[]	[]
/src/php-src/ext/standard/type.c	[]	[]
/src/php-src/ext/standard/css.c	[]	[]
/src/php-src/ext/standard/crypt_blowfish.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/document.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/select_element.c	[]	[]
/src/php-src/Zend/Optimizer/zend_call_graph.c	[]	[]
/src/php-src/Zend/zend_call_stack.c	[]	[]
/src/php-src/ext/standard/base64.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/li_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/tag/tag.h	[]	[]
/src/php-src/Zend/zend_language_parser.y	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-parser', 'php-fuzz-execute']
/src/php-src/ext/uri/uriparser/src/UriQuery.c	[]	[]
/src/php-src/ext/exif/exif.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/sbst.h	[]	[]
/src/php-src/Zend/zend_gc.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/main/streams/cast.c	[]	[]
/src/php-src/Zend/zend_smart_str.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/css/syntax/parser.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_col_element.c	[]	[]
/src/php-src/Zend/zend_operators.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/standard/mail.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/diyfp.h	[]	[]
/src/php-src/ext/date/php_date_arginfo.h	[]	[]
/src/php-src/Zend/Optimizer/zend_dfg.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/selectors/pseudo_state.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_dfa_match.c	[]	[]
/src/php-src/ext/lexbor/lexbor/unicode/idna.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_head.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/node.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetHostRegName.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_table_body.c	[]	[]
/src/php-src/Zend/zend_llist.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/spl/spl_directory_arginfo.h	[]	[]
/src/php-src/Zend/Optimizer/pass1.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document.c	[]	[]
/src/php-src/ext/standard/iptc.c	[]	[]
/src/php-src/main/streams/memory.c	['php-fuzz-exif']	['php-fuzz-exif']
/src/php-src/ext/standard/ftok.c	[]	[]
/src/php-src/ext/hash/hash_haval.c	[]	[]
/src/php-src/main/php_network.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/body_element.c	[]	[]
/src/php-src/Zend/zend_call_stack.h	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/standard/sha1.c	[]	[]
/src/php-src/ext/hash/hash_murmur.c	[]	[]
/src/php-src/main/php_ticks.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/html/interfaces/embed_element.c	[]	[]
/src/php-src/ext/opcache/zend_persist.c	[]	[]
/src/php-src/ext/random/csprng.c	[]	[]
/src/php-src/Zend/Optimizer/zend_dump.c	[]	[]
/src/php-src/ext/standard/password.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer.h	[]	[]
/src/php-src/ext/lexbor/lexbor/css/parser.c	[]	[]
/src/php-src/sapi/fuzzer/fuzzer-json.c	['php-fuzz-json']	['php-fuzz-json']
/src/php-src/Zend/zend_stack.c	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']	['php-fuzz-exif', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-parser', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit', 'php-fuzz-execute']
/src/php-src/ext/lexbor/lexbor/encoding/multi.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/parser.h	[]	[]
/src/php-src/sapi/fuzzer/fuzzer-execute.c	['php-fuzz-execute']	['php-fuzz-execute']
/src/php-src/ext/uri/uriparser/src/UriMemory.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_substitute.c	[]	[]
/src/php-src/ext/lexbor/lexbor/encoding/encoding.c	[]	[]
/src/php-src/ext/random/php_random_csprng.h	[]	[]
/src/php-src/main/spprintf.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/foreign_content.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document_fragment.c	[]	[]
/src/php-src/ext/standard/user_filters_arginfo.h	[]	[]

Directories in report

Directory
/src/php-src/ext/date/
/src/php-src/ext/lexbor/lexbor/ns/
/src/php-src/Zend/
/src/php-src/ext/random/
/src/php-src/ext/lexbor/lexbor/html/tokenizer/
/src/php-src/ext/standard/
/src/php-src/ext/lexbor/lexbor/css/
/src/php-src/ext/hash/sha3/generic64lc/
/src/php-src/ext/hash/
/src/php-src/ext/lexbor/lexbor/html/
/src/php-src/ext/opcache/jit/ir/
/src/php-src/ext/uri/uriparser/src/
/src/php-src/ext/lexbor/lexbor/ports/posix/lexbor/core/
/src/php-src/ext/lexbor/lexbor/html/tree/
/src/php-src/ext/lexbor/lexbor/punycode/
/src/php-src/ext/opcache/jit/
/src/php-src/sapi/fuzzer/
/src/php-src/ext/lexbor/lexbor/css/syntax/
/src/php-src/ext/pcre/pcre2lib/
/src/php-src/ext/uri/
/src/php-src/ext/lexbor/lexbor/dom/interfaces/
/src/php-src/ext/lexbor/lexbor/unicode/
/src/php-src/ext/reflection/
/src/php-src/ext/opcache/jit/ir/dynasm/
/src/php-src/ext/spl/
/src/php-src/main/
/src/php-src/ext/hash/murmur/
/src/php-src/ext/lexbor/lexbor/encoding/
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/
/src/php-src/ext/opcache/
/src/php-src/ext/standard/libavifinfo/
/src/php-src/ext/lexbor/lexbor/core/
/src/php-src/ext/date/lib/
/src/php-src/ext/hash/xxhash/
/src/php-src/ext/lexbor/lexbor/css/selectors/
/src/php-src/ext/pcre/
/src/php-src/Zend/Optimizer/
/src/php-src/ext/exif/
/src/php-src/main/streams/
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer/
/src/php-src/ext/lexbor/lexbor/dom/
/src/php-src/ext/json/
/src/php-src/ext/lexbor/
/src/php-src/ext/lexbor/lexbor/url/
/src/php-src/ext/lexbor/lexbor/tag/
/src/php-src/ext/lexbor/lexbor/html/interfaces/