High level conclusions

Fuzzer php-fuzz-exif is blocked:

The runtime code coverage of php-fuzz-exif covers 24.92% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer php-fuzz-json is blocked:

The runtime code coverage of php-fuzz-json covers 22.20% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 11.81% of cyclomatic complexity.

Fuzzers reach 11.59% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

1699 / 14659

Cyclomatic complexity statically reachable by fuzzers

16216 / 137204

Runtime code coverage of functions

6620 / 14659

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: php-fuzz-json

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	8221	90.5%
gold	[1:9]	31	0.34%
yellow	[10:29]	63	0.69%
greenyellow	[30:49]	37	0.40%
lawngreen	50+	725	7.98%
All colors	9077	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1563	3840	zend_declare_typed_property	call site: 03840	zend_compile_property_hooks
688	7292	zend_string_delref	call site: 07292	zend_hash_update
514	6403	zend_hash_add_constant	call site: 06403	zend_error
288	2030	zend_ast_get_zval	call site: 02030	zend_ast_create_2
269	7021	zend_check_magic_method_implementation	call site: 07021	zend_hash_add_ptr
201	2513	ZSTR_GET_COPYABLE_CONCAT_PROPERTIES	call site: 02513	zend_throw_error
191	2321	zend_hash_release	call site: 02321	zend_array_destroy
176	8153	zend_llist_add_element	call site: 08153	php_output_start_user
174	1736	zval_get_long_func	call site: 01736	zend_incompatible_string_to_long_error
167	1527	zend_arena_create	call site: 01527	zendparse
165	5407	zend_hash_add_mem	call site: 05407	zend_error_noreturn
164	30	__zend_realloc	call site: 00030	_erealloc

Runtime coverage analysis

Covered functions

1026

Functions that are reachable but not covered

1226

Reachable functions

1576

Percentage of reachable functions covered

22.21%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-json.c	1
sapi/fuzzer/fuzzer-sapi.c	2
main/main.c	11
Zend/zend_string.c	11
Zend/zend_hash.c	74
Zend/zend_types.h	13
Zend/zend.c	34
Zend/zend_compile.c	355
Zend/zend_execute_API.c	41
Zend/zend_string.h	26
Zend/zend_smart_str.h	15
Zend/zend_alloc.c	72
Zend/zend_bitset.h	1
Zend/zend_gc.c	16
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	1
Zend/zend_exceptions.c	17
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	65
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	28
Zend/zend_API.h	13
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	6
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	20
Zend/zend_inheritance.c	65
Zend/zend_execute.c	72
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	5
Zend/zend_multiply.h	3
Zend/zend_compile.h	4
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	13
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	25
Zend/zend_llist.c	6
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	12
Zend/zend_smart_str.c	8
Zend/zend_enum.c	5
Zend/zend_vm_execute.h	3
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	9
Zend/zend_stream.c	3
Zend/zend_float.c	2
Zend/zend_fibers.c	3
Zend/zend_weakrefs.c	2
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
Zend/zend_ini.c	8
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	2
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
ext/json/json_parser.tab.c	6
ext/json/json_scanner.c	6
ext/standard/basic_functions.c	3
Zend/zend_autoload.c	1
main/rfc1867.c	1
main/streams/stream_errors.c	4

Fuzzer: php-fuzz-exif

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	8339	90.0%
gold	[1:9]	28	0.30%
yellow	[10:29]	61	0.65%
greenyellow	[30:49]	36	0.38%
lawngreen	50+	798	8.61%
All colors	9262	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1163	4240	smart_str_appendc_ex	call site: 04240	zend_ast_export_str
673	7292	zend_string_delref	call site: 07292	zend_hash_update
514	6403	zend_hash_add_constant	call site: 06403	zend_error
399	3840	zend_declare_typed_property	call site: 03840	zend_compile_property_hooks
288	2030	zend_ast_get_zval	call site: 02030	zend_ast_create_2
269	7021	zend_check_magic_method_implementation	call site: 07021	zend_hash_add_ptr
201	2513	ZSTR_GET_COPYABLE_CONCAT_PROPERTIES	call site: 02513	zend_throw_error
191	2321	zend_hash_release	call site: 02321	zend_array_destroy
165	5407	zend_hash_add_mem	call site: 05407	zend_error_noreturn
164	1746	zend_observer_error_notify	call site: 01746	zend_call_known_instance_method_with_0_params
158	34	zend_string_realloc	call site: 00034	zend_mm_realloc_heap
147	6063	zend_hash_index_add_new_ptr	call site: 06063	_emalloc

Runtime coverage analysis

Covered functions

1181

Functions that are reachable but not covered

1220

Reachable functions

1625

Percentage of reachable functions covered

24.92%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-exif.c	1
sapi/fuzzer/fuzzer-sapi.c	3
main/main.c	14
Zend/zend_string.c	11
Zend/zend_hash.c	76
Zend/zend_types.h	14
Zend/zend.c	34
Zend/zend_compile.c	355
Zend/zend_execute_API.c	41
Zend/zend_string.h	26
Zend/zend_smart_str.h	15
Zend/zend_alloc.c	72
Zend/zend_bitset.h	1
Zend/zend_gc.c	16
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	2
Zend/zend_exceptions.c	18
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	71
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	29
Zend/zend_API.h	13
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	8
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	22
Zend/zend_inheritance.c	65
Zend/zend_execute.c	72
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	5
Zend/zend_multiply.h	3
Zend/zend_compile.h	4
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	13
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	25
Zend/zend_llist.c	6
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	13
Zend/zend_smart_str.c	8
Zend/zend_enum.c	7
Zend/zend_vm_execute.h	3
Zend/zend_sort.c	6
Zend/zend_enum.h	4
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	14
Zend/zend_stream.c	3
Zend/zend_float.c	2
Zend/zend_fibers.c	3
Zend/zend_weakrefs.c	2
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
Zend/zend_ini.c	8
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	2
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	8
main/streams/filter.c	5
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
main/streams/memory.c	2
main/streams/stream_errors.c	18
ext/standard/var.c	4
ext/standard/basic_functions.c	3
Zend/zend_autoload.c	1
main/rfc1867.c	1

Fuzzer: php-fuzz-unserialize

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	8174	84.8%
gold	[1:9]	71	0.73%
yellow	[10:29]	88	0.91%
greenyellow	[30:49]	45	0.46%
lawngreen	50+	1253	13.0%
All colors	9631	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1163	4240	smart_str_appendc_ex	call site: 04240	zend_ast_export_str
514	6403	zend_hash_add_constant	call site: 06403	zend_error
288	2030	zend_ast_get_zval	call site: 02030	zend_ast_create_2
276	3963	zend_hash_index_update_ptr	call site: 03963	zend_compile_simple_var
269	7021	zend_check_magic_method_implementation	call site: 07021	zend_hash_add_ptr
201	2513	ZSTR_GET_COPYABLE_CONCAT_PROPERTIES	call site: 02513	zend_throw_error
188	7626	object_properties_init	call site: 07626	zend_ast_evaluate_ex
165	5407	zend_hash_add_mem	call site: 05407	zend_error_noreturn
158	34	zend_string_realloc	call site: 00034	zend_mm_realloc_heap
149	2321	zend_hash_release	call site: 02321	zend_array_destroy
142	7481	zend_hash_index_lookup	call site: 07481	zend_undefined_index
135	2715	zend_arena_destroy	call site: 02715	zend_file_context_begin

Runtime coverage analysis

Covered functions

1419

Functions that are reachable but not covered

1130

Reachable functions

1665

Percentage of reachable functions covered

32.13%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-unserialize.c	1
sapi/fuzzer/fuzzer-sapi.c	4
main/main.c	11
Zend/zend_string.c	11
Zend/zend_hash.c	76
Zend/zend_types.h	13
Zend/zend.c	35
Zend/zend_compile.c	355
Zend/zend_execute_API.c	41
Zend/zend_string.h	27
Zend/zend_smart_str.h	15
Zend/zend_alloc.c	72
Zend/zend_bitset.h	1
Zend/zend_gc.c	43
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	4
Zend/zend_exceptions.c	17
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	65
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	28
Zend/zend_API.h	14
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	8
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	20
Zend/zend_inheritance.c	65
Zend/zend_execute.c	77
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	5
Zend/zend_multiply.h	3
Zend/zend_compile.h	4
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	16
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	25
Zend/zend_llist.c	6
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	13
Zend/zend_smart_str.c	8
Zend/zend_enum.c	5
Zend/zend_vm_execute.h	3
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	9
Zend/zend_stream.c	3
Zend/zend_float.c	2
Zend/zend_fibers.c	20
Zend/zend_weakrefs.c	6
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
Zend/zend_ini.c	11
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	2
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
ext/standard/var_unserializer.re	21
ext/standard/incomplete_class.c	1
Zend/zend_weakrefs.h	2
ext/standard/basic_functions.c	3
Zend/zend_autoload.c	1
main/rfc1867.c	1
main/streams/stream_errors.c	4

Fuzzer: php-fuzz-unserializehash

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	8235	84.5%
gold	[1:9]	83	0.85%
yellow	[10:29]	93	0.95%
greenyellow	[30:49]	45	0.46%
lawngreen	50+	1280	13.1%
All colors	9736	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1163	4241	smart_str_appendc_ex	call site: 04241	zend_ast_export_str
514	6404	zend_hash_add_constant	call site: 06404	zend_error
288	2031	zend_ast_get_zval	call site: 02031	zend_ast_create_2
276	3964	zend_hash_index_update_ptr	call site: 03964	zend_compile_simple_var
269	7022	zend_check_magic_method_implementation	call site: 07022	zend_hash_add_ptr
201	2514	ZSTR_GET_COPYABLE_CONCAT_PROPERTIES	call site: 02514	zend_throw_error
188	7627	object_properties_init	call site: 07627	zend_ast_evaluate_ex
165	5408	zend_hash_add_mem	call site: 05408	zend_error_noreturn
158	35	zend_string_realloc	call site: 00035	zend_mm_realloc_heap
149	2322	zend_hash_release	call site: 02322	zend_array_destroy
142	7482	zend_hash_index_lookup	call site: 07482	zend_undefined_index
135	2716	zend_arena_destroy	call site: 02716	zend_file_context_begin

Runtime coverage analysis

Covered functions

1587

Functions that are reachable but not covered

1127

Reachable functions

1678

Percentage of reachable functions covered

32.84%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-unserializehash.c	1
sapi/fuzzer/fuzzer-sapi.c	5
main/main.c	13
Zend/zend_string.c	11
Zend/zend_hash.c	78
Zend/zend_types.h	13
Zend/zend.c	35
Zend/zend_compile.c	355
Zend/zend_execute_API.c	41
Zend/zend_string.h	27
Zend/zend_smart_str.h	15
Zend/zend_alloc.c	72
Zend/zend_bitset.h	1
Zend/zend_gc.c	43
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	5
Zend/zend_exceptions.c	17
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	65
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	28
Zend/zend_API.h	14
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	8
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	22
Zend/zend_inheritance.c	65
Zend/zend_execute.c	77
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	5
Zend/zend_multiply.h	3
Zend/zend_compile.h	4
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	16
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	25
Zend/zend_llist.c	6
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	13
Zend/zend_smart_str.c	8
Zend/zend_enum.c	5
Zend/zend_vm_execute.h	3
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	10
Zend/zend_stream.c	3
Zend/zend_float.c	2
Zend/zend_fibers.c	20
Zend/zend_weakrefs.c	6
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
Zend/zend_ini.c	11
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	2
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
ext/standard/var_unserializer.re	21
ext/standard/incomplete_class.c	1
ext/standard/var.c	4
Zend/zend_weakrefs.h	2
ext/standard/basic_functions.c	3
Zend/zend_autoload.c	1
main/rfc1867.c	1
main/streams/stream_errors.c	4

Fuzzer: php-fuzz-parser

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4169	43.9%
gold	[1:9]	381	4.01%
yellow	[10:29]	191	2.01%
greenyellow	[30:49]	58	0.61%
lawngreen	50+	4680	49.3%
All colors	9479	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
196	7430	zend_dval_to_lval_safe	call site: 07430	zend_incompatible_double_to_long_error
187	7627	object_properties_init	call site: 07627	zend_ast_evaluate_ex
176	8154	zend_llist_add_element	call site: 08154	php_output_start_user
156	7135	zend_file_context_end	call site: 07135	zend_ast_destroy
150	7816	zend_fetch_debug_backtrace	call site: 07816	_zend_new_array
92	101	_zend_bailout	call site: 00101	zend_mm_safe_error
91	1604	zend_exception_set_previous	call site: 01604	zend_user_exception_handler
91	8912	zend_gc_collect_cycles	call site: 08912	gc_call_destructors_in_fiber
80	3074	zend_object_dtor_property	call site: 03074	i_zval_ptr_dtor
77	1399	zend_array_destroy	call site: 01399	_emalloc
69	2352	zend_ast_destroy	call site: 02352	zend_modifier_token_to_flag
64	8621	zend_hash_str_del	call site: 08621	php_error_docref

Runtime coverage analysis

Covered functions

1812

Functions that are reachable but not covered

595

Reachable functions

1656

Percentage of reachable functions covered

64.07%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-parser.c	1
sapi/fuzzer/fuzzer-sapi.c	4
main/main.c	11
Zend/zend_string.c	11
Zend/zend_hash.c	78
Zend/zend_types.h	13
Zend/zend.c	35
Zend/zend_compile.c	355
Zend/zend_execute_API.c	43
Zend/zend_string.h	27
Zend/zend_smart_str.h	15
Zend/zend_alloc.c	72
Zend/zend_bitset.h	1
Zend/zend_gc.c	43
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	4
Zend/zend_exceptions.c	17
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	65
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	34
Zend/zend_API.h	13
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	6
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	20
Zend/zend_inheritance.c	65
Zend/zend_execute.c	73
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	5
Zend/zend_multiply.h	3
Zend/zend_compile.h	4
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	16
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	26
Zend/zend_llist.c	7
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	12
Zend/zend_smart_str.c	8
Zend/zend_enum.c	5
Zend/zend_vm_execute.h	4
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	9
Zend/zend_stream.c	6
Zend/zend_float.c	2
Zend/zend_fibers.c	20
Zend/zend_weakrefs.c	6
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
Zend/zend_ini.c	11
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	7
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
Zend/zend_weakrefs.h	2
ext/standard/basic_functions.c	3
Zend/zend_autoload.c	1
main/rfc1867.c	1
main/streams/stream_errors.c	4

Fuzzer: php-fuzz-execute

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2880	30.3%
gold	[1:9]	1841	19.4%
yellow	[10:29]	1048	11.0%
greenyellow	[30:49]	418	4.40%
lawngreen	50+	3292	34.7%
All colors	9479	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
85	108	zend_mmap_set_name	call site: 00108	zend_mm_safe_error
72	4517	zend_ast_export_ex	call site: 04517	smart_str_appends
69	2352	zend_ast_destroy	call site: 02352	zend_modifier_token_to_flag
56	35	zend_string_realloc	call site: 00035	zend_mm_realloc_heap
56	8531	zend_mm_shutdown	call site: 08531	php_output_shutdown
45	8477	virtual_cwd_deactivate	call site: 08477	zend_unregister_ini_entries_ex
42	4666	zend_ast_export_ex	call site: 04666	smart_str_appends
39	2258	zend_ast_create_arg_list_2	call site: 02258	zend_ast_create_fcc
35	7839	zend_fetch_debug_backtrace	call site: 07839	_zend_new_array
32	2556	zend_ast_create_cast	call site: 02556	zend_ast_create_cast
30	2169	zend_ast_create_ex_2	call site: 02169	zend_ast_list_add
28	2053	zend_ast_create_1	call site: 02053	zend_ast_create_2

Runtime coverage analysis

Covered functions

4418

Functions that are reachable but not covered

273

Reachable functions

1656

Percentage of reachable functions covered

83.51%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-execute.c	1
sapi/fuzzer/fuzzer-sapi.c	4
main/main.c	11
Zend/zend_string.c	11
Zend/zend_hash.c	78
Zend/zend_types.h	13
Zend/zend.c	35
Zend/zend_compile.c	355
Zend/zend_execute_API.c	43
Zend/zend_string.h	27
Zend/zend_smart_str.h	15
Zend/zend_alloc.c	72
Zend/zend_bitset.h	1
Zend/zend_gc.c	43
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	4
Zend/zend_exceptions.c	17
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	65
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	34
Zend/zend_API.h	13
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	6
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	20
Zend/zend_inheritance.c	65
Zend/zend_execute.c	73
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	5
Zend/zend_multiply.h	3
Zend/zend_compile.h	4
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	16
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	26
Zend/zend_llist.c	7
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	12
Zend/zend_smart_str.c	8
Zend/zend_enum.c	5
Zend/zend_vm_execute.h	4
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	9
Zend/zend_stream.c	6
Zend/zend_float.c	2
Zend/zend_fibers.c	20
Zend/zend_weakrefs.c	6
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
Zend/zend_ini.c	11
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	7
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
Zend/zend_weakrefs.h	2
ext/standard/basic_functions.c	3
Zend/zend_autoload.c	1
main/rfc1867.c	1
main/streams/stream_errors.c	4

Fuzzer: php-fuzz-function-jit

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2301	24.2%
gold	[1:9]	670	7.05%
yellow	[10:29]	668	7.03%
greenyellow	[30:49]	372	3.91%
lawngreen	50+	5483	57.7%
All colors	9494	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
85	104	zend_mmap_set_name	call site: 00104	zend_mm_safe_error
69	2347	zend_ast_destroy	call site: 02347	zend_modifier_token_to_flag
56	8533	zend_mm_shutdown	call site: 08533	php_output_shutdown
54	32	zend_string_realloc	call site: 00032	zend_mm_realloc_heap
45	8479	virtual_cwd_deactivate	call site: 08479	zend_unregister_ini_entries_ex
38	2254	zend_ast_create_arg_list_2	call site: 02254	zend_ast_create_arg_list_1
35	7834	zend_fetch_debug_backtrace	call site: 07834	_zend_new_array
32	2551	zend_ast_create_cast	call site: 02551	zend_ast_create_cast
30	2164	zend_ast_create_ex_2	call site: 02164	zend_ast_list_add
28	2048	zend_ast_create_1	call site: 02048	zend_ast_create_2
26	9325	destroy_zend_class	call site: 09325	zval_internal_ptr_dtor
25	2628	zend_ast_list_rtrim	call site: 02628	zend_ast_list_add

Runtime coverage analysis

Covered functions

5951

Functions that are reachable but not covered

245

Reachable functions

1657

Percentage of reachable functions covered

85.21%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-function-jit.c	1
Zend/zend_string.h	27
Zend/zend_alloc.c	72
Zend/zend.c	35
Zend/zend_compile.c	355
Zend/zend_execute_API.c	43
Zend/zend_smart_str.h	15
Zend/zend_types.h	13
Zend/zend_bitset.h	1
Zend/zend_gc.c	43
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	4
Zend/zend_exceptions.c	17
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	65
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	34
Zend/zend_hash.c	78
Zend/zend_API.h	13
Zend/zend_string.c	11
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	6
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	20
Zend/zend_inheritance.c	65
Zend/zend_execute.c	73
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	5
Zend/zend_multiply.h	3
Zend/zend_compile.h	4
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	16
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	26
Zend/zend_llist.c	7
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	12
Zend/zend_smart_str.c	8
Zend/zend_enum.c	5
Zend/zend_vm_execute.h	4
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
Zend/zend_ini.c	11
sapi/fuzzer/fuzzer-sapi.c	4
main/main.c	11
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	9
Zend/zend_stream.c	6
Zend/zend_float.c	2
Zend/zend_fibers.c	20
Zend/zend_weakrefs.c	6
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	7
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
Zend/zend_weakrefs.h	2
ext/standard/basic_functions.c	3
Zend/zend_autoload.c	1
main/rfc1867.c	1
main/streams/stream_errors.c	4
sapi/fuzzer/fuzzer-execute-common.h	1

Fuzzer: php-fuzz-tracing-jit

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2000	21.0%
gold	[1:9]	855	9.00%
yellow	[10:29]	646	6.80%
greenyellow	[30:49]	373	3.92%
lawngreen	50+	5621	59.1%
All colors	9495	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
85	104	zend_mmap_set_name	call site: 00104	zend_mm_safe_error
69	2347	zend_ast_destroy	call site: 02347	zend_modifier_token_to_flag
56	8533	zend_mm_shutdown	call site: 08533	php_output_shutdown
54	32	zend_string_realloc	call site: 00032	zend_mm_realloc_heap
45	8479	virtual_cwd_deactivate	call site: 08479	zend_unregister_ini_entries_ex
39	2253	zend_ast_create_arg_list_2	call site: 02253	zend_ast_create_fcc
35	7834	zend_fetch_debug_backtrace	call site: 07834	_zend_new_array
32	2551	zend_ast_create_cast	call site: 02551	zend_ast_create_cast
30	2164	zend_ast_create_ex_2	call site: 02164	zend_ast_list_add
28	2048	zend_ast_create_1	call site: 02048	zend_ast_create_2
26	9325	destroy_zend_class	call site: 09325	zval_internal_ptr_dtor
25	2628	zend_ast_list_rtrim	call site: 02628	zend_ast_list_add

Runtime coverage analysis

Covered functions

6073

Functions that are reachable but not covered

236

Reachable functions

1657

Percentage of reachable functions covered

85.76%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
sapi/fuzzer/fuzzer-tracing-jit.c	1
Zend/zend_string.h	27
Zend/zend_alloc.c	72
Zend/zend.c	35
Zend/zend_compile.c	355
Zend/zend_execute_API.c	43
Zend/zend_smart_str.h	15
Zend/zend_types.h	13
Zend/zend_bitset.h	1
Zend/zend_gc.c	43
Zend/zend_mmap.h	1
Zend/zend_variables.c	5
Zend/zend_variables.h	3
Zend/zend_gc.h	4
Zend/zend_exceptions.c	17
Zend/zend_operators.h	23
Zend/zend_operators.c	38
Zend/zend_API.c	65
Zend/zend_strtod.c	32
Zend/zend_smart_string.h	1
Zend/zend_arena.h	3
Zend/zend_hash.h	34
Zend/zend_hash.c	78
Zend/zend_API.h	13
Zend/zend_string.c	11
Zend/zend_ast.h	18
Zend/zend_constants.c	12
Zend/zend_objects_API.h	6
Zend/zend_objects_API.c	9
Zend/zend_object_handlers.c	20
Zend/zend_inheritance.c	65
Zend/zend_execute.c	73
Zend/zend_attributes.c	11
Zend/zend_execute.h	12
Zend/zend_objects.c	5
Zend/zend_multiply.h	3
Zend/zend_compile.h	4
Zend/zend_closures.c	4
Zend/zend_exceptions.h	1
Zend/zend_language_scanner.l	27
Zend/zend_stack.c	10
Zend/zend_ptr_stack.c	6
Zend/zend_multibyte.c	5
Zend/zend_language_parser.c	3
Zend/zend_observer.c	16
Zend/zend_observer.h	7
Zend/zend_atomic.h	3
Zend/zend_signal.c	7
Zend/zend_ptr_stack.h	3
Zend/zend_ast.c	71
Zend/zend_opcode.c	26
Zend/zend_llist.c	7
Zend/zend_language_parser.y	1
Zend/zend_call_stack.h	2
Zend/zend_constants.h	1
Zend/zend_lazy_objects.h	5
Zend/zend_property_hooks.c	2
Zend/zend_lazy_objects.c	12
Zend/zend_smart_str.c	8
Zend/zend_enum.c	5
Zend/zend_vm_execute.h	4
Zend/zend_sort.c	6
Zend/zend_enum.h	2
Zend/zend_builtin_functions.c	3
Zend/zend_generators.c	1
Zend/zend_ini.c	11
sapi/fuzzer/fuzzer-sapi.c	4
main/main.c	11
main/output.c	31
Zend/zend_hrtime.h	1
Zend/zend_list.c	9
Zend/zend_stream.c	6
Zend/zend_float.c	2
Zend/zend_fibers.c	20
Zend/zend_weakrefs.c	6
Zend/zend_extensions.c	3
main/SAPI.c	19
main/strlcat.c	1
ext/standard/html.c	14
ext/standard/head.c	1
main/snprintf.c	9
main/strlcpy.c	1
main/php_variables.c	7
Zend/zend_virtual_cwd.c	4
Zend/Optimizer/zend_optimizer.c	1
Zend/Optimizer/zend_func_info.c	1
main/streams/streams.c	2
main/streams/filter.c	1
main/streams/transports.c	1
main/php_ini.c	1
main/php_ticks.c	2
Zend/zend_weakrefs.h	2
ext/standard/basic_functions.c	3
Zend/zend_autoload.c	1
main/rfc1867.c	1
main/streams/stream_errors.c	4
sapi/fuzzer/fuzzer-execute-common.h	1

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
zif_opcache_compile_file	/src/php-src/ext/opcache/zend_accelerator_module.c	2	['N/A', 'N/A']	163	0	168	38	7	2956	0	45061	31822

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

3247 / 14659

Cyclomatic complexity statically reachable by fuzzers

47984 / 137204

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

sapi/fuzzer/fuzzer-json.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_declare_typed_property', 'zend_string_delref', 'zend_hash_add_constant', 'zend_ast_get_zval', 'zend_check_magic_method_implementation', 'ZSTR_GET_COPYABLE_CONCAT_PROPERTIES', 'zend_hash_release', 'zend_llist_add_element', 'zval_get_long_func', 'zend_arena_create']

sapi/fuzzer/fuzzer-exif.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['smart_str_appendc_ex', 'zend_string_delref', 'zend_hash_add_constant', 'zend_declare_typed_property', 'zend_ast_get_zval', 'zend_check_magic_method_implementation', 'ZSTR_GET_COPYABLE_CONCAT_PROPERTIES', 'zend_hash_release', 'zend_hash_add_mem', 'zend_observer_error_notify']

sapi/fuzzer/fuzzer-unserialize.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['smart_str_appendc_ex', 'zend_hash_add_constant', 'zend_ast_get_zval', 'zend_hash_index_update_ptr', 'zend_check_magic_method_implementation', 'ZSTR_GET_COPYABLE_CONCAT_PROPERTIES', 'object_properties_init', 'zend_hash_add_mem', 'zend_string_realloc', 'zend_hash_release']

sapi/fuzzer/fuzzer-unserializehash.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['smart_str_appendc_ex', 'zend_hash_add_constant', 'zend_ast_get_zval', 'zend_hash_index_update_ptr', 'zend_check_magic_method_implementation', 'ZSTR_GET_COPYABLE_CONCAT_PROPERTIES', 'object_properties_init', 'zend_hash_add_mem', 'zend_string_realloc', 'zend_hash_release']

sapi/fuzzer/fuzzer-parser.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_dval_to_lval_safe', 'object_properties_init', 'zend_llist_add_element', 'zend_file_context_end', 'zend_fetch_debug_backtrace', '_zend_bailout', 'zend_exception_set_previous', 'zend_gc_collect_cycles', 'zend_object_dtor_property', 'zend_array_destroy']

sapi/fuzzer/fuzzer-execute.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_mmap_set_name', 'zend_ast_export_ex', 'zend_ast_destroy', 'zend_string_realloc', 'zend_mm_shutdown', 'virtual_cwd_deactivate', 'zend_ast_create_arg_list_2', 'zend_fetch_debug_backtrace', 'zend_ast_create_cast']

sapi/fuzzer/fuzzer-function-jit.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_mmap_set_name', 'zend_ast_destroy', 'zend_mm_shutdown', 'zend_string_realloc', 'virtual_cwd_deactivate', 'zend_ast_create_arg_list_2', 'zend_fetch_debug_backtrace', 'zend_ast_create_cast', 'zend_ast_create_ex_2', 'zend_ast_create_1']

sapi/fuzzer/fuzzer-tracing-jit.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['zend_mmap_set_name', 'zend_ast_destroy', 'zend_mm_shutdown', 'zend_string_realloc', 'virtual_cwd_deactivate', 'zend_ast_create_arg_list_2', 'zend_fetch_debug_backtrace', 'zend_ast_create_cast', 'zend_ast_create_ex_2', 'zend_ast_create_1']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
zend_mm_shutdown	108	21	19.44%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
zend_call_stack_init	34	12	35.29%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
zm_activate_zend_accelerator	113	35	30.97%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
accel_post_startup	158	65	41.13%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
accel_finish_startup	66	5	7.575%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
zend_jit_config	52	13	25.0%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
zend_shared_alloc_startup	88	46	52.27%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_pcre2_config	100	27	27.0%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
sapi_deactivate_module	35	11	31.42%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
sapi_header_op	156	81	51.92%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_binary_init	35	6	17.14%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
OnSetFacility	125	38	30.4%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_init_config	193	73	37.82%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_ini_parser_cb	92	20	21.73%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_build_argv	46	6	13.04%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
format_converter	446	173	38.78%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
xbuf_format_converter	445	244	54.83%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
zend_error_zstr_at	143	72	50.34%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
exif_scan_thumbnail	69	8	11.59%	['php-fuzz-exif']
php_image_type_to_mime_type	47	13	27.65%	['php-fuzz-execute', 'php-fuzz-exif']
php_verror	150	40	26.66%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_stream_memory_seek	59	25	42.37%	['php-fuzz-execute', 'php-fuzz-exif']
_php_stream_seek	87	30	34.48%	['php-fuzz-execute', 'php-fuzz-exif']
_convert_to_string	54	28	51.85%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
timelib_parse_posix_str	55	28	50.90%	['php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
read_64bit_types	73	27	36.98%	['php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_date_period_initialize_from_hash	98	7	7.142%	['php-fuzz-unserializehash', 'php-fuzz-unserialize']
zim_SplPriorityQueue___unserialize	35	10	28.57%	['php-fuzz-unserialize']
zim_SplHeap___unserialize	35	16	45.71%	['php-fuzz-unserialize']
spl_heap_object_new_ex	49	25	51.02%	['php-fuzz-unserialize']
spl_object_storage_attach	40	5	12.5%	['php-fuzz-function-jit', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit']
uri_unserialize	43	16	37.20%	['php-fuzz-unserialize']
SHA256Transform	39	5	12.82%	['php-fuzz-unserializehash']
XXH32_finalize	63	24	38.09%	['php-fuzz-unserializehash']
zend_hash_merge	79	41	51.89%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
destroy_zend_class	207	101	48.79%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
convert_to_double	52	9	17.30%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
zend_get_file_handle_timestamp	68	27	39.70%	['php-fuzz-execute', 'php-fuzz-parser']
php_register_variable_ex	179	49	27.37%	['php-fuzz-tracing-jit', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-parser']
zend_dfa_optimize_calls	67	14	20.89%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
sccp_optimize_op_array	36	17	47.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ssa_verify_integrity	285	154	54.03%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
zend_optimize	73	33	45.20%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
zif_func_get_args	60	13	21.66%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
slow_index_convert_w	74	37	50.0%	['php-fuzz-parser', 'php-fuzz-json', 'php-fuzz-unserializehash', 'php-fuzz-unserialize', 'php-fuzz-tracing-jit', 'php-fuzz-exif', 'php-fuzz-function-jit', 'php-fuzz-execute']
convert_to_long	54	16	29.62%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
tsrm_realpath_r	156	77	49.35%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ADD_SPEC_CONST_CONST_HANDLER	33	10	30.30%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_SUB_SPEC_CONST_CONST_HANDLER	33	10	30.30%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_MUL_SPEC_CONST_CONST_HANDLER	35	10	28.57%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_IS_EQUAL_SPEC_TMP_TMP_JMPZ_HANDLER	54	28	51.85%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_IS_NOT_EQUAL_SPEC_TMP_CONST_JMPZ_HANDLER	54	21	38.88%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_IS_NOT_EQUAL_SPEC_TMP_TMP_JMPZ_HANDLER	54	18	33.33%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_IS_NOT_EQUAL_SPEC_CV_TMP_JMPNZ_HANDLER	54	21	38.88%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_IS_SMALLER_SPEC_CONST_TMPVARCV_JMPNZ_HANDLER	39	20	51.28%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_JMPNZ_HANDLER	43	19	44.18%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_CONST_HANDLER	137	62	45.25%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_TMP_HANDLER	142	69	48.59%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_CV_HANDLER	137	46	33.57%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_VAR_TMP_OP_DATA_CONST_HANDLER	138	61	44.20%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_VAR_TMP_OP_DATA_TMP_HANDLER	143	54	37.76%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_TMP_HANDLER	142	51	35.91%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_CV_HANDLER	137	56	40.87%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_TMP_HANDLER	141	77	54.60%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_CV_TMP_OP_DATA_CV_HANDLER	137	51	37.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_CV_UNUSED_OP_DATA_TMP_HANDLER	141	62	43.97%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_CV_UNUSED_OP_DATA_CV_HANDLER	136	70	51.47%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_DIM_SPEC_CV_CV_OP_DATA_TMP_HANDLER	141	77	54.60%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_TMP_HANDLER	138	70	50.72%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_CV_HANDLER	136	63	46.32%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_TMP_OP_DATA_TMP_HANDLER	138	30	21.73%	['php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_CV_HANDLER	135	30	22.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_CV_CONST_OP_DATA_TMP_HANDLER	137	73	53.28%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_CV_TMP_OP_DATA_TMP_HANDLER	138	37	26.81%	['php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_CV_TMP_OP_DATA_CV_HANDLER	136	41	30.14%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_CONST_HANDLER	135	35	25.92%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_DIM_OP_SPEC_VAR_CV_HANDLER	89	46	51.68%	['php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ASSIGN_OBJ_OP_SPEC_VAR_TMP_HANDLER	79	27	34.17%	['php-fuzz-execute']
ZEND_QM_ASSIGN_SPEC_CONST_HANDLER	34	18	52.94%	['php-fuzz-execute']
ZEND_QM_ASSIGN_SPEC_TMP_HANDLER	34	14	41.17%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_QM_ASSIGN_SPEC_CV_HANDLER	34	16	47.05%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FAST_CONCAT_SPEC_CV_CV_HANDLER	115	58	50.43%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_RETURN_SPEC_CONST_HANDLER	69	21	30.43%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
zend_leave_helper_SPEC	111	48	43.24%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_RETURN_SPEC_TMP_HANDLER	69	22	31.88%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_SEND_VAR_EX_SPEC_CV_UNUSED_HANDLER	55	20	36.36%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CONST_HANDLER	100	48	48.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_TMP_HANDLER	101	43	42.57%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_UNUSED_HANDLER	100	21	21.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CV_HANDLER	100	46	46.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_CONST_HANDLER	101	36	35.64%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_TMP_HANDLER	102	40	39.21%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_UNUSED_HANDLER	101	19	18.81%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_CV_HANDLER	101	29	28.71%	['php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_UNUSED_HANDLER	101	20	19.80%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_CONST_HANDLER	100	49	49.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_TMP_HANDLER	101	47	46.53%	['php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_UNUSED_HANDLER	100	27	27.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_UNSET_DIM_SPEC_VAR_CONST_HANDLER	93	46	49.46%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FE_RESET_R_SPEC_CONST_HANDLER	61	20	32.78%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_DIM_R_SPEC_CONST_CONST_HANDLER	33	13	39.39%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_DIM_R_SPEC_CONST_TMP_HANDLER	34	14	41.17%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_CONST_CONST_HANDLER	143	20	13.98%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_CONST_TMP_HANDLER	144	21	14.58%	['php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_CONST_CV_HANDLER	143	20	13.98%	['php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_TMPVAR_CONST_HANDLER	144	75	52.08%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_TMPVAR_TMP_HANDLER	145	49	33.79%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_TMPVAR_CV_HANDLER	144	23	15.97%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_UNUSED_TMP_HANDLER	144	40	27.77%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_UNUSED_CV_HANDLER	143	36	25.17%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_CV_TMP_HANDLER	144	54	37.5%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_OBJ_R_SPEC_CV_CV_HANDLER	143	52	36.36%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_OBJ_IS_SPEC_TMPVAR_CONST_HANDLER	104	37	35.57%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_CLONE_SPEC_CONST_HANDLER	50	19	38.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_RETURN_BY_REF_SPEC_CONST_HANDLER	48	24	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_RETURN_BY_REF_SPEC_TMP_HANDLER	51	22	43.13%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_RETURN_BY_REF_SPEC_CV_HANDLER	48	22	45.83%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_INIT_METHOD_CALL_SPEC_CONST_CONST_HANDLER	128	28	21.87%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CONST_HANDLER	128	56	43.75%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_CONST_TMP_HANDLER	121	60	49.58%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_CONST_UNUSED_HANDLER	116	28	24.13%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_CONST_HANDLER	116	57	49.13%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_TMP_HANDLER	121	42	34.71%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_CV_HANDLER	116	58	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_UNUSED_UNUSED_HANDLER	116	39	33.62%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_SEND_VAR_SPEC_CV_UNUSED_HANDLER	39	19	48.71%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_VERIFY_RETURN_TYPE_SPEC_CONST_UNUSED_HANDLER	58	25	43.10%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_VERIFY_RETURN_TYPE_SPEC_TMP_UNUSED_HANDLER	58	26	44.82%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FE_RESET_RW_SPEC_CONST_HANDLER	84	22	26.19%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FE_RESET_RW_SPEC_TMP_HANDLER	86	44	51.16%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_INSTANCEOF_SPEC_TMP_UNUSED_HANDLER	40	18	45.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_CLASS_NAME_SPEC_TMP_HANDLER	56	12	21.42%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_CLASS_NAME_SPEC_CV_HANDLER	54	18	33.33%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_YIELD_SPEC_CONST_CONST_HANDLER	86	38	44.18%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_YIELD_SPEC_CONST_UNUSED_HANDLER	86	44	51.16%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_YIELD_SPEC_TMP_UNUSED_HANDLER	87	38	43.67%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_YIELD_SPEC_VAR_UNUSED_HANDLER	88	45	51.13%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_YIELD_SPEC_UNUSED_UNUSED_HANDLER	86	27	31.39%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_YIELD_SPEC_CV_UNUSED_HANDLER	86	47	54.65%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_GENERATOR_RETURN_SPEC_CONST_HANDLER	33	16	48.48%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_GENERATOR_RETURN_SPEC_TMP_HANDLER	33	14	42.42%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_YIELD_FROM_SPEC_CONST_HANDLER	78	22	28.20%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_COALESCE_SPEC_CONST_HANDLER	35	18	51.42%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_COALESCE_SPEC_TMP_HANDLER	35	18	51.42%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_COALESCE_SPEC_CV_HANDLER	35	19	54.28%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_FETCH_CLASS_CONSTANT_SPEC_UNUSED_CONST_HANDLER	107	57	53.27%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_COUNT_SPEC_CONST_UNUSED_HANDLER	44	18	40.90%	['php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_COUNT_SPEC_TMP_UNUSED_HANDLER	45	21	46.66%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_MATCH_SPEC_CONST_CONST_HANDLER	34	16	47.05%	['php-fuzz-execute']
ZEND_JMP_NULL_SPEC_CONST_HANDLER	37	19	51.35%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
ZEND_JMP_NULL_SPEC_TMP_HANDLER	38	19	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
timelib_fetch_timezone_offset	37	14	37.83%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_json_encode_array	191	102	53.40%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
cache_script_in_shared_memory	95	38	40.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
zend_accel_error_va_args	53	8	15.09%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
zend_accel_persist_class_table	68	24	35.29%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
check_char_prop	53	25	47.16%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
_pcre2_check_escape_8	179	78	43.57%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
caseCHAR_6caseCHAR_7caseCHAR_8caseCHAR_9	164	88	53.65%
caseCHAR_5caseCHAR_6caseCHAR_7caseCHAR_8caseCHAR_9	407	146	35.87%
first_significant_code	52	24	46.15%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
is_startline	65	29	44.61%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
_pcre2_extuni_8	39	19	48.71%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_pcre2_pattern_info	138	17	12.31%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
_pcre2_xclass_8	172	85	49.41%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_pcre_match_impl	243	106	43.62%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
populate_subpat_array	66	19	28.78%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
_preg_replace_common	53	19	35.84%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_preg_replace_func_impl	39	14	35.89%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_random_bytes_ex	74	18	24.32%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
zim_Random_Engine_PcgOneseq128XslRr64___construct	37	16	43.24%	['php-fuzz-tracing-jit', 'php-fuzz-execute']
zim_Random_Engine_Xoshiro256StarStar___construct	43	18	41.86%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_random_range32	42	23	54.76%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
zim_Reflection_getModifierNames	41	19	46.34%	['php-fuzz-execute']
zim_ReflectionParameter___construct	154	82	53.24%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
zim_ReflectionParameter_getClass	40	18	45.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
zim_ReflectionClass_getProperty	54	19	35.18%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
zim_ReflectionProperty_getRawValue	48	26	54.16%	['php-fuzz-execute']
zim_ReflectionProperty_isReadable	99	22	22.22%	['php-fuzz-execute']
zim_ReflectionProperty_isWritable	71	19	26.76%	['php-fuzz-execute']
get_hash_key	47	23	48.93%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
spl_array_read_dimension_ex	31	13	41.93%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
spl_array_get_dimension_ptr	82	43	52.43%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
spl_array_write_dimension_ex	43	23	53.48%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
spl_array_unset_dimension_ex	42	16	38.09%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
spl_array_get_hash_table_ptr	31	14	45.16%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
spl_fixedarray_object_get_properties_for	31	17	54.83%	['php-fuzz-execute']
spl_limit_it_seek	33	15	45.45%	['php-fuzz-execute']
zif_extract	91	40	43.95%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
_php_search_array	83	42	50.60%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_compact_var	36	11	30.55%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_get_data_compare_func_unstable	57	18	31.57%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
_php_error_log	42	16	38.09%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
zif_glob	65	28	43.07%	['php-fuzz-execute']
zif_file	75	36	48.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_getimagetype	88	41	46.59%	['php-fuzz-execute']
php_get_xbm	51	18	35.29%	['php-fuzz-execute']
php_getimagesize_from_stream	115	43	37.39%	['php-fuzz-execute']
_php_math_round	38	20	52.63%	['php-fuzz-execute']
php_round_helper	62	10	16.12%	['php-fuzz-execute']
php_stream_url_wrap_php	209	53	25.35%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
zif_explode	31	17	54.83%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_basename	68	19	27.94%	['php-fuzz-tracing-jit', 'php-fuzz-execute']
php_stripcslashes	56	20	35.71%	['php-fuzz-execute']
php_str_replace_in_subject	135	40	29.62%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
user_filter_factory_create	67	35	52.23%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_debug_zval_dump	118	62	52.54%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_unserialize_with_options	106	44	41.50%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_log_err_with_severity	43	11	25.58%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_message_handler_for_zend	71	14	19.71%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
glob0	102	23	22.54%	['php-fuzz-execute']
globtilde	42	10	23.80%	['php-fuzz-execute']
glob2	52	24	46.15%	['php-fuzz-execute']
php_stream_filter_append_ex	66	14	21.21%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_stream_parse_fopen_modes	41	21	51.21%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_stdiop_read	36	17	47.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_stdiop_close	43	17	39.53%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_stdiop_set_option	152	14	9.210%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
php_stream_error_operation_end	73	22	30.13%	['php-fuzz-tracing-jit', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-exif']
_php_stream_copy_to_mem	72	26	36.11%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
_php_stream_open_wrapper_ex	145	77	53.10%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit', 'php-fuzz-execute']
zend_ssa_replace_use_chain	35	16	45.71%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
convert_to_boolean	63	17	26.98%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_EQUAL_SPEC_CONST_CONST_HANDLER	54	10	18.51%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_NOT_EQUAL_SPEC_TMP_CONST_JMPNZ_HANDLER	54	26	48.14%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_TMP_JMPZ_HANDLER	54	23	42.59%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_SMALLER_SPEC_CONST_CONST_HANDLER	39	10	25.64%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_HANDLER	43	19	44.18%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_TMP_OP_DATA_CV_HANDLER	138	67	48.55%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CONST_HANDLER	137	55	40.14%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_TMP_HANDLER	142	60	42.25%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CV_HANDLER	137	75	54.74%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_TMP_OP_DATA_CONST_HANDLER	137	32	23.35%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_TMP_OP_DATA_TMP_HANDLER	139	31	22.30%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CV_OP_DATA_CONST_HANDLER	136	24	17.64%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CV_OP_DATA_TMP_HANDLER	138	37	26.81%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CV_OP_DATA_CV_HANDLER	136	38	27.94%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_CONST_HANDLER	135	30	22.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_TMP_HANDLER	137	29	21.16%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_TMP_OP_DATA_CONST_HANDLER	136	36	26.47%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_TMP_HANDLER	137	39	28.46%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_CV_HANDLER	135	43	31.85%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_OP_SPEC_VAR_UNUSED_HANDLER	89	42	47.19%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_OP_SPEC_VAR_CV_HANDLER	78	26	33.33%	['php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_OP_SPEC_CV_TMP_HANDLER	78	29	37.17%	['php-fuzz-function-jit']
ZEND_SEND_VAR_NO_REF_EX_SPEC_VAR_CONST_HANDLER	57	20	35.08%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FAST_CONCAT_SPEC_CONST_CONST_HANDLER	115	27	23.47%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_UNSET_DIM_SPEC_VAR_TMP_HANDLER	94	43	45.74%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_UNSET_OBJ_SPEC_UNUSED_CONST_HANDLER	38	18	47.36%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_DIM_R_SPEC_CONST_CV_HANDLER	33	13	39.39%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_IS_SPEC_CONST_CONST_HANDLER	103	18	17.47%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_IS_SPEC_TMPVAR_TMP_HANDLER	105	38	36.19%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_IS_SPEC_TMPVAR_CV_HANDLER	104	21	20.19%	['php-fuzz-function-jit']
ZEND_FETCH_OBJ_IS_SPEC_UNUSED_CV_HANDLER	103	28	27.18%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_IS_SPEC_CV_TMP_HANDLER	104	37	35.57%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_IS_SPEC_CV_CV_HANDLER	103	43	41.74%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_METHOD_CALL_SPEC_TMP_TMP_HANDLER	136	61	44.85%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_TMP_HANDLER	133	44	33.08%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CV_HANDLER	128	59	46.09%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_METHOD_CALL_SPEC_CV_TMP_HANDLER	133	71	53.38%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_UNUSED_TMP_HANDLER	121	16	13.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ISSET_ISEMPTY_DIM_OBJ_SPEC_CONST_CONST_HANDLER	65	20	30.76%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_SEND_VAR_SPEC_VAR_UNUSED_HANDLER	40	18	45.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INSTANCEOF_SPEC_TMP_VAR_HANDLER	40	19	47.5%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_CONST_CONST_HANDLER	40	20	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_CONST_CV_HANDLER	40	20	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_TMP_TMP_HANDLER	42	22	52.38%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_UNUSED_CONST_HANDLER	40	20	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_CONST_TMP_HANDLER	87	35	40.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_CONST_CV_HANDLER	86	31	36.04%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_TMP_CONST_HANDLER	87	31	35.63%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_TMP_TMP_HANDLER	88	32	36.36%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_TMP_CV_HANDLER	87	33	37.93%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_GENERATOR_RETURN_SPEC_CV_HANDLER	33	14	42.42%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_VAR_CONST_HANDLER	107	50	46.72%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_VAR_TMPVARCV_HANDLER	118	54	45.76%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_UNUSED_TMPVARCV_HANDLER	118	48	40.67%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IN_ARRAY_SPEC_CV_CONST_HANDLER	61	21	34.42%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_GET_CLASS_SPEC_UNUSED_UNUSED_HANDLER	38	13	34.21%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ADD_SPEC_CONST_CONST_TAILCALL_HANDLER	33	10	30.30%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_SUB_SPEC_CONST_CONST_TAILCALL_HANDLER	33	10	30.30%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_MUL_SPEC_CONST_CONST_TAILCALL_HANDLER	35	10	28.57%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_CONCAT_SPEC_CONST_TMP_TAILCALL_HANDLER	69	35	50.72%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_CONCAT_SPEC_CONST_CV_TAILCALL_HANDLER	68	34	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_CONCAT_SPEC_CV_CONST_TAILCALL_HANDLER	68	34	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_CONCAT_SPEC_CV_CV_TAILCALL_HANDLER	68	36	52.94%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_EQUAL_SPEC_CONST_CONST_TAILCALL_HANDLER	54	10	18.51%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_EQUAL_SPEC_TMP_CONST_JMPNZ_TAILCALL_HANDLER	54	21	38.88%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_EQUAL_SPEC_TMP_TMP_JMPZ_TAILCALL_HANDLER	54	16	29.62%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_EQUAL_SPEC_TMP_TMP_JMPNZ_TAILCALL_HANDLER	54	13	24.07%	['php-fuzz-function-jit']
ZEND_IS_NOT_EQUAL_SPEC_TMP_CONST_TAILCALL_HANDLER	54	25	46.29%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_NOT_EQUAL_SPEC_TMP_CONST_JMPZ_TAILCALL_HANDLER	54	21	38.88%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_NOT_EQUAL_SPEC_TMP_CONST_JMPNZ_TAILCALL_HANDLER	54	26	48.14%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_NOT_EQUAL_SPEC_TMP_TMP_JMPZ_TAILCALL_HANDLER	54	12	22.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_TMP_JMPZ_TAILCALL_HANDLER	54	23	42.59%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_NOT_EQUAL_SPEC_CV_TMP_JMPNZ_TAILCALL_HANDLER	54	21	38.88%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_SMALLER_SPEC_CONST_CONST_TAILCALL_HANDLER	39	10	25.64%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_SMALLER_SPEC_CONST_TMPVARCV_JMPNZ_TAILCALL_HANDLER	39	20	51.28%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_TAILCALL_HANDLER	43	19	44.18%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IS_SMALLER_OR_EQUAL_SPEC_CONST_TMPVARCV_JMPNZ_TAILCALL_HANDLER	43	16	37.20%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_CONST_TAILCALL_HANDLER	137	62	45.25%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_TMP_TAILCALL_HANDLER	142	69	48.59%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CONST_OP_DATA_CV_TAILCALL_HANDLER	137	46	33.57%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_TMP_OP_DATA_CONST_TAILCALL_HANDLER	138	61	44.20%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_TMP_OP_DATA_TMP_TAILCALL_HANDLER	143	50	34.96%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_TMP_OP_DATA_CV_TAILCALL_HANDLER	138	67	48.55%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_CONST_TAILCALL_HANDLER	137	74	54.01%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_TMP_TAILCALL_HANDLER	142	50	35.21%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_UNUSED_OP_DATA_CV_TAILCALL_HANDLER	137	56	40.87%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CONST_TAILCALL_HANDLER	137	55	40.14%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_TMP_TAILCALL_HANDLER	142	60	42.25%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_VAR_CV_OP_DATA_CV_TAILCALL_HANDLER	137	75	54.74%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CONST_OP_DATA_TMP_TAILCALL_HANDLER	141	77	54.60%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_CV_TMP_OP_DATA_CONST_TAILCALL_HANDLER	137	70	51.09%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_CV_TMP_OP_DATA_TMP_TAILCALL_HANDLER	142	77	54.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_CV_TMP_OP_DATA_CV_TAILCALL_HANDLER	137	51	37.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_CV_UNUSED_OP_DATA_TMP_TAILCALL_HANDLER	141	62	43.97%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_CV_UNUSED_OP_DATA_CV_TAILCALL_HANDLER	136	70	51.47%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_SPEC_CV_CV_OP_DATA_TMP_TAILCALL_HANDLER	141	77	54.60%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_TMP_TAILCALL_HANDLER	138	70	50.72%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CONST_OP_DATA_CV_TAILCALL_HANDLER	136	33	24.26%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_TMP_OP_DATA_CONST_TAILCALL_HANDLER	137	32	23.35%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_TMP_OP_DATA_TMP_TAILCALL_HANDLER	139	31	22.30%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CV_OP_DATA_CONST_TAILCALL_HANDLER	136	24	17.64%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CV_OP_DATA_TMP_TAILCALL_HANDLER	138	37	26.81%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_VAR_CV_OP_DATA_CV_TAILCALL_HANDLER	136	38	27.94%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_TMP_OP_DATA_TMP_TAILCALL_HANDLER	138	30	21.73%	['php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_CONST_TAILCALL_HANDLER	135	30	22.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_TMP_TAILCALL_HANDLER	137	29	21.16%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_UNUSED_CV_OP_DATA_CV_TAILCALL_HANDLER	135	30	22.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CONST_OP_DATA_TMP_TAILCALL_HANDLER	137	73	53.28%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_TMP_OP_DATA_CONST_TAILCALL_HANDLER	136	36	26.47%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_TMP_OP_DATA_TMP_TAILCALL_HANDLER	138	37	26.81%	['php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_TMP_OP_DATA_CV_TAILCALL_HANDLER	136	38	27.94%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_CONST_TAILCALL_HANDLER	135	35	25.92%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_TMP_TAILCALL_HANDLER	137	39	28.46%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_SPEC_CV_CV_OP_DATA_CV_TAILCALL_HANDLER	135	43	31.85%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_DIM_OP_SPEC_VAR_UNUSED_TAILCALL_HANDLER	89	42	47.19%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_OP_SPEC_VAR_CV_TAILCALL_HANDLER	78	26	33.33%	['php-fuzz-function-jit']
ZEND_ASSIGN_OBJ_OP_SPEC_CV_TMP_TAILCALL_HANDLER	78	29	37.17%	['php-fuzz-function-jit']
ZEND_QM_ASSIGN_SPEC_TMP_TAILCALL_HANDLER	34	14	41.17%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_QM_ASSIGN_SPEC_CV_TAILCALL_HANDLER	34	16	47.05%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_SEND_VAR_NO_REF_EX_SPEC_VAR_CONST_TAILCALL_HANDLER	57	20	35.08%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_SEND_VAR_NO_REF_EX_SPEC_VAR_UNUSED_QUICK_TAILCALL_HANDLER	57	29	50.87%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FAST_CONCAT_SPEC_CV_CV_TAILCALL_HANDLER	115	58	50.43%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_RETURN_SPEC_CONST_TAILCALL_HANDLER	69	19	27.53%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_RETURN_SPEC_TMP_TAILCALL_HANDLER	69	22	31.88%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_SEND_VAR_EX_SPEC_CV_UNUSED_TAILCALL_HANDLER	55	20	36.36%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CONST_TAILCALL_HANDLER	100	48	48.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_TMP_TAILCALL_HANDLER	101	43	42.57%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_UNUSED_TAILCALL_HANDLER	100	21	21.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CONST_CV_TAILCALL_HANDLER	100	46	46.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_CONST_TAILCALL_HANDLER	101	36	35.64%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_TMP_TAILCALL_HANDLER	102	25	24.50%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_TMP_UNUSED_TAILCALL_HANDLER	101	19	18.81%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_VAR_UNUSED_TAILCALL_HANDLER	101	20	19.80%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_CONST_TAILCALL_HANDLER	100	49	49.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_TMP_TAILCALL_HANDLER	101	32	31.68%	['php-fuzz-function-jit']
ZEND_ADD_ARRAY_ELEMENT_SPEC_CV_UNUSED_TAILCALL_HANDLER	100	27	27.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_UNSET_DIM_SPEC_VAR_CONST_TAILCALL_HANDLER	93	46	49.46%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_UNSET_DIM_SPEC_VAR_TMP_TAILCALL_HANDLER	94	43	45.74%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_UNSET_OBJ_SPEC_UNUSED_CONST_TAILCALL_HANDLER	38	18	47.36%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FE_RESET_R_SPEC_CONST_TAILCALL_HANDLER	61	18	29.50%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_DIM_R_SPEC_CONST_CONST_TAILCALL_HANDLER	33	13	39.39%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_DIM_R_SPEC_CONST_CV_TAILCALL_HANDLER	33	13	39.39%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_R_SPEC_CONST_CONST_TAILCALL_HANDLER	143	20	13.98%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_R_SPEC_CONST_CV_TAILCALL_HANDLER	143	20	13.98%	['php-fuzz-function-jit']
ZEND_FETCH_OBJ_R_SPEC_TMPVAR_TMP_TAILCALL_HANDLER	145	49	33.79%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_R_SPEC_TMPVAR_CV_TAILCALL_HANDLER	144	23	15.97%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_R_SPEC_UNUSED_TMP_TAILCALL_HANDLER	144	40	27.77%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_R_SPEC_UNUSED_CV_TAILCALL_HANDLER	143	36	25.17%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_R_SPEC_CV_TMP_TAILCALL_HANDLER	144	54	37.5%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_R_SPEC_CV_CV_TAILCALL_HANDLER	143	52	36.36%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_IS_SPEC_CONST_CONST_TAILCALL_HANDLER	103	18	17.47%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_IS_SPEC_TMPVAR_CONST_TAILCALL_HANDLER	104	37	35.57%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_IS_SPEC_TMPVAR_TMP_TAILCALL_HANDLER	105	38	36.19%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_IS_SPEC_TMPVAR_CV_TAILCALL_HANDLER	104	21	20.19%	['php-fuzz-function-jit']
ZEND_FETCH_OBJ_IS_SPEC_UNUSED_CV_TAILCALL_HANDLER	103	28	27.18%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_IS_SPEC_CV_TMP_TAILCALL_HANDLER	104	37	35.57%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_OBJ_IS_SPEC_CV_CV_TAILCALL_HANDLER	103	43	41.74%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_CLONE_SPEC_CONST_TAILCALL_HANDLER	50	19	38.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_RETURN_BY_REF_SPEC_CONST_TAILCALL_HANDLER	48	24	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_RETURN_BY_REF_SPEC_TMP_TAILCALL_HANDLER	51	22	43.13%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_RETURN_BY_REF_SPEC_CV_TAILCALL_HANDLER	48	22	45.83%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_METHOD_CALL_SPEC_CONST_CONST_TAILCALL_HANDLER	128	28	21.87%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_METHOD_CALL_SPEC_TMP_TMP_TAILCALL_HANDLER	136	61	44.85%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CONST_TAILCALL_HANDLER	128	56	43.75%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_TMP_TAILCALL_HANDLER	133	44	33.08%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_METHOD_CALL_SPEC_UNUSED_CV_TAILCALL_HANDLER	128	59	46.09%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_METHOD_CALL_SPEC_CV_TMP_TAILCALL_HANDLER	133	71	53.38%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_CONST_TMP_TAILCALL_HANDLER	121	60	49.58%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_CONST_UNUSED_TAILCALL_HANDLER	116	28	24.13%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_CONST_TAILCALL_HANDLER	116	57	49.13%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_TMP_TAILCALL_HANDLER	121	42	34.71%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_VAR_CV_TAILCALL_HANDLER	116	58	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_UNUSED_TMP_TAILCALL_HANDLER	121	16	13.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INIT_STATIC_METHOD_CALL_SPEC_UNUSED_UNUSED_TAILCALL_HANDLER	116	39	33.62%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ISSET_ISEMPTY_DIM_OBJ_SPEC_CONST_CONST_TAILCALL_HANDLER	65	20	30.76%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_SEND_VAR_SPEC_VAR_UNUSED_TAILCALL_HANDLER	40	18	45.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_SEND_VAR_SPEC_CV_UNUSED_TAILCALL_HANDLER	39	19	48.71%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_TYPE_CHECK_SPEC_CONST_TAILCALL_HANDLER	32	17	53.12%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_VERIFY_RETURN_TYPE_SPEC_CONST_UNUSED_TAILCALL_HANDLER	58	25	43.10%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_VERIFY_RETURN_TYPE_SPEC_TMP_UNUSED_TAILCALL_HANDLER	58	26	44.82%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FE_RESET_RW_SPEC_CONST_TAILCALL_HANDLER	84	22	26.19%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FE_RESET_RW_SPEC_TMP_TAILCALL_HANDLER	86	44	51.16%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INSTANCEOF_SPEC_TMP_VAR_TAILCALL_HANDLER	40	19	47.5%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_INSTANCEOF_SPEC_TMP_UNUSED_TAILCALL_HANDLER	40	18	45.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_CONST_CONST_TAILCALL_HANDLER	40	20	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_CONST_CV_TAILCALL_HANDLER	40	20	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_TMP_TMP_TAILCALL_HANDLER	42	22	52.38%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_ISSET_ISEMPTY_PROP_OBJ_SPEC_UNUSED_CONST_TAILCALL_HANDLER	40	20	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_CLASS_NAME_SPEC_TMP_TAILCALL_HANDLER	56	12	21.42%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_CLASS_NAME_SPEC_CV_TAILCALL_HANDLER	54	18	33.33%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_CALL_TRAMPOLINE_SPEC_TAILCALL_HANDLER	119	54	45.37%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_CONST_CONST_TAILCALL_HANDLER	86	36	41.86%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_CONST_TMP_TAILCALL_HANDLER	87	35	40.22%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_CONST_UNUSED_TAILCALL_HANDLER	86	40	46.51%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_CONST_CV_TAILCALL_HANDLER	86	31	36.04%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_TMP_CONST_TAILCALL_HANDLER	87	31	35.63%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_TMP_TMP_TAILCALL_HANDLER	88	32	36.36%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_TMP_UNUSED_TAILCALL_HANDLER	87	38	43.67%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_TMP_CV_TAILCALL_HANDLER	87	33	37.93%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_VAR_UNUSED_TAILCALL_HANDLER	88	45	51.13%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_UNUSED_UNUSED_TAILCALL_HANDLER	86	27	31.39%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_CV_UNUSED_TAILCALL_HANDLER	86	47	54.65%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_SPEC_CV_CV_TAILCALL_HANDLER	86	43	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_GENERATOR_RETURN_SPEC_CONST_TAILCALL_HANDLER	33	16	48.48%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_GENERATOR_RETURN_SPEC_TMP_TAILCALL_HANDLER	33	14	42.42%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_GENERATOR_RETURN_SPEC_CV_TAILCALL_HANDLER	33	14	42.42%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_YIELD_FROM_SPEC_CONST_TAILCALL_HANDLER	78	20	25.64%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_COALESCE_SPEC_CONST_TAILCALL_HANDLER	35	18	51.42%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_COALESCE_SPEC_TMP_TAILCALL_HANDLER	35	18	51.42%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_COALESCE_SPEC_CV_TAILCALL_HANDLER	35	19	54.28%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_VAR_CONST_TAILCALL_HANDLER	107	50	46.72%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_VAR_TMPVARCV_TAILCALL_HANDLER	118	54	45.76%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_UNUSED_CONST_TAILCALL_HANDLER	107	57	53.27%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_FETCH_CLASS_CONSTANT_SPEC_UNUSED_TMPVARCV_TAILCALL_HANDLER	118	48	40.67%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_IN_ARRAY_SPEC_CV_CONST_TAILCALL_HANDLER	61	21	34.42%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_COUNT_SPEC_CONST_UNUSED_TAILCALL_HANDLER	44	18	40.90%	['php-fuzz-function-jit']
ZEND_COUNT_SPEC_TMP_UNUSED_TAILCALL_HANDLER	45	21	46.66%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_GET_CLASS_SPEC_UNUSED_UNUSED_TAILCALL_HANDLER	38	13	34.21%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_JMP_NULL_SPEC_CONST_TAILCALL_HANDLER	37	19	51.35%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_JMP_NULL_SPEC_TMP_TAILCALL_HANDLER	38	19	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
timelib_diff_with_tzid	58	26	44.82%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
zif_json_decode	46	23	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
_zend_accel_function_hash_copy	37	17	45.94%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
get_branchlength	284	94	33.09%	['php-fuzz-function-jit']
parsed_skip	71	19	26.76%	['php-fuzz-function-jit']
_pcre2_find_bracket_8	115	37	32.17%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
match_ref	87	37	42.52%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
reflection_method_invoke	73	32	43.83%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
reflection_property_check_lazy_compatible	33	14	42.42%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
_const_string	38	20	52.63%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
spl_array_has_dimension_ex	47	25	53.19%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
zim_SplFixedArray_fromArray	51	26	50.98%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
zim_MultipleIterator_attachIterator	38	19	50.0%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
spl_multiple_iterator_get_all	71	33	46.47%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
zif_max	70	26	37.14%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
zif_array_diff	108	12	11.11%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
php_array_diff_key	66	14	21.21%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
zif_file_get_contents	51	28	54.90%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
php_stat	230	42	18.26%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
map_from_unicode	102	12	11.76%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
write_octet_sequence	32	14	43.75%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
zif_substr_replace	237	49	20.67%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
php_trim_int	74	32	43.24%	['php-fuzz-tracing-jit', 'php-fuzz-function-jit']
ZEND_SEND_VAL_EX_SPEC_TMP_UNUSED_HANDLER	33	16	48.48%	['php-fuzz-tracing-jit']
ZEND_FAST_CONCAT_SPEC_CONST_CONST_TAILCALL_HANDLER	115	27	23.47%	['php-fuzz-tracing-jit']
ZEND_FETCH_DIM_R_SPEC_CONST_TMP_TAILCALL_HANDLER	34	14	41.17%	['php-fuzz-tracing-jit']
ZEND_SEND_VAL_EX_SPEC_TMP_UNUSED_TAILCALL_HANDLER	33	16	48.48%	['php-fuzz-tracing-jit']
php_date_modify	62	17	27.41%	['php-fuzz-tracing-jit']
find_recurse	104	19	18.26%	['php-fuzz-tracing-jit']
zim_SplFileObject___construct	36	11	30.55%	['php-fuzz-tracing-jit']
spl_filesystem_object_construct	36	16	44.44%	['php-fuzz-tracing-jit']
spl_filesystem_object_free_storage	31	11	35.48%	['php-fuzz-tracing-jit']
zif_min	70	31	44.28%	['php-fuzz-tracing-jit']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/php-src/Zend/zend_objects_API.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/standard/quot_print.c	[]	[]
/src/php-src/ext/opcache/zend_accelerator_hash.c	[]	[]
/src/php-src/ext/standard/type.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetHostRegName.c	[]	[]
/src/php-src/Zend/zend_multibyte.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/main/streams/userspace.c	[]	[]
/src/php-src/main/getopt.c	[]	[]
/src/php-src/ext/standard/url.c	[]	[]
/src/php-src/ext/hash/hash.c	[]	[]
/src/php-src/ext/standard/crypt_freesec.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/script_element.c	[]	[]
/src/php-src/ext/spl/php_spl.c	[]	[]
/src/php-src/Zend/zend_variables.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/pcre/pcre2lib/pcre2_substring.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/unit.c	[]	[]
/src/php-src/Zend/zend_ptr_stack.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/css/declaration.c	[]	[]
/src/php-src/ext/standard/strnatcmp.c	[]	[]
/src/php-src/ext/spl/spl_array_arginfo.h	[]	[]
/src/php-src/ext/standard/levenshtein.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_string_utils.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_caption.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetFragment.c	[]	[]
/src/php-src/ext/standard/php_password.h	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/text.c	[]	[]
/src/php-src/ext/uri/uri_parser_php_parse_url.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/processing_instruction.h	[]	[]
/src/php-src/Zend/Optimizer/zend_call_graph.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/media_element.c	[]	[]
/src/php-src/main/streams/stream_errors.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/legend_element.c	[]	[]
/src/php-src/ext/spl/spl_functions.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetHostCommon.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/template_insertion.h	[]	[]
/src/php-src/ext/uri/uriparser/src/UriQuery.c	[]	[]
/src/php-src/Zend/zend_string.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/sapi/fuzzer/fuzzer-unserialize.c	['php-fuzz-unserialize']	['php-fuzz-unserialize']
/src/php-src/ext/opcache/zend_shared_alloc.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/print.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/frame_set_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/span_element.c	[]	[]
/src/php-src/ext/json/json.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriEscape.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_comment.c	[]	[]
/src/php-src/ext/random/engine_mt19937.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetUserInfo.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_compile.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/source_element.c	[]	[]
/src/php-src/ext/opcache/zend_shared_alloc.h	[]	[]
/src/php-src/ext/lexbor/lexbor/unicode/unicode.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_doctype.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_rawtext.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_substitute.c	[]	[]
/src/php-src/main/php_syslog.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/property/state.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriVersion.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_study.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_match.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_valid_utf.c	[]	[]
/src/php-src/ext/random/engine_pcgoneseq128xslrr64.c	[]	[]
/src/php-src/Zend/zend_closures.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_opcode.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/spl/spl_iterators_arginfo.h	[]	[]
/src/php-src/main/streams/filter.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_llist.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_cell.c	[]	[]
/src/php-src/ext/random/random.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/area_element.c	[]	[]
/src/php-src/ext/date/lib/parse_posix.c	[]	[]
/src/php-src/Zend/zend_autoload.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/uri/uriparser/src/UriCopy.c	[]	[]
/src/php-src/ext/spl/spl_fixedarray_arginfo.h	[]	[]
/src/php-src/ext/spl/spl_heap.c	[]	[]
/src/php-src/Zend/zend_observer.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/dom/interfaces/comment.c	[]	[]
/src/php-src/Zend/zend_inheritance.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/main/streams/cast.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/div_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/diyfp.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tag.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/option_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/form_element.c	[]	[]
/src/php-src/main/streams/transports.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/core/shs.h	[]	[]
/src/php-src/ext/standard/datetime.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/str.h	[]	[]
/src/php-src/ext/lexbor/lexbor/encoding/encode.c	[]	[]
/src/php-src/Zend/zend_object_handlers.h	[]	[]
/src/php-src/ext/standard/scanf.c	[]	[]
/src/php-src/Zend/zend_llist.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/Optimizer/zend_cfg.c	[]	[]
/src/php-src/Zend/zend_generators.h	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_serialize.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/blank.c	[]	[]
/src/php-src/ext/standard/ftok.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/selectors/state.c	[]	[]
/src/php-src/Zend/zend_objects_API.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/uri/uriparser/src/UriShorten.c	[]	[]
/src/php-src/ext/hash/hash_crc32.c	[]	[]
/src/php-src/ext/standard/pageinfo.c	[]	[]
/src/php-src/ext/standard/head.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_smart_str.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/standard/var.c	['php-fuzz-exif', 'php-fuzz-unserializehash']	['php-fuzz-exif', 'php-fuzz-unserializehash']
/src/php-src/Zend/Optimizer/optimize_temp_vars_5.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/selectedcontent_element.c	[]	[]
/src/php-src/Zend/zend_operators.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/tag.h	[]	[]
/src/php-src/sapi/fuzzer/fuzzer-parser.c	['php-fuzz-parser']	['php-fuzz-parser']
/src/php-src/ext/standard/basic_functions.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/main/php_network.h	[]	[]
/src/php-src/main/php_ticks.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_bitset.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/tree/open_elements.c	[]	[]
/src/php-src/ext/spl/spl_directory.c	[]	[]
/src/php-src/main/streams/memory.c	['php-fuzz-exif']	['php-fuzz-exif']
/src/php-src/ext/standard/php_fopen_wrapper.c	[]	[]
/src/php-src/ext/lexbor/lexbor/encoding/decode.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriIp4Base.c	[]	[]
/src/php-src/Zend/Optimizer/dce.c	[]	[]
/src/php-src/ext/standard/crc32.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/rule.h	[]	[]
/src/php-src/Zend/zend_constants.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/css/log.c	[]	[]
/src/php-src/ext/opcache/jit/zend_jit_internal.h	[]	[]
/src/php-src/Zend/zend_attributes_arginfo.h	[]	[]
/src/php-src/Zend/zend_float.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_lazy_objects.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/ports/posix/lexbor/core/memory.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/initial.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree.c	[]	[]
/src/php-src/Zend/zend_mmap.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/standard/hrtime.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/video_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/encoding.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/param_element.c	[]	[]
/src/php-src/Zend/zend_language_parser.y	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/css/syntax/anb.c	[]	[]
/src/php-src/Zend/zend_cpuinfo.c	[]	[]
/src/php-src/Zend/zend.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/html_element.c	[]	[]
/src/php-src/Zend/zend_hash.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/tree/active_formatting.h	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/attr.c	[]	[]
/src/php-src/ext/lexbor/lexbor/tag/tag.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/document.h	[]	[]
/src/php-src/ext/opcache/shared_alloc_mmap.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_maketables.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/selectors/pseudo.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/data_element.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_config.c	[]	[]
/src/php-src/ext/date/lib/tm2unixtime.c	[]	[]
/src/php-src/ext/standard/basic_functions_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/state.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/parser.c	[]	[]
/src/php-src/main/internal_functions_cli.c	[]	[]
/src/php-src/ext/standard/crypt_blowfish.c	[]	[]
/src/php-src/Zend/zend_iterators.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_script.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_chkdint.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/data_list_element.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_misc.c	[]	[]
/src/php-src/main/streams/glob_wrapper.c	[]	[]
/src/php-src/main/streams/mmap.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_section_element.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_match_data.c	[]	[]
/src/php-src/Zend/zend_execute_API.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_generators_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state.c	[]	[]
/src/php-src/Zend/Optimizer/zend_func_info.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/css/at_rule.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_head.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_ord2utf.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_sccp.c	[]	[]
/src/php-src/Zend/Optimizer/zend_optimizer.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/css/value.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/field_set_element.c	[]	[]
/src/php-src/ext/date/lib/parse_iso_intervals.re	[]	[]
/src/php-src/ext/standard/pack.c	[]	[]
/src/php-src/main/php_ini.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/spl/spl_dllist.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/opt_group_element.c	[]	[]
/src/php-src/ext/hash/hash_snefru.c	[]	[]
/src/php-src/ext/spl/spl_heap_arginfo.h	[]	[]
/src/php-src/main/main.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/br_element.c	[]	[]
/src/php-src/ext/standard/credits.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/dobject.h	[]	[]
/src/php-src/Zend/zend_default_classes.c	[]	[]
/src/php-src/ext/json/php_json_encoder.h	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetHostIp6.c	[]	[]
/src/php-src/ext/exif/exif_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/url/url.c	[]	[]
/src/php-src/ext/lexbor/lexbor/encoding/encoding.h	[]	[]
/src/php-src/ext/uri/uriparser/src/UriParse.c	[]	[]
/src/php-src/ext/standard/dns.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer.h	[]	[]
/src/php-src/Zend/zend_stream.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/standard/formatted_print.c	[]	[]
/src/php-src/Zend/zend_ast.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_hrtime.c	[]	[]
/src/php-src/Zend/zend_API.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/tree.h	[]	[]
/src/php-src/ext/hash/xxhash/xxhash.h	[]	[]
/src/php-src/Zend/Optimizer/scdf.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/mod_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/shadow_root.c	[]	[]
/src/php-src/main/network.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetQuery.c	[]	[]
/src/php-src/ext/spl/spl_fixedarray.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/map_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/parser.c	[]	[]
/src/php-src/ext/date/lib/dow.c	[]	[]
/src/php-src/Zend/Optimizer/ssa_integrity.c	[]	[]
/src/php-src/ext/standard/net.c	[]	[]
/src/php-src/main/strlcpy.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-exif', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/tokenizer.c	[]	[]
/src/php-src/Zend/zend_interfaces_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/token_attr.c	[]	[]
/src/php-src/Zend/zend_observer.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/standard/php_crypt_r.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_cell_element.c	[]	[]
/src/php-src/Zend/zend_types.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/css/stylesheet.c	[]	[]
/src/php-src/ext/date/lib/astro.c	[]	[]
/src/php-src/main/php_glob.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document.h	[]	[]
/src/php-src/Zend/zend_vm_opcodes.c	[]	[]
/src/php-src/ext/lexbor/lexbor/unicode/unicode.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_dump.c	[]	[]
/src/php-src/ext/standard/dl.c	[]	[]
/src/php-src/ext/standard/incomplete_class.c	['php-fuzz-unserialize', 'php-fuzz-unserializehash']	['php-fuzz-unserialize', 'php-fuzz-unserializehash']
/src/php-src/ext/lexbor/lexbor/core/array.h	[]	[]
/src/php-src/ext/standard/flock_compat.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/syntax.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_column_group.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/heading_element.c	[]	[]
/src/php-src/sapi/fuzzer/fuzzer-tracing-jit.c	['php-fuzz-tracing-jit']	['php-fuzz-tracing-jit']
/src/php-src/Zend/zend_highlight.c	[]	[]
/src/php-src/ext/standard/dir.c	[]	[]
/src/php-src/sapi/fuzzer/fuzzer-unserializehash.c	['php-fuzz-unserializehash']	['php-fuzz-unserializehash']
/src/php-src/sapi/fuzzer/fuzzer-exif.c	['php-fuzz-exif']	['php-fuzz-exif']
/src/php-src/Zend/zend_ast.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/Optimizer/zend_dfg.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_context.c	[]	[]
/src/php-src/ext/date/lib/unixtime2tm.c	[]	[]
/src/php-src/main/spprintf.c	[]	[]
/src/php-src/Zend/zend_enum.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/opcache/jit/ir/ir_gdb.c	[]	[]
/src/php-src/ext/opcache/zend_file_cache.c	[]	[]
/src/php-src/ext/standard/http_fopen_wrapper.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_xclass.c	[]	[]
/src/php-src/Zend/zend_language_parser.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/style_element.c	[]	[]
/src/php-src/Zend/zend_gc.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/uri/uriparser/src/UriNormalizeBase.c	[]	[]
/src/php-src/Zend/zend_fibers.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/o_list_element.c	[]	[]
/src/php-src/Zend/zend_interfaces.h	[]	[]
/src/php-src/Zend/Optimizer/compact_literals.c	[]	[]
/src/php-src/main/SAPI.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/spl/spl_directory_arginfo.h	[]	[]
/src/php-src/ext/date/lib/interval.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_frameset.c	[]	[]
/src/php-src/ext/hash/hash_xxhash.c	[]	[]
/src/php-src/ext/random/random_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document_type.h	[]	[]
/src/php-src/ext/standard/filters.c	[]	[]
/src/php-src/Zend/zend_strtod.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/template_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/document.c	[]	[]
/src/php-src/ext/spl/spl_array.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_element.c	[]	[]
/src/php-src/ext/standard/password_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document_type.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_newline.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriMemory.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_find_bracket.c	[]	[]
/src/php-src/ext/lexbor/lexbor/ns/ns.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/swar.h	[]	[]
/src/php-src/ext/lexbor/lexbor/core/mraw.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_emit.c	[]	[]
/src/php-src/ext/reflection/php_reflection_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/tag/tag.h	[]	[]
/src/php-src/ext/pcre/php_pcre.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/state.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_row_element.c	[]	[]
/src/php-src/Zend/zend_compile.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_interfaces.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/array_obj.c	[]	[]
/src/php-src/Zend/Optimizer/zend_dump.c	[]	[]
/src/php-src/Zend/zend_property_hooks.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_object_handlers.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/core/conv.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/selectors/pseudo_state.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/button_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/before_html.c	[]	[]
/src/php-src/main/fopen_wrappers.c	[]	[]
/src/php-src/ext/standard/http.c	[]	[]
/src/php-src/Zend/zend_vm_execute.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/element.h	[]	[]
/src/php-src/main/streams/plain_wrapper.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetPort.c	[]	[]
/src/php-src/main/php_variables.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/main/snprintf.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/main/php_ini_builder.h	[]	[]
/src/php-src/ext/lexbor/lexbor/core/serialize.c	[]	[]
/src/php-src/Zend/zend_closures_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/li_element.c	[]	[]
/src/php-src/ext/standard/mail.c	[]	[]
/src/php-src/ext/standard/user_filters_arginfo.h	[]	[]
/src/php-src/main/php_ini_builder.c	[]	[]
/src/php-src/ext/spl/spl_iterators.c	[]	[]
/src/php-src/ext/opcache/zend_accelerator_blacklist.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/token.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/progress_element.c	[]	[]
/src/php-src/ext/uri/php_uri.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/text.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_col_element.c	[]	[]
/src/php-src/ext/standard/versioning.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/dobject.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer/state_rcdata.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_script_run.c	[]	[]
/src/php-src/ext/uri/uri_parser_rfc3986.c	[]	[]
/src/php-src/ext/hash/hash_md.c	[]	[]
/src/php-src/ext/hash/hash_ripemd.c	[]	[]
/src/php-src/ext/standard/html.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/uri/uriparser/src/UriNormalize.c	[]	[]
/src/php-src/Zend/zend_smart_string.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_enum.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_API.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_frameset.c	[]	[]
/src/php-src/ext/random/php_random_uint128.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/quote_element.c	[]	[]
/src/php-src/ext/standard/exec.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/select_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/track_element.c	[]	[]
/src/php-src/ext/hash/hash_sha3.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_after_body.c	[]	[]
/src/php-src/ext/spl/spl_exceptions_arginfo.h	[]	[]
/src/php-src/Zend/zend_weakrefs.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_fibers_arginfo.h	[]	[]
/src/php-src/Zend/zend_ini_parser.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_patch.c	[]	[]
/src/php-src/ext/opcache/jit/zend_jit_helpers.c	[]	[]
/src/php-src/ext/date/php_date.c	[]	[]
/src/php-src/Zend/Optimizer/zend_inference.c	[]	[]
/src/php-src/Zend/zend_atomic.c	[]	[]
/src/php-src/ext/standard/fsock.c	[]	[]
/src/php-src/ext/spl/spl_exceptions.c	[]	[]
/src/php-src/ext/random/zend_utils.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_perf.c	[]	[]
/src/php-src/ext/date/lib/timelib.c	[]	[]
/src/php-src/Zend/Optimizer/zend_ssa.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/input_element.c	[]	[]
/src/php-src/ext/uri/php_uri_common.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_table_body.c	[]	[]
/src/php-src/Zend/Optimizer/pass3.c	[]	[]
/src/php-src/main/strlcat.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/unknown_element.c	[]	[]
/src/php-src/Zend/zend_system_id.c	[]	[]
/src/php-src/ext/standard/password.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetHostIpFuture.c	[]	[]
/src/php-src/ext/standard/proc_open.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/diyfp.h	[]	[]
/src/php-src/ext/hash/hash_arginfo.h	[]	[]
/src/php-src/main/streams/xp_socket.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/strtod.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/parser.h	[]	[]
/src/php-src/ext/lexbor/lexbor/css/parser.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_row.c	[]	[]
/src/php-src/ext/json/json_arginfo.h	[]	[]
/src/php-src/ext/reflection/php_reflection.c	[]	[]
/src/php-src/Zend/zend_execute.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_list.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/Optimizer/pass1.c	[]	[]
/src/php-src/ext/date/lib/parse_tz.c	[]	[]
/src/php-src/ext/hash/murmur/PMurHash.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_body.c	[]	[]
/src/php-src/main/main_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/css/selectors/selectors.h	[]	[]
/src/php-src/ext/uri/uriparser/src/UriCommon.c	[]	[]
/src/php-src/ext/standard/libavifinfo/avifinfo.c	[]	[]
/src/php-src/sapi/fuzzer/fuzzer-json.c	['php-fuzz-json']	['php-fuzz-json']
/src/php-src/ext/uri/uriparser/src/UriCompare.c	[]	[]
/src/php-src/Zend/zend_arena.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/standard/crypt_sha256.c	[]	[]
/src/php-src/main/output.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/paragraph_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/str.c	[]	[]
/src/php-src/Zend/zend_cpuinfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/css/selectors/selectors.c	[]	[]
/src/php-src/Zend/Optimizer/dfa_pass.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetHostIp4.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/directory_element.c	[]	[]
/src/php-src/Zend/zend_ini_scanner.l	[]	[]
/src/php-src/ext/standard/sha1.c	[]	[]
/src/php-src/ext/date/lib/parse_date.re	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interface.c	[]	[]
/src/php-src/ext/opcache/jit/zend_jit_trace.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/token.c	[]	[]
/src/php-src/ext/hash/php_hash.h	[]	[]
/src/php-src/Zend/zend_objects.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/hash/hash_sha.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/dtoa.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/title_element.c	[]	[]
/src/php-src/ext/hash/hash_fnv.c	[]	[]
/src/php-src/ext/standard/syslog.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/open_elements.h	[]	[]
/src/php-src/ext/standard/metaphone.c	[]	[]
/src/php-src/Zend/zend_extensions.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/php_lexbor.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/cdata_section.c	[]	[]
/src/php-src/Zend/zend_gc.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/opcache/zend_accelerator_module.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_save.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/search_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interface_res.h	[]	[]
/src/php-src/ext/standard/math.c	[]	[]
/src/php-src/ext/standard/browscap.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/slot_element.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetPath.c	[]	[]
/src/php-src/ext/standard/link.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/marquee_element.c	[]	[]
/src/php-src/Zend/zend_ini_parser.y	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/anchor_element.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_convert.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/node.h	[]	[]
/src/php-src/ext/lexbor/lexbor/core/bst.c	[]	[]
/src/php-src/Zend/zend_builtin_functions.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/sapi/fuzzer/fuzzer-execute-common.h	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/random/engine_xoshiro256starstar.c	[]	[]
/src/php-src/main/safe_bcmp.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_head.c	[]	[]
/src/php-src/Zend/zend_builtin_functions_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/dialog_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/text_area_element.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_ra.c	[]	[]
/src/php-src/Zend/Optimizer/escape_analysis.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_body.c	[]	[]
/src/php-src/ext/hash/hash_murmur.c	[]	[]
/src/php-src/ext/hash/hash_whirlpool.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/menu_element.c	[]	[]
/src/php-src/Zend/zend_multiply.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/random/php_random_csprng.h	[]	[]
/src/php-src/ext/standard/string.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetScheme.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_match.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/active_formatting.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/rule.c	[]	[]
/src/php-src/Zend/zend_language_scanner.l	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/meta_element.c	[]	[]
/src/php-src/ext/standard/crypt_sha512.c	[]	[]
/src/php-src/ext/opcache/jit/zend_jit.c	[]	[]
/src/php-src/Zend/Optimizer/zend_worklist.h	[]	[]
/src/php-src/ext/json/json_parser.tab.c	['php-fuzz-json']	['php-fuzz-json']
/src/php-src/ext/lexbor/lexbor/html/interfaces/body_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/mem.h	[]	[]
/src/php-src/Zend/Optimizer/nop_removal.c	[]	[]
/src/php-src/main/streams/streams.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/sapi/fuzzer/fuzzer-execute.c	['php-fuzz-execute']	['php-fuzz-execute']
/src/php-src/ext/spl/spl_dllist_arginfo.h	[]	[]
/src/php-src/ext/opcache/jit/zend_jit_vm_helpers.c	[]	[]
/src/php-src/ext/hash/murmur/PMurHash128.c	[]	[]
/src/php-src/Zend/zend_hash.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/dom/interfaces/processing_instruction.c	[]	[]
/src/php-src/ext/uri/php_uri_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/css/at_rule/state.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_extuni.c	[]	[]
/src/php-src/ext/standard/user_filters.c	[]	[]
/src/php-src/ext/hash/sha3/generic64lc/KeccakP-1600-opt64.c	[]	[]
/src/php-src/Zend/zend_execute.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_string.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_generators.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/hash/hash_gost.c	[]	[]
/src/php-src/Zend/zend_signal.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/dom/interfaces/character_data.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/u_list_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/foreign_content.c	[]	[]
/src/php-src/Zend/zend_weakrefs_arginfo.h	[]	[]
/src/php-src/Zend/Optimizer/block_pass.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/property.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tokenizer/error.c	[]	[]
/src/php-src/Zend/Optimizer/zend_inference.h	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer.h	[]	[]
/src/php-src/main/php_streams.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/iframe_element.c	[]	[]
/src/php-src/Zend/zend_exceptions.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_atomic.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/Optimizer/zend_ssa.h	[]	[]
/src/php-src/ext/standard/css.c	[]	[]
/src/php-src/ext/standard/url_scanner_ex.re	[]	[]
/src/php-src/Zend/Optimizer/optimize_func_calls.c	[]	[]
/src/php-src/ext/hash/hash_joaat.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/hash.c	[]	[]
/src/php-src/main/php_odbc_utils.c	[]	[]
/src/php-src/ext/opcache/ZendAccelerator.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_dfa_match.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/output_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/before_head.c	[]	[]
/src/php-src/sapi/fuzzer/fuzzer-sapi.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_lazy_objects.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/random/php_random.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/image_element.c	[]	[]
/src/php-src/Zend/Optimizer/scdf.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/canvas_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/font_element.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_auto_possess.c	[]	[]
/src/php-src/Zend/zend_call_stack.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_enum_arginfo.h	[]	[]
/src/php-src/ext/hash/hash_sha_sse2.c	[]	[]
/src/php-src/Zend/Optimizer/sccp.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/shs.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_error.c	[]	[]
/src/php-src/Zend/Optimizer/zend_optimizer_internal.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/window.c	[]	[]
/src/php-src/ext/hash/sha3/generic64lc/KeccakHash.c	[]	[]
/src/php-src/ext/opcache/zend_accelerator_debug.c	[]	[]
/src/php-src/ext/standard/filestat.c	[]	[]
/src/php-src/ext/standard/base64.h	[]	[]
/src/php-src/Zend/Optimizer/compact_vars.c	[]	[]
/src/php-src/ext/standard/image.c	[]	[]
/src/php-src/ext/standard/var_unserializer.re	['php-fuzz-unserialize', 'php-fuzz-unserializehash']	['php-fuzz-unserialize', 'php-fuzz-unserializehash']
/src/php-src/ext/lexbor/lexbor/html/token.h	[]	[]
/src/php-src/Zend/zend_attributes.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/d_list_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/css.c	[]	[]
/src/php-src/Zend/zend_constants_arginfo.h	[]	[]
/src/php-src/Zend/zend_gdb.c	[]	[]
/src/php-src/ext/random/gammasection.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/pre_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/array.c	[]	[]
/src/php-src/Zend/zend_sort.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/dom/interfaces/node.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/encoding.c	[]	[]
/src/php-src/Zend/zend_ptr_stack.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/after_after_frameset.c	[]	[]
/src/php-src/ext/hash/hash_haval.c	[]	[]
/src/php-src/ext/standard/crypt.c	[]	[]
/src/php-src/ext/spl/spl_observer.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriParseBase.c	[]	[]
/src/php-src/ext/uri/uri_parser_whatwg.c	[]	[]
/src/php-src/ext/random/csprng.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/mraw.h	[]	[]
/src/php-src/ext/lexbor/lexbor/css/selectors/selector.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriResolve.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/conv.h	[]	[]
/src/php-src/Zend/zend_call_stack.c	[]	[]
/src/php-src/ext/random/randomizer.c	[]	[]
/src/php-src/main/streams/stream_errors_arginfo.h	[]	[]
/src/php-src/ext/hash/hash_adler32.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/link_element.c	[]	[]
/src/php-src/Zend/zend_virtual_cwd.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/details_element.c	[]	[]
/src/php-src/ext/spl/spl_observer_arginfo.h	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_pattern_info.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/head_element.c	[]	[]
/src/php-src/ext/standard/file_arginfo.h	[]	[]
/src/php-src/ext/standard/info.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/table_caption_element.c	[]	[]
/src/php-src/ext/opcache/jit/ir/dynasm/dasm_x86.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/error.c	[]	[]
/src/php-src/main/streams/userspace_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/collection.h	[]	[]
/src/php-src/ext/uri/uriparser/src/UriRecompose.c	[]	[]
/src/php-src/main/php_content_types.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_gcm.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_template.c	[]	[]
/src/php-src/ext/json/json_scanner.c	['php-fuzz-json']	['php-fuzz-json']
/src/php-src/ext/standard/array.c	[]	[]
/src/php-src/main/rfc1867.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	[]
/src/php-src/sapi/fuzzer/fuzzer-function-jit.c	['php-fuzz-function-jit']	['php-fuzz-function-jit']
/src/php-src/ext/opcache/jit/ir/ir.c	[]	[]
/src/php-src/Zend/zend_constants.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/core/plog.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/sbst.h	[]	[]
/src/php-src/ext/standard/assert.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/audio_element.c	[]	[]
/src/php-src/ext/standard/file.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/meter_element.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriFile.c	[]	[]
/src/php-src/Zend/zend_ini.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_compile.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/standard/base64.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/hash.h	[]	[]
/src/php-src/Zend/zend_stack.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/css/syntax/token.c	[]	[]
/src/php-src/ext/opcache/zend_accelerator_util_funcs.c	[]	[]
/src/php-src/ext/standard/dir_arginfo.h	[]	[]
/src/php-src/Zend/zend_alloc.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/main/php_open_temporary_file.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/base_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/attr.h	[]	[]
/src/php-src/ext/lexbor/lexbor/core/avl.c	[]	[]
/src/php-src/ext/json/json_encoder.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/time_element.c	[]	[]
/src/php-src/ext/hash/sha3/generic64lc/KeccakSponge.inc	[]	[]
/src/php-src/ext/lexbor/lexbor/core/array_obj.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_head_noscript.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_strtab.c	[]	[]
/src/php-src/ext/standard/md5.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interface.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_table.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/mem.c	[]	[]
/src/php-src/ext/lexbor/lexbor/encoding/encoding.c	[]	[]
/src/php-src/ext/standard/uniqid.c	[]	[]
/src/php-src/ext/standard/soundex.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriIp4.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/element.c	[]	[]
/src/php-src/ext/hash/hash_tiger.c	[]	[]
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer/error.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_cfg.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_x86.dasc	[]	[]
/src/php-src/Zend/zend_fibers.h	[]	[]
/src/php-src/Zend/zend_smart_str.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/object_element.c	[]	[]
/src/php-src/ext/standard/streamsfuncs.c	[]	[]
/src/php-src/Zend/zend_inheritance.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/picture_element.c	[]	[]
/src/php-src/ext/opcache/zend_accelerator_api.c	[]	[]
/src/php-src/ext/lexbor/lexbor/punycode/punycode.c	[]	[]
/src/php-src/ext/lexbor/lexbor/unicode/idna.c	[]	[]
/src/php-src/ext/uri/uriparser/src/UriSetHostAuto.c	[]	[]
/src/php-src/Zend/zend_operators.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/date/php_date_arginfo.h	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/embed_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/parser.h	[]	[]
/src/php-src/ext/standard/uuencode.c	[]	[]
/src/php-src/ext/opcache/jit/zend_jit_ir.c	[]	[]
/src/php-src/Zend/zend_hrtime.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_weakrefs.h	['php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/Zend/zend_attributes.c	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/uri/php_uri_common.h	[]	[]
/src/php-src/Zend/zend_exceptions_arginfo.h	[]	[]
/src/php-src/ext/standard/ftp_fopen_wrapper.c	[]	[]
/src/php-src/ext/opcache/shared_alloc_shm.c	[]	[]
/src/php-src/ext/pcre/pcre2lib/pcre2_jit_compile.c	[]	[]
/src/php-src/ext/lexbor/lexbor/dom/interfaces/document_fragment.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/in_table_text.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/label_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/html/interfaces/frame_element.c	[]	[]
/src/php-src/ext/lexbor/lexbor/core/plog.h	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_check.c	[]	[]
/src/php-src/Zend/zend_variables.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/opcache/zend_persist.c	[]	[]
/src/php-src/ext/pcre/php_pcre_arginfo.h	[]	[]
/src/php-src/ext/standard/microtime.c	[]	[]
/src/php-src/ext/opcache/zend_accelerator_hash.h	[]	[]
/src/php-src/ext/exif/exif.c	[]	[]
/src/php-src/ext/standard/iptc.c	[]	[]
/src/php-src/ext/opcache/jit/ir/ir_fold_hash.h	[]	[]
/src/php-src/Zend/zend_exceptions.h	['php-fuzz-json', 'php-fuzz-exif', 'php-fuzz-unserialize', 'php-fuzz-unserializehash', 'php-fuzz-parser', 'php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']	['php-fuzz-execute', 'php-fuzz-function-jit', 'php-fuzz-tracing-jit']
/src/php-src/ext/lexbor/lexbor/html/interfaces/hr_element.c	[]	[]
/src/php-src/ext/opcache/zend_persist_calc.c	[]	[]

Directories in report

Directory
/src/php-src/ext/opcache/jit/ir/
/src/php-src/ext/lexbor/lexbor/dom/
/src/php-src/ext/json/
/src/php-src/ext/exif/
/src/php-src/ext/lexbor/lexbor/url/
/src/php-src/ext/lexbor/lexbor/ns/
/src/php-src/ext/lexbor/lexbor/html/
/src/php-src/ext/hash/murmur/
/src/php-src/ext/lexbor/lexbor/html/tree/
/src/php-src/ext/uri/
/src/php-src/ext/lexbor/lexbor/html/tree/insertion_mode/
/src/php-src/ext/standard/libavifinfo/
/src/php-src/ext/lexbor/lexbor/html/interfaces/
/src/php-src/Zend/
/src/php-src/ext/hash/
/src/php-src/ext/lexbor/lexbor/css/property/
/src/php-src/ext/opcache/jit/
/src/php-src/ext/lexbor/lexbor/encoding/
/src/php-src/ext/hash/xxhash/
/src/php-src/ext/date/
/src/php-src/ext/lexbor/
/src/php-src/sapi/fuzzer/
/src/php-src/ext/reflection/
/src/php-src/ext/lexbor/lexbor/tag/
/src/php-src/ext/spl/
/src/php-src/ext/opcache/
/src/php-src/Zend/Optimizer/
/src/php-src/ext/lexbor/lexbor/css/syntax/tokenizer/
/src/php-src/ext/lexbor/lexbor/core/
/src/php-src/ext/pcre/
/src/php-src/ext/pcre/pcre2lib/
/src/php-src/ext/lexbor/lexbor/punycode/
/src/php-src/ext/lexbor/lexbor/unicode/
/src/php-src/ext/lexbor/lexbor/dom/interfaces/
/src/php-src/main/
/src/php-src/ext/lexbor/lexbor/ports/posix/lexbor/core/
/src/php-src/ext/lexbor/lexbor/css/syntax/
/src/php-src/ext/date/lib/
/src/php-src/ext/lexbor/lexbor/html/tokenizer/
/src/php-src/main/streams/
/src/php-src/ext/hash/sha3/generic64lc/
/src/php-src/ext/lexbor/lexbor/css/at_rule/
/src/php-src/ext/opcache/jit/ir/dynasm/
/src/php-src/ext/random/
/src/php-src/ext/standard/
/src/php-src/ext/lexbor/lexbor/css/
/src/php-src/ext/lexbor/lexbor/css/selectors/
/src/php-src/ext/uri/uriparser/src/