High level conclusions

Fuzzers reach 21.98% of cyclomatic complexity.

Fuzzers reach 24.16% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

1995 / 8257

Cyclomatic complexity statically reachable by fuzzers

8016 / 36457

Runtime code coverage of functions

3169 / 8257

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: uart_transport_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	22	15.2%
gold	[1:9]	0	0.0%
yellow	[10:29]	3	2.08%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	119	82.6%
All colors	144	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
13	1	LLVMFuzzerTestOneInput	call site: 00001	__clang_call_terminate
3	56	pw::bluetooth_hci::DecodeHciUartData(pw::span , fit::function_impl<8ul, false, void (pw::bluetooth_hci::Packet const&), std::__1::allocator > const&)	call site: 00056
2	141	LLVMFuzzerTestOneInput	call site: 00141
1	54	pw::bluetooth_hci::DecodeHciUartData(pw::span , fit::function_impl<8ul, false, void (pw::bluetooth_hci::Packet const&), std::__1::allocator > const&)	call site: 00054
1	81	pw::bluetooth_hci::DecodeHciUartData(pw::span , fit::function_impl<8ul, false, void (pw::bluetooth_hci::Packet const&), std::__1::allocator > const&)	call site: 00081
1	104	pw::bluetooth_hci::DecodeHciUartData(pw::span , fit::function_impl<8ul, false, void (pw::bluetooth_hci::Packet const&), std::__1::allocator > const&)	call site: 00104
1	126	pw::bluetooth_hci::DecodeHciUartData(pw::span , fit::function_impl<8ul, false, void (pw::bluetooth_hci::Packet const&), std::__1::allocator > const&)	call site: 00126

Runtime coverage analysis

Covered functions

75

Functions that are reachable but not covered

39

Reachable functions

121

Percentage of reachable functions covered

67.77%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_bluetooth_hci/uart_transport_fuzzer.cc	2
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/function.h	3
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/function.h	12
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/../nullable.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	13
/proc/self/cwd/pw_bluetooth_hci/uart_transport.cc	1
/proc/self/cwd/pw_bluetooth_hci/packet.cc	4
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/endian.h	4
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_hci/_virtual_includes/packet/pw_bluetooth_hci/packet.h	10
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/assert/pw_assert/assert.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status_with_size.h	4
/usr/local/bin/../include/c++/v1/optional	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	4

Fuzzer: valid_packet_reader_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	34	18.8%
gold	[1:9]	4	2.22%
yellow	[10:29]	6	3.33%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	136	75.5%
All colors	180	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
7	88	pw::string::FormatVaList(pw::span , char const*, __va_list_tag*)	call site: 00088
5	63	pw::StringBuilder::ResizeAndTerminate(unsigned long)	call site: 00063
5	108	pw::StringBuilder::view() const	call site: 00108	_ZN3fit6resultIN2bt2sm9ErrorCodeEJNS2_17ValidPacketReaderEEEC2IS3_TnNSt3__19enable_ifIXsr5cpp17E13conjunction_vINS7_16is_constructibleIS3_JT_EEEEEbE4typeELb1EEENS_5errorISA_EE
3	17	bt::sm::ValidPacketReader::ParseSdu(std::__1::unique_ptr > const&)	call site: 00017	pw_Log
3	80	pw::string::FormatVaList(pw::span , char const*, __va_list_tag*)	call site: 00080
2	2	bt::sm::fuzz(unsigned char const*, unsigned long)	call site: 00002
2	30	pw::StringBuilder::StatusCode(pw::Status)	call site: 00030
2	175	bt::sm::ValidPacketReader::ParseSdu(std::__1::unique_ptr > const&)	call site: 00175
1	9	bt::DynamicByteBuffer::DynamicByteBuffer(unsigned long)	call site: 00009
1	26	pw::StringBuffer<150ul>::StringBuffer()	call site: 00026
1	28	pw::OkStatus()	call site: 00028
1	101	pw::StringBuilder::HandleStatusWithSize(pw::StatusWithSize)	call site: 00101

Runtime coverage analysis

Covered functions

87

Functions that are reachable but not covered

35

Reachable functions

171

Percentage of reachable functions covered

79.53%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_bluetooth_sapphire/host/sm/valid_packet_reader_parse_sdu_fuzztest.cc	2
/proc/self/cwd/pw_bluetooth_sapphire/host/common/byte_buffer.cc	4
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/byte_buffer.h	6
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	1
/proc/self/cwd/pw_bluetooth_sapphire/host/sm/packet.cc	3
/proc/self/cwd/pw_bluetooth_sapphire/host/common/log.cc	2
/proc/self/cwd/pw_log_basic/log_basic.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/builder/pw_string/string_builder.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	12
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	6
/proc/self/cwd/pw_string/string_builder.cc	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/util.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/internal/length.h	1
/proc/self/cwd/pw_string/format.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status_with_size.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/log.h	1
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/result.h	5
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/result.h	4
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/packet_view.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/sm/_virtual_includes/definitions/pw_bluetooth_sapphire/internal/host/sm/packet.h	1

Fuzzer: basic_mode_rx_engine_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	31	9.87%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	283	90.1%
All colors	314	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
15	107	bt::l2cap::OutboundFrame::MakeBasicHeader() const	call site: 00107
6	40	bt::l2cap::OutboundFrame::OutboundFrame(unsigned short, bt::ByteBuffer const&, bt::l2cap::FrameCheckSequenceOption)	call site: 00040	fflush
1	16	LLVMFuzzerTestOneInput	call site: 00016
1	59	bt::StaticByteBuffer<4ul>::StaticByteBuffer()	call site: 00059
1	69	bt::MutableByteBuffer::mutable_view(unsigned long, unsigned long)	call site: 00069
1	75	bt::MutableBufferView::MutableBufferView(void*, unsigned long)	call site: 00075
1	103	bt::MutableByteBuffer::Write(unsigned char const*, unsigned long, unsigned long)	call site: 00103
1	105	bt::MutableByteBuffer::Write(unsigned char const*, unsigned long, unsigned long)	call site: 00105
1	183	bt::l2cap::OutboundFrame::WriteToFragment(bt::MutableBufferView, unsigned long)	call site: 00183
1	240	bt::l2cap::Fragmenter::BuildFrame(unsigned short, bt::ByteBuffer const&, bt::l2cap::FrameCheckSequenceOption, bool) const	call site: 00240
1	301	bt::l2cap::PDU::Copy(bt::MutableByteBuffer*, unsigned long, unsigned long) const	call site: 00301
1	312	LLVMFuzzerTestOneInput	call site: 00312

Runtime coverage analysis

Covered functions

92

Functions that are reachable but not covered

45

Reachable functions

172

Percentage of reachable functions covered

73.84%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/basic_mode_rx_engine_fuzztest.cc	1
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/fragmenter.cc	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/basic_mode_rx_engine.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/rx_engine.h	2
/proc/self/cwd/pw_bluetooth_sapphire/host/common/byte_buffer.cc	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/byte_buffer.h	20
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/fragmenter.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/endian.h	7
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/fcs.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/pdu.h	4
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/acl_data_packet.cc	5
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/packet.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/packet_view.h	11
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/pdu.cc	5
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/basic_mode_rx_engine.cc	1

Fuzzer: encoder_fuzz_test

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	10	2.14%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	0.21%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	455	97.6%
All colors	466	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
4	16	pw::protobuf::StreamEncoder::StreamEncoder(pw::protobuf::StreamEncoder&, pw::span , bool)	call site: 00016
1	32	unsigned long pw::varint::EncodedSize (unsigned long)	call site: 00032	_ZN5cpp208internal21count_zeros_from_leftImEENSt3__19enable_ifIXaaaasr11is_bit_typeIT_EE5valueltLm4EstS4_lestS4_Lm8EEiE4typeES4_
1	66	pw::Result ::Result (std::__1::in_place_t, unsigned long&&)	call site: 00066
1	435	pw::protobuf::fuzz::(anonymous namespace)::RecursiveFuzzedEncode(FuzzedDataProvider&, pw::protobuf::StreamEncoder&, unsigned int)	call site: 00435
1	452	pw::protobuf::StreamEncoder::CloseNestedMessage(pw::protobuf::StreamEncoder&)	call site: 00452
1	462	pw::protobuf::StreamEncoder::~StreamEncoder()	call site: 00462	__cxa_begin_catch
1	464	pw::protobuf::fuzz::(anonymous namespace)::TestOneInput(FuzzedDataProvider&)	call site: 00464

Runtime coverage analysis

Covered functions

223

Functions that are reachable but not covered

19

Reachable functions

451

Percentage of reachable functions covered

95.79%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_protobuf/encoder_fuzzer.cc	18
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	100
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_protobuf/_virtual_includes/pw_protobuf/pw_protobuf/encoder.h	39
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	10
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_stream/_virtual_includes/pw_stream/pw_stream/memory_stream.h	6
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_stream/_virtual_includes/pw_stream/pw_stream/stream.h	10
/proc/self/cwd/pw_protobuf/encoder.cc	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_varint/_virtual_includes/pw_varint/pw_varint/varint.h	8
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/stdcompat/include/lib/stdcompat/bit.h	1
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/stdcompat/include/lib/stdcompat/internal/bit.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	4
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_protobuf/_virtual_includes/pw_protobuf/pw_protobuf/wire_format.h	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_protobuf/_virtual_includes/pw_protobuf/pw_protobuf/serialized_size.h	4
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/assert/pw_assert/assert.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_result/_virtual_includes/pw_result/pw_result/result.h	4
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_result/_virtual_includes/pw_result/pw_result/internal/result_internal.h	1
/proc/self/cwd/pw_varint/varint_c.c	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/endian.h	10
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/array.h	2

Fuzzer: data_element_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	35	10.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	294	89.3%
All colors	329	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
5	298	pw::string::FormatVaList(pw::span , char const*, __va_list_tag*)	call site: 00298
4	145	bt::UUID::UUID(bt::ByteBuffer const&)	call site: 00145
3	80	void bt::sdp::DataElement::Set (unsigned char)	call site: 00080	fflush
3	125	void bt::sdp::DataElement::Set (bt::UUID)	call site: 00125	fflush
3	275	pw::Status::ResourceExhausted()	call site: 00275
2	2	bt::sdp::fuzz(unsigned char const*, unsigned long)	call site: 00002
2	240	pw::StringBuilder::StatusCode(pw::Status)	call site: 00240
1	9	bt::DynamicByteBuffer::DynamicByteBuffer(unsigned long)	call site: 00009
1	29	bt::ByteBuffer::view(unsigned long, unsigned long) const	call site: 00029
1	70	bt::sdp::DataElement::Read(bt::sdp::DataElement*, bt::ByteBuffer const&)	call site: 00070
1	72	bt::sdp::DataElement::Read(bt::sdp::DataElement*, bt::ByteBuffer const&)	call site: 00072
1	157	bt::sdp::DataElement::Read(bt::sdp::DataElement*, bt::ByteBuffer const&)	call site: 00157

Runtime coverage analysis

Covered functions

156

Functions that are reachable but not covered

26

Reachable functions

297

Percentage of reachable functions covered

91.25%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_bluetooth_sapphire/host/sdp/data_element_fuzztest.cc	2
/proc/self/cwd/pw_bluetooth_sapphire/host/common/byte_buffer.cc	18
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/byte_buffer.h	21
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	1
/proc/self/cwd/pw_bluetooth_sapphire/host/sdp/data_element.cc	22
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/uuid.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/endian.h	18
/proc/self/cwd/pw_bluetooth_sapphire/host/common/uuid.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/sdp/_virtual_includes/definitions/pw_bluetooth_sapphire/internal/host/sdp/data_element.h	1
/proc/self/cwd/pw_bluetooth_sapphire/host/common/log.cc	2
/proc/self/cwd/pw_log_basic/log_basic.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/builder/pw_string/string_builder.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	12
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	6
/proc/self/cwd/pw_string/string_builder.cc	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/util.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/internal/length.h	1
/proc/self/cwd/pw_string/format.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status_with_size.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/log.h	1

Fuzzer: advertising_data_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	123	18.5%
gold	[1:9]	14	2.10%
yellow	[10:29]	21	3.16%
greenyellow	[30:49]	3	0.45%
lawngreen	50+	503	75.7%
All colors	664	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
12	114	bt::AdvertisingData::FromBytes(bt::ByteBuffer const&)	call site: 00114	_ZN3fit8internal13function_baseILm16ELb0EFbRKN2bt4UUIDEENSt3__19allocatorISt4byteEEEC2IZNS0_13make_the_callITnDaXadL_ZNS2_15AdvertisingData14AddServiceUuidES5_EESE_JS5_EEEDaPT0_NS_14parameter_packIJDpT1_EEEEUlS5_E_vEEOT_
7	88	bt::AdvertisingData::FromBytes(bt::ByteBuffer const&)	call site: 00088	__errno_location
7	426	pw::utf8::EncodeCodePoint(unsigned int)	call site: 00426	_ZN2pw6ResultINS_4utf816EncodedCodePointEEC2INS_6StatusETnNSt3__19enable_ifIXsr3std11conjunctionINS6_14is_convertibleIOT_S5_EENS6_16is_constructibleIS5_JSA_EEENS6_8negationINS6_7is_sameIu7__decayIS9_ES3_EEEENSE_INSF_ISG_S2_EEEENSE_INSF_ISG_NS6_10in_place_tEEEEENSE_INS_15internal_result29HasConversionOperatorToResultIS2_SA_vEEEEEE5valueEiE4typeELi0EEESA_
7	656	bt::common::fuzz(unsigned char const*, unsigned long)	call site: 00656	__clang_call_terminate
6	499	bt::common::fuzz(unsigned char const*, unsigned long)	call site: 00499	fflush
5	370	_ZN2pw6ResultINS_3utf16CodePointAndSizeEEC2INS_6StatusETnNSt3__19enable_ifIXsr3std11conjunctionINS6_14is_convertibleIOT_S5_EENS6_16is_constructibleIS5_JSA_EEENS6_8negationINS6_7is_sameIu7__decayIS9_ES3_EEEENSE_INSF_ISG_S2_EEEENSE_INSF_ISG_NS6_10in_place_tEEEEENSE_INS_15internal_result29HasConversionOperatorToResultIS2_SA_vEEEEEE5valueEiE4typeELi0EEESA_	call site: 00370	fflush
4	46	bt::AdvertisingData::FromBytes(bt::ByteBuffer const&)	call site: 00046
4	165	bt::AdvertisingData::FromBytes(bt::ByteBuffer const&)	call site: 00165	_ZN3fit8internal13function_baseILm16ELb0EFbRKN2bt4UUIDEENSt3__19allocatorISt4byteEEEC2IZNS0_13make_the_callITnDaXadL_ZNS2_15AdvertisingData19AddSolicitationUuidES5_EESE_JS5_EEEDaPT0_NS_14parameter_packIJDpT1_EEEEUlS5_E_vEEOT_
3	108	bt::AdvertisingData::FromBytes(bt::ByteBuffer const&)	call site: 00108	fflush
3	152	bt::ParseUuids(bt::BufferView const&, bt::UUIDElemSize, fit::function_impl<16ul, false, bool (bt::UUID const&), std::__1::allocator >)	call site: 00152
3	183	bt::AdvertisingData::SetManufacturerData(unsigned short, bt::BufferView const&)	call site: 00183	pw_Log
3	231	pw::Status::ResourceExhausted()	call site: 00231

Runtime coverage analysis

Covered functions

173

Functions that are reachable but not covered

130

Reachable functions

431

Percentage of reachable functions covered

69.84%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_bluetooth_sapphire/host/common/advertising_data_fuzztest.cc	2
/proc/self/cwd/pw_bluetooth_sapphire/host/common/byte_buffer.cc	19
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/byte_buffer.h	15
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	1
/proc/self/cwd/pw_bluetooth_sapphire/host/common/advertising_data.cc	21
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/result.h	9
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/result.h	10
/proc/self/cwd/pw_bluetooth_sapphire/host/common/supplement_data.cc	5
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/supplement_data.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/advertising_data.h	7
/proc/self/cwd/pw_bluetooth_sapphire/lib/cpp-string/string_printf.cc	3
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/function.h	8
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/function.h	16
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/../nullable.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/uuid.h	7
/proc/self/cwd/pw_bluetooth_sapphire/host/common/uuid.cc	4
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/endian.h	6
/proc/self/cwd/pw_bluetooth_sapphire/host/common/log.cc	2
/proc/self/cwd/pw_log_basic/log_basic.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/builder/pw_string/string_builder.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	12
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	7
/proc/self/cwd/pw_string/string_builder.cc	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/util.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/internal/length.h	1
/proc/self/cwd/pw_string/format.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status_with_size.h	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/log.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/to_string.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/utf_codecs/pw_string/utf_codecs.h	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_result/_virtual_includes/pw_result/pw_result/result.h	10
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_result/_virtual_includes/pw_result/pw_result/internal/result_internal.h	4
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/assert/pw_assert/assert.h	1
/usr/local/bin/../include/c++/v1/optional	6

Fuzzer: detokenize_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	152	61.0%
gold	[1:9]	16	6.42%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	81	32.5%
All colors	249	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
84	155	pw::tokenizer::DecodedFormatString::value() const	call site: 00155	pw_Base64Decode
40	103	pw::span ::subspan(unsigned long, unsigned long) const	call site: 00103	pw_varint_Decode64
11	73	pw::tokenizer::DetokenizedString::DetokenizedString(pw::tokenizer::Detokenizer const&, bool, unsigned int, pw::span const, 18446744073709551615ul> const&, pw::span const&)	call site: 00073
10	90	pw::span ::empty() const	call site: 00090
3	86	pw::tokenizer::StringSegment::Decode(pw::span const&) const	call site: 00086
2	48	pw::tokenizer::Detokenizer::Detokenize(pw::span const&, std::__1::basic_string_view >, bool) const	call site: 00048	isspace
1	51	pw::span , 18446744073709551615ul>::span()	call site: 00051
1	151	pw::tokenizer::DetokenizedString::DetokenizedString(pw::tokenizer::Detokenizer const&, bool, unsigned int, pw::span const, 18446744073709551615ul> const&, pw::span const&)	call site: 00151

Runtime coverage analysis

Covered functions

73

Functions that are reachable but not covered

119

Reachable functions

258

Percentage of reachable functions covered

53.88%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_tokenizer/detokenize_fuzzer.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_tokenizer/_virtual_includes/decoder/pw_tokenizer/token_database.h	14
/proc/self/cwd/pw_tokenizer/detokenize.cc	24
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_tokenizer/_virtual_includes/decoder/pw_tokenizer/detokenize.h	10
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	33
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/endian.h	4
/proc/self/cwd/pw_tokenizer/decode.cc	10
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_tokenizer/_virtual_includes/decoder/pw_tokenizer/internal/decode.h	19
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_varint/_virtual_includes/pw_varint/pw_varint/varint.h	3
/proc/self/cwd/pw_varint/varint_c.c	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_base64/_virtual_includes/pw_base64/pw_base64/base64.h	3
/proc/self/cwd/pw_base64/base64.cc	6
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_tokenizer/_virtual_includes/pw_tokenizer/pw_tokenizer/internal/tokenize_string.h	1

Fuzzer: decoder_fuzz_test

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	54	9.44%
gold	[1:9]	12	2.09%
yellow	[10:29]	15	2.62%
greenyellow	[30:49]	13	2.27%
lawngreen	50+	478	83.5%
All colors	572	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
11	91	pw::protobuf::StreamDecoder::Advance(unsigned long)	call site: 00091
8	21	pw::protobuf::StreamDecoder::Next()	call site: 00021	fflush
7	556	pw::protobuf::StreamDecoder::CloseNestedDecoder(pw::protobuf::StreamDecoder&)	call site: 00556	fflush
6	198	pw::protobuf::StreamDecoder::ReadOneVarint(pw::span , pw::protobuf::internal::VarintType)	call site: 00198	fflush
5	63	_ZN2pw6ResultINS_4spanISt4byteLm18446744073709551615EEEEC2INS_6StatusETnNSt3__19enable_ifIXsr3std11conjunctionINS7_14is_convertibleIOT_S6_EENS7_16is_constructibleIS6_JSB_EEENS7_8negationINS7_7is_sameIu7__decayISA_ES4_EEEENSF_INSG_ISH_S3_EEEENSF_INSG_ISH_NS7_10in_place_tEEEEENSF_INS_15internal_result29HasConversionOperatorToResultIS3_SB_vEEEEEE5valueEiE4typeELi0EEESB_	call site: 00063	fflush
5	81	pw::internal::ConvertToValue(pw::StatusWithSize)	call site: 00081
4	567	pw::protobuf::fuzz::(anonymous namespace)::TestOneInput(FuzzedDataProvider&)	call site: 00567
2	76	pw::varint::Read(pw::stream::Reader&, unsigned long*, unsigned long)	call site: 00076
1	5	pw::protobuf::fuzz::(anonymous namespace)::TestOneInput(FuzzedDataProvider&)	call site: 00005
1	58	pw::Result >::Result >(std::__1::in_place_t, pw::span &&)	call site: 00058
1	79	pw::internal::ConvertToStatus(pw::StatusWithSize)	call site: 00079
1	261	_ZN2pw6ResultImEC2INS_6StatusETnNSt3__19enable_ifIXsr3std11conjunctionINS4_14is_convertibleIOT_S3_EENS4_16is_constructibleIS3_JS8_EEENS4_8negationINS4_7is_sameIu7__decayIS7_ES1_EEEENSC_INSD_ISE_mEEEENSC_INSD_ISE_NS4_10in_place_tEEEEENSC_INS_15internal_result29HasConversionOperatorToResultImS8_vEEEEEE5valueEiE4typeELi0EEES8_	call site: 00261	_ZN2pw6ResultImEC2INS_6StatusETnNSt3__19enable_ifIXsr3std11conjunctionINS4_14is_convertibleIOT_S3_EENS4_16is_constructibleIS3_JS8_EEENS4_8negationINS4_7is_sameIu7__decayIS7_ES1_EEEENSC_INSD_ISE_mEEEENSC_INSD_ISE_NS4_10in_place_tEEEEENSC_INS_15internal_result29HasConversionOperatorToResultImS8_vEEEEEE5valueEiE4typeELi0EEES8_

Runtime coverage analysis

Covered functions

222

Functions that are reachable but not covered

15

Reachable functions

411

Percentage of reachable functions covered

96.35%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_protobuf/decoder_fuzzer.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	53
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_stream/_virtual_includes/pw_stream/pw_stream/memory_stream.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_stream/_virtual_includes/pw_stream/pw_stream/stream.h	12
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_protobuf/_virtual_includes/pw_protobuf/pw_protobuf/stream_decoder.h	43
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	13
/proc/self/cwd/pw_protobuf/stream_decoder.cc	14
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_protobuf/_virtual_includes/pw_protobuf/pw_protobuf/wire_format.h	6
/proc/self/cwd/pw_varint/stream.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status_with_size.h	11
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/assert/pw_assert/assert.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_result/_virtual_includes/pw_result/pw_result/result.h	42
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_result/_virtual_includes/pw_result/pw_result/internal/result_internal.h	16
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_varint/_virtual_includes/pw_varint/pw_varint/varint.h	1

Fuzzer: common_handler_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	26	16.0%
gold	[1:9]	43	26.5%
yellow	[10:29]	28	17.2%
greenyellow	[30:49]	1	0.61%
lawngreen	50+	64	39.5%
All colors	162	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
7	88	pw::string::FormatVaList(pw::span , char const*, __va_list_tag*)	call site: 00088
5	63	pw::StringBuilder::ResizeAndTerminate(unsigned long)	call site: 00063
3	80	pw::string::FormatVaList(pw::span , char const*, __va_list_tag*)	call site: 00080
2	2	bt::l2cap::internal::fuzz(unsigned char const*, unsigned long)	call site: 00002
2	30	pw::StringBuilder::StatusCode(pw::Status)	call site: 00030
1	9	bt::DynamicByteBuffer::DynamicByteBuffer(unsigned long)	call site: 00009
1	18	bt::l2cap::internal::CommandHandler::Response::ParseReject(bt::ByteBuffer const&)	call site: 00018
1	26	pw::StringBuffer<150ul>::StringBuffer()	call site: 00026
1	28	pw::OkStatus()	call site: 00028
1	101	pw::StringBuilder::HandleStatusWithSize(pw::StatusWithSize)	call site: 00101
1	149	bt::ByteBuffer::view(unsigned long, unsigned long) const	call site: 00149
1	158	bt::l2cap::internal::CommandHandler::Response::ParseReject(bt::ByteBuffer const&)	call site: 00158

Runtime coverage analysis

Covered functions

86

Functions that are reachable but not covered

25

Reachable functions

160

Percentage of reachable functions covered

84.38%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/common_handler_fuzztest.cc	4
/proc/self/cwd/pw_bluetooth_sapphire/host/common/byte_buffer.cc	5
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/byte_buffer.h	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/command_handler.h	2
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/command_handler.cc	1
/proc/self/cwd/pw_bluetooth_sapphire/host/common/log.cc	2
/proc/self/cwd/pw_log_basic/log_basic.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/builder/pw_string/string_builder.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	12
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	6
/proc/self/cwd/pw_string/string_builder.cc	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/util.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/internal/length.h	1
/proc/self/cwd/pw_string/format.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status_with_size.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/log.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/lib/cpp-type/_virtual_includes/cpp-type/cpp-type/member_pointer_traits.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/endian.h	3

Fuzzer: channel_configuration_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	39	14.3%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	11	4.04%
lawngreen	50+	222	81.6%
All colors	272	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
7	98	pw::string::FormatVaList(pw::span , char const*, __va_list_tag*)	call site: 00098
5	73	pw::StringBuilder::ResizeAndTerminate(unsigned long)	call site: 00073
3	90	pw::string::FormatVaList(pw::span , char const*, __va_list_tag*)	call site: 00090
2	2	bt::l2cap::internal::fuzz(unsigned char const*, unsigned long)	call site: 00002
2	40	pw::StringBuilder::StatusCode(pw::Status)	call site: 00040
2	255	bt::l2cap::internal::ChannelConfiguration::ReadNextOption(bt::ByteBuffer const&)	call site: 00255
1	9	bt::DynamicByteBuffer::DynamicByteBuffer(unsigned long)	call site: 00009
1	19	bt::ByteBuffer::view(unsigned long, unsigned long) const	call site: 00019
1	28	bt::l2cap::internal::ChannelConfiguration::ReadNextOption(bt::ByteBuffer const&)	call site: 00028
1	36	pw::StringBuffer<150ul>::StringBuffer()	call site: 00036
1	38	pw::OkStatus()	call site: 00038
1	111	pw::StringBuilder::HandleStatusWithSize(pw::StatusWithSize)	call site: 00111

Runtime coverage analysis

Covered functions

116

Functions that are reachable but not covered

47

Reachable functions

244

Percentage of reachable functions covered

80.74%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/channel_configuration_fuzztest.cc	2
/proc/self/cwd/pw_bluetooth_sapphire/host/common/byte_buffer.cc	11
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/byte_buffer.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/channel_configuration.h	16
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/channel_configuration.cc	13
/proc/self/cwd/pw_bluetooth_sapphire/host/common/log.cc	2
/proc/self/cwd/pw_log_basic/log_basic.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/builder/pw_string/string_builder.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	12
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	6
/proc/self/cwd/pw_string/string_builder.cc	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/util.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/internal/length.h	1
/proc/self/cwd/pw_string/format.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status_with_size.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/log.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/packet_view.h	6
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/lib/cpp-type/_virtual_includes/cpp-type/cpp-type/member_pointer_traits.h	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/endian.h	3

Fuzzer: pdu_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	101	14.6%
gold	[1:9]	21	3.05%
yellow	[10:29]	38	5.52%
greenyellow	[30:49]	2	0.29%
lawngreen	50+	526	76.4%
All colors	688	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
8	497	bt::sdp::fuzz(unsigned char const*, unsigned long)	call site: 00497	pw_Log
5	590	_ZN2pw6ResultINS_3utf16CodePointAndSizeEEC2INS_6StatusETnNSt3__19enable_ifIXsr3std11conjunctionINS6_14is_convertibleIOT_S5_EENS6_16is_constructibleIS5_JSA_EEENS6_8negationINS6_7is_sameIu7__decayIS9_ES3_EEEENSE_INSF_ISG_S2_EEEENSE_INSF_ISG_NS6_10in_place_tEEEEENSE_INS_15internal_result29HasConversionOperatorToResultIS2_SA_vEEEEEE5valueEiE4typeELi0EEESA_	call site: 00590	fflush
4	161	bt::sdp::ServiceSearchResponse::Parse(bt::ByteBuffer const&)	call site: 00161	pw_Log
4	253	bt::sdp::fuzz(unsigned char const*, unsigned long)	call site: 00253	pw_Log
4	287	bt::sdp::ServiceAttributeResponse::Parse(bt::ByteBuffer const&)	call site: 00287	pw_Log
4	292	bt::sdp::ServiceAttributeResponse::Parse(bt::ByteBuffer const&)	call site: 00292
4	395	bt::UUID::UUID(bt::ByteBuffer const&)	call site: 00395
4	533	bt::sdp::ServiceSearchAttributeResponse::Parse(bt::ByteBuffer const&)	call site: 00533	pw_Log
4	538	bt::sdp::ServiceSearchAttributeResponse::Parse(bt::ByteBuffer const&)	call site: 00538
3	62	bt::sdp::fuzz(unsigned char const*, unsigned long)	call site: 00062	pw_Log
3	110	pw::Status::ResourceExhausted()	call site: 00110
3	133	pw::string::FormatVaList(pw::span , char const*, __va_list_tag*)	call site: 00133

Runtime coverage analysis

Covered functions

206

Functions that are reachable but not covered

55

Reachable functions

411

Percentage of reachable functions covered

86.62%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_bluetooth_sapphire/host/sdp/pdu_fuzztest.cc	2
/proc/self/cwd/pw_bluetooth_sapphire/host/common/byte_buffer.cc	20
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/byte_buffer.h	22
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	1
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/result.h	4
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/result.h	4
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/sdp/_virtual_includes/sdp/pw_bluetooth_sapphire/internal/host/sdp/pdu.h	7
/proc/self/cwd/pw_bluetooth_sapphire/host/sdp/pdu.cc	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/error.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/endian.h	18
/proc/self/cwd/pw_bluetooth_sapphire/host/common/log.cc	2
/proc/self/cwd/pw_log_basic/log_basic.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/builder/pw_string/string_builder.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	12
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	7
/proc/self/cwd/pw_string/string_builder.cc	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/util.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/internal/length.h	1
/proc/self/cwd/pw_string/format.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status_with_size.h	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/log.h	1
/proc/self/cwd/pw_bluetooth_sapphire/host/common/slab_allocator.cc	1
/proc/self/cwd/pw_bluetooth_sapphire/host/sdp/data_element.cc	26
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/uuid.h	7
/proc/self/cwd/pw_bluetooth_sapphire/host/common/uuid.cc	4
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/sdp/_virtual_includes/definitions/pw_bluetooth_sapphire/internal/host/sdp/data_element.h	3
/usr/local/bin/../include/c++/v1/optional	2
/proc/self/cwd/pw_bluetooth_sapphire/lib/cpp-string/string_printf.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/utf_codecs/pw_string/utf_codecs.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_result/_virtual_includes/pw_result/pw_result/result.h	5
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_result/_virtual_includes/pw_result/pw_result/internal/result_internal.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/assert/pw_assert/assert.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/to_string.h	1

Fuzzer: enhanced_retransmission_mode_engines_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	142	19.2%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	597	80.7%
All colors	739	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
29	72	bt::l2cap::internal::MakeLinkedEnhancedRetransmissionModeEngines(unsigned short, unsigned short, unsigned char, unsigned char, bt::l2cap::internal::TxEngine::TxChannel&, fit::function_impl<16ul, false, void (), std::__1::allocator >, pw::async::Dispatcher&)	call site: 00072	__clang_call_terminate
11	58	LLVMFuzzerTestOneInput	call site: 00058	__clang_call_terminate
7	267	pw::string::FormatVaList(pw::span , char const*, __va_list_tag*)	call site: 00267
6	720	pw::async::test::backend::NativeFakeDispatcher::DrainTaskQueue()	call site: 00720	pw_Log
5	52	LLVMFuzzerTestOneInput	call site: 00052
5	242	pw::StringBuilder::ResizeAndTerminate(unsigned long)	call site: 00242
4	105	bt::l2cap::internal::MakeLinkedEnhancedRetransmissionModeEngines(unsigned short, unsigned short, unsigned char, unsigned char, bt::l2cap::internal::TxEngine::TxChannel&, fit::function_impl<16ul, false, void (), std::__1::allocator >, pw::async::Dispatcher&)	call site: 00105	_ZN3fit8internal13function_baseILm16ELb0EFvhbENSt3__19allocatorISt4byteEEEC2IZNS0_13make_the_callITnDaXadL_ZN2bt5l2cap8internal34EnhancedRetransmissionModeTxEngine12UpdateAckSeqEhbEESD_JhbEEEDaPT0_NS_14parameter_packIJDpT1_EEEEUlhbE_vEEOT_
4	111	bt::l2cap::internal::EnhancedRetransmissionModeRxEngine::set_receive_seq_num_callback(fit::function_impl<16ul, false, void (unsigned char, bool), std::__1::allocator >)	call site: 00111	__clang_call_terminate
4	120	bt::l2cap::internal::MakeLinkedEnhancedRetransmissionModeEngines(unsigned short, unsigned short, unsigned char, unsigned char, bt::l2cap::internal::TxEngine::TxChannel&, fit::function_impl<16ul, false, void (), std::__1::allocator >, pw::async::Dispatcher&)	call site: 00120	_ZN3fit8internal13function_baseILm16ELb0EFvhENSt3__19allocatorISt4byteEEEC2IZNS0_13make_the_callITnDaXadL_ZN2bt5l2cap8internal34EnhancedRetransmissionModeTxEngine12UpdateReqSeqEhEESD_JhEEEDaPT0_NS_14parameter_packIJDpT1_EEEEUlhE_vEEOT_
4	131	bt::l2cap::internal::MakeLinkedEnhancedRetransmissionModeEngines(unsigned short, unsigned short, unsigned char, unsigned char, bt::l2cap::internal::TxEngine::TxChannel&, fit::function_impl<16ul, false, void (), std::__1::allocator >, pw::async::Dispatcher&)	call site: 00131	_ZN3fit8internal13function_baseILm16ELb0EFvvENSt3__19allocatorISt4byteEEEC2IZNS0_13make_the_callITnDaXadL_ZN2bt5l2cap8internal34EnhancedRetransmissionModeTxEngine13SetRemoteBusyEvEESD_JEEEDaPT0_NS_14parameter_packIJDpT1_EEEEUlvE_vEEOT_
4	141	bt::l2cap::internal::MakeLinkedEnhancedRetransmissionModeEngines(unsigned short, unsigned short, unsigned char, unsigned char, bt::l2cap::internal::TxEngine::TxChannel&, fit::function_impl<16ul, false, void (), std::__1::allocator >, pw::async::Dispatcher&)	call site: 00141	_ZN3fit8internal13function_baseILm16ELb0EFvvENSt3__19allocatorISt4byteEEEC2IZNS0_13make_the_callITnDaXadL_ZN2bt5l2cap8internal34EnhancedRetransmissionModeTxEngine15ClearRemoteBusyEvEESD_JEEEDaPT0_NS_14parameter_packIJDpT1_EEEEUlvE_vEEOT_
4	151	bt::l2cap::internal::MakeLinkedEnhancedRetransmissionModeEngines(unsigned short, unsigned short, unsigned char, unsigned char, bt::l2cap::internal::TxEngine::TxChannel&, fit::function_impl<16ul, false, void (), std::__1::allocator >, pw::async::Dispatcher&)	call site: 00151	_ZN3fit8internal13function_baseILm16ELb0EFvbENSt3__19allocatorISt4byteEEEC2IZNS0_13make_the_callITnDaXadL_ZN2bt5l2cap8internal34EnhancedRetransmissionModeTxEngine19SetSingleRetransmitEbEESD_JbEEEDaPT0_NS_14parameter_packIJDpT1_EEEEUlbE_vEEOT_

Runtime coverage analysis

Covered functions

334

Functions that are reachable but not covered

199

Reachable functions

642

Percentage of reachable functions covered

69.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/enhanced_retransmission_mode_engines_fuzztest.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/fake_dispatcher/pw_async/fake_dispatcher.h	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/dispatcher/pw_async/dispatcher.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_chrono/_virtual_includes/system_clock/pw_chrono/system_clock.h	2
/proc/self/cwd/pw_async_basic/fake_dispatcher.cc	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/legacy_intrusive_list/pw_containers/internal/legacy_intrusive_list.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_forward_list/pw_containers/intrusive_forward_list.h	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_list_common/pw_containers/internal/intrusive_list.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_list_common/pw_containers/internal/intrusive_list_item.h	12
/proc/self/cwd/pw_containers/intrusive_item.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/testing/pw_bluetooth_sapphire/internal/host/l2cap/fake_tx_channel.h	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/tx_engine.h	5
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/function.h	34
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/function.h	47
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/../nullable.h	7
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/enhanced_retransmission_mode_engines.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/assert/pw_assert/assert.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/enhanced_retransmission_mode_rx_engine.h	6
/proc/self/cwd/pw_bluetooth_sapphire/host/common/byte_buffer.cc	16
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/byte_buffer.h	27
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/enhanced_retransmission_mode_tx_engine.cc	8
/usr/local/bin/../include/c++/v1/optional	10
/proc/self/cwd/pw_bluetooth_sapphire/host/common/log.cc	2
/proc/self/cwd/pw_log_basic/log_basic.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/builder/pw_string/string_builder.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	12
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	7
/proc/self/cwd/pw_string/string_builder.cc	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/util.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/internal/length.h	1
/proc/self/cwd/pw_string/format.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status_with_size.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/log.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/definitions/pw_bluetooth_sapphire/internal/host/l2cap/frame_headers.h	10
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/endian.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/enhanced_retransmission_mode_tx_engine.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/smart_task.h	3
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/fragmenter.cc	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/fragmenter.h	2
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/fcs.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/pdu.h	4
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/acl_data_packet.cc	5
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/packet.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/packet_view.h	11
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/pdu.cc	5
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/enhanced_retransmission_mode_rx_engine.cc	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async_basic/_virtual_includes/fake_dispatcher_private/pw_async_basic/fake_dispatcher.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async_basic/_virtual_includes/task_private/pw_async_basic/task.h	2

Fuzzer: peer_cache_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	277	35.2%
gold	[1:9]	1	0.12%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	507	64.5%
All colors	785	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
9	206	bt::gap::PeerCache::InsertPeerRecord(bt::PeerId, bt::DeviceAddress const&, bool)	call site: 00206	_ZN3fit8internal13function_baseILm16ELb0EFvRKN2bt3gap4PeerENS4_21NotifyListenersChangeEENSt3__19allocatorISt4byteEEEC2IZNS0_13make_the_callITnDaXadL_ZNS3_9PeerCache17NotifyPeerUpdatedES6_S7_EESG_JS6_S7_EEEDaPT0_NS_14parameter_packIJDpT1_EEEEUlS6_S7_E_vEEOT_
9	438	bt::gap::Peer::LowEnergyData::LowEnergyData(bt::gap::Peer*)	call site: 00438	_ZN3fit7is_nullIRPFlRKlETnNSt3__19enable_ifIXsr23is_comparable_with_nullIT_EE5valueEbE4typeELb1EEEbOS8_
7	480	bt::gap::Peer::LowEnergyData::LowEnergyData(bt::gap::Peer*)	call site: 00480	__clang_call_terminate
7	752	unsigned long pw::containers::internal::GenericIntrusiveList ::remove_if ::remove(pw::containers::internal::IntrusiveForwardListItem const&)::{lambda(pw::containers::internal::IntrusiveForwardListItem const&)#1}>(pw::containers::internal::GenericIntrusiveList ::remove(pw::containers::internal::IntrusiveForwardListItem const&)::{lambda(pw::containers::internal::IntrusiveForwardListItem const&)#1}, unsigned long)	call site: 00752
6	331	bt::gap::Peer::Peer(fit::function_impl<16ul, false, void (bt::gap::Peer const&, bt::gap::Peer::NotifyListenersChange), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, bool (bt::sm::PairingData const&), std::__1::allocator >, bt::PeerId, bt::DeviceAddress const&, bool, bt::gap::PeerMetrics*, pw::async::Dispatcher&)	call site: 00331	_ZN3fit7is_nullIRPFbRKbETnNSt3__19enable_ifIXsr23is_comparable_with_nullIT_EE5valueEbE4typeELb1EEEbOS8_
6	548	bt::gap::PeerCache::InsertPeerRecord(bt::PeerId, bt::DeviceAddress const&, bool)	call site: 00548
6	760	pw::async::test::backend::NativeFakeDispatcher::DrainTaskQueue()	call site: 00760	pw_Log
5	236	bt::gap::Peer::Peer(fit::function_impl<16ul, false, void (bt::gap::Peer const&, bt::gap::Peer::NotifyListenersChange), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, bool (bt::sm::PairingData const&), std::__1::allocator >, bt::PeerId, bt::DeviceAddress const&, bool, bt::gap::PeerMetrics*, pw::async::Dispatcher&)	call site: 00236	__clang_call_terminate
5	260	bt::gap::Peer::Peer(fit::function_impl<16ul, false, void (bt::gap::Peer const&, bt::gap::Peer::NotifyListenersChange), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, bool (bt::sm::PairingData const&), std::__1::allocator >, bt::PeerId, bt::DeviceAddress const&, bool, bt::gap::PeerMetrics*, pw::async::Dispatcher&)	call site: 00260	_ZN3fit7is_nullIRZN2bt3gap4PeerC1ENS_13function_implILm16ELb0EFvRKS3_NS3_21NotifyListenersChangeEENSt3__19allocatorISt4byteEEEENS4_ILm16ELb0EFvS6_ESC_EESF_NS4_ILm16ELb0EFbRKNS1_2sm11PairingDataEESC_EENS1_6PeerIdERKNS1_13DeviceAddressEbPNS2_11PeerMetricsERN2pw5async10DispatcherEE3$_0TnNS9_9enable_ifIXsr23is_comparable_with_nullIT_EE5valueEbE4typeELb1EEEbOSZ_
5	283	bt::gap::Peer::Peer(fit::function_impl<16ul, false, void (bt::gap::Peer const&, bt::gap::Peer::NotifyListenersChange), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, bool (bt::sm::PairingData const&), std::__1::allocator >, bt::PeerId, bt::DeviceAddress const&, bool, bt::gap::PeerMetrics*, pw::async::Dispatcher&)	call site: 00283	_ZN3fit7is_nullIRZN2bt3gap4PeerC1ENS_13function_implILm16ELb0EFvRKS3_NS3_21NotifyListenersChangeEENSt3__19allocatorISt4byteEEEENS4_ILm16ELb0EFvS6_ESC_EESF_NS4_ILm16ELb0EFbRKNS1_2sm11PairingDataEESC_EENS1_6PeerIdERKNS1_13DeviceAddressEbPNS2_11PeerMetricsERN2pw5async10DispatcherEE3$_1TnNS9_9enable_ifIXsr23is_comparable_with_nullIT_EE5valueEbE4typeELb1EEEbOSZ_
5	295	bt::gap::Peer::Peer(fit::function_impl<16ul, false, void (bt::gap::Peer const&, bt::gap::Peer::NotifyListenersChange), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, bool (bt::sm::PairingData const&), std::__1::allocator >, bt::PeerId, bt::DeviceAddress const&, bool, bt::gap::PeerMetrics*, pw::async::Dispatcher&)	call site: 00295	_ZN3fit7is_nullIRZN2bt3gap4PeerC1ENS_13function_implILm16ELb0EFvRKS3_NS3_21NotifyListenersChangeEENSt3__19allocatorISt4byteEEEENS4_ILm16ELb0EFvS6_ESC_EESF_NS4_ILm16ELb0EFbRKNS1_2sm11PairingDataEESC_EENS1_6PeerIdERKNS1_13DeviceAddressEbPNS2_11PeerMetricsERN2pw5async10DispatcherEE3$_2TnNS9_9enable_ifIXsr23is_comparable_with_nullIT_EE5valueEbE4typeELb1EEEbOSZ_
5	307	bt::gap::Peer::Peer(fit::function_impl<16ul, false, void (bt::gap::Peer const&, bt::gap::Peer::NotifyListenersChange), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, bool (bt::sm::PairingData const&), std::__1::allocator >, bt::PeerId, bt::DeviceAddress const&, bool, bt::gap::PeerMetrics*, pw::async::Dispatcher&)	call site: 00307	_ZN3fit7is_nullIRZN2bt3gap4PeerC1ENS_13function_implILm16ELb0EFvRKS3_NS3_21NotifyListenersChangeEENSt3__19allocatorISt4byteEEEENS4_ILm16ELb0EFvS6_ESC_EESF_NS4_ILm16ELb0EFbRKNS1_2sm11PairingDataEESC_EENS1_6PeerIdERKNS1_13DeviceAddressEbPNS2_11PeerMetricsERN2pw5async10DispatcherEE3$_3TnNS9_9enable_ifIXsr23is_comparable_with_nullIT_EE5valueEbE4typeELb1EEEbOSZ_

Runtime coverage analysis

Covered functions

591

Functions that are reachable but not covered

433

Reachable functions

998

Percentage of reachable functions covered

56.61%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_bluetooth_sapphire/host/gap/peer_cache_fuzztest.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_random/_virtual_includes/fuzzer_generator/pw_random/fuzzer.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_random/_virtual_includes/pw_random/pw_random/random.h	2
/proc/self/cwd/pw_bluetooth_sapphire/host/common/random.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/fake_dispatcher/pw_async/fake_dispatcher.h	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/dispatcher/pw_async/dispatcher.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_chrono/_virtual_includes/system_clock/pw_chrono/system_clock.h	2
/proc/self/cwd/pw_async_basic/fake_dispatcher.cc	6
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/legacy_intrusive_list/pw_containers/internal/legacy_intrusive_list.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_forward_list/pw_containers/intrusive_forward_list.h	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_list_common/pw_containers/internal/intrusive_list.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_list_common/pw_containers/internal/intrusive_list_item.h	12
/proc/self/cwd/pw_containers/intrusive_item.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/gap/_virtual_includes/gap/pw_bluetooth_sapphire/internal/host/gap/peer_cache.h	4
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/gap/_virtual_includes/gap/pw_bluetooth_sapphire/internal/host/gap/identity_resolving_list.h	2
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/function.h	69
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/function.h	107
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/gap/_virtual_includes/peer/pw_bluetooth_sapphire/internal/host/gap/peer_metrics.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/metrics.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/testing/_virtual_includes/fuzzing/pw_bluetooth_sapphire/internal/host/testing/peer_fuzzer.h	5
/proc/self/cwd/pw_bluetooth_sapphire/host/common/device_address.cc	7
/proc/self/cwd/pw_bluetooth_sapphire/host/gap/peer_cache.cc	6
/proc/self/cwd/pw_bluetooth_sapphire/host/common/identifier.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/identifier.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/random.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/device_address.h	3
/proc/self/cwd/pw_bluetooth_sapphire/host/common/log.cc	2
/proc/self/cwd/pw_string/format.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status_with_size.h	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	7
/proc/self/cwd/pw_log_basic/log_basic.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/builder/pw_string/string_builder.h	13
/proc/self/cwd/pw_string/string_builder.cc	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/util.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/internal/length.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/log.h	1
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/../nullable.h	14
/proc/self/cwd/pw_bluetooth_sapphire/host/gap/peer.cc	14
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/inspectable.h	93
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/hci-spec/_virtual_includes/hci-spec/pw_bluetooth_sapphire/internal/host/hci-spec/lmp_feature_set.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/weak_self.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_intrusive_ptr/_virtual_includes/pw_intrusive_ptr/pw_intrusive_ptr/intrusive_ptr.h	6
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/gap/_virtual_includes/peer/pw_bluetooth_sapphire/internal/host/gap/peer.h	17
/proc/self/cwd/pw_bluetooth_sapphire/host/common/byte_buffer.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/byte_buffer.h	5
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/result.h	3
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/result.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/advertising_data.h	1
/proc/self/cwd/pw_intrusive_ptr/ref_counted_base.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_intrusive_ptr/_virtual_includes/pw_intrusive_ptr/pw_intrusive_ptr/ref_counted.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/fake_inspect.h	9
/usr/local/bin/../include/c++/v1/optional	2
/proc/self/cwd/pw_bluetooth_sapphire/host/sm/types.cc	5
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/sm/_virtual_includes/definitions/pw_bluetooth_sapphire/internal/host/sm/types.h	3
/proc/self/cwd/pw_bluetooth_sapphire/host/hci-spec/util.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/to_string.h	3
/proc/self/cwd/pw_bluetooth_sapphire/lib/cpp-string/string_printf.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/smart_task.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async_basic/_virtual_includes/task_private/pw_async_basic/task.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async_basic/_virtual_includes/fake_dispatcher_private/pw_async_basic/fake_dispatcher.h	1

Fuzzer: bredr_dynamic_channel_registry_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	257	27.8%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	667	72.1%
All colors	924	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
22	500	fit::function_impl<16ul, false, bt::l2cap::internal::SignalingChannelInterface::ResponseHandlerAction (bt::l2cap::internal::SignalingChannelInterface::Status, bt::ByteBuffer const&), std::__1::allocator > bt::l2cap::internal::CommandHandler::BuildResponseHandler > >(fit::function_impl<16ul, false, void (bt::l2cap::internal::BrEdrCommandHandler::InformationResponse const&), std::__1::allocator >)	call site: 00500	fflush
15	643	bt::l2cap::OutboundFrame::MakeBasicHeader() const	call site: 00643
14	839	bt::l2cap::internal::DynamicChannelRegistry::OpenOutbound(unsigned short, bt::l2cap::ChannelParameters, fit::function_impl<16ul, false, void (bt::l2cap::internal::DynamicChannel const*), std::__1::allocator >)	call site: 00839	pw_Log
11	61	LLVMFuzzerTestOneInput	call site: 00061	__clang_call_terminate
6	165	bt::l2cap::internal::SignalingChannel::SignalingChannel(WeakPtr >, pw::bluetooth::emboss::ConnectionRole, pw::async::Dispatcher&, pw::bluetooth_sapphire::LeaseProvider&)	call site: 00165	_ZN3fit7is_nullIRZN2bt5l2cap8internal16SignalingChannelC1E7WeakPtrINS2_7ChannelE18DynamicWeakManagerIS6_EEN2pw9bluetooth6emboss14ConnectionRoleERNSA_5async10DispatcherERNSA_18bluetooth_sapphire13LeaseProviderEE3$_0TnNSt3__19enable_ifIXntsr23is_comparable_with_nullIT_EE5valueEbE4typeELb0EEEbOSO_
6	173	bt::l2cap::internal::SignalingChannel::SignalingChannel(WeakPtr >, pw::bluetooth::emboss::ConnectionRole, pw::async::Dispatcher&, pw::bluetooth_sapphire::LeaseProvider&)	call site: 00173	_ZN3fit7is_nullIRZN2bt5l2cap8internal16SignalingChannelC1E7WeakPtrINS2_7ChannelE18DynamicWeakManagerIS6_EEN2pw9bluetooth6emboss14ConnectionRoleERNSA_5async10DispatcherERNSA_18bluetooth_sapphire13LeaseProviderEE3$_1TnNSt3__19enable_ifIXntsr23is_comparable_with_nullIT_EE5valueEbE4typeELb0EEEbOSO_
6	488	bt::l2cap::internal::BrEdrDynamicChannelRegistry::SendInformationRequests()	call site: 00488	_ZN3fit7is_nullIRZN2bt5l2cap8internal27BrEdrDynamicChannelRegistry23SendInformationRequestsEvE3$_0TnNSt3__19enable_ifIXntsr23is_comparable_with_nullIT_EE5valueEbE4typeELb0EEEbOS9_
6	583	bt::l2cap::OutboundFrame::OutboundFrame(unsigned short, bt::ByteBuffer const&, bt::l2cap::FrameCheckSequenceOption)	call site: 00583	fflush
6	900	pw::async::test::backend::NativeFakeDispatcher::DrainTaskQueue()	call site: 00900	pw_Log
5	74	bt::l2cap::testing::FakeChannel::SetSendCallback(fit::function_impl<16ul, false, void (std::__1::unique_ptr >), std::__1::allocator >)	call site: 00074	__clang_call_terminate
5	211	bt::l2cap::internal::BrEdrSignalingChannel::BrEdrSignalingChannel(WeakPtr >, pw::bluetooth::emboss::ConnectionRole, pw::async::Dispatcher&, pw::bluetooth_sapphire::LeaseProvider&)	call site: 00211	_ZN3fit7is_nullIRZN2bt5l2cap8internal21BrEdrSignalingChannelC1E7WeakPtrINS2_7ChannelE18DynamicWeakManagerIS6_EEN2pw9bluetooth6emboss14ConnectionRoleERNSA_5async10DispatcherERNSA_18bluetooth_sapphire13LeaseProviderEE3$_0TnNSt3__19enable_ifIXsr23is_comparable_with_nullIT_EE5valueEbE4typeELb1EEEbOSO_
5	460	pw::string::FormatVaList(pw::span , char const*, __va_list_tag*)	call site: 00460

Runtime coverage analysis

Covered functions

636

Functions that are reachable but not covered

368

Reachable functions

877

Percentage of reachable functions covered

58.04%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/bredr_dynamic_channel_registry_fuzztest.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_random/_virtual_includes/fuzzer_generator/pw_random/fuzzer.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_random/_virtual_includes/pw_random/pw_random/random.h	5
/proc/self/cwd/pw_bluetooth_sapphire/host/common/random.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/fake_dispatcher/pw_async/fake_dispatcher.h	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/dispatcher/pw_async/dispatcher.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_chrono/_virtual_includes/system_clock/pw_chrono/system_clock.h	2
/proc/self/cwd/pw_async_basic/fake_dispatcher.cc	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/legacy_intrusive_list/pw_containers/internal/legacy_intrusive_list.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_forward_list/pw_containers/intrusive_forward_list.h	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_list_common/pw_containers/internal/intrusive_list.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_list_common/pw_containers/internal/intrusive_list_item.h	12
/proc/self/cwd/pw_containers/intrusive_item.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/_virtual_includes/null_lease_provider/pw_bluetooth_sapphire/null_lease_provider.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/_virtual_includes/lease/pw_bluetooth_sapphire/lease.h	2
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/function.h	54
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/function.h	97
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/../nullable.h	18
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/fake_channel.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/weak_self.h	36
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_intrusive_ptr/_virtual_includes/pw_intrusive_ptr/pw_intrusive_ptr/intrusive_ptr.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_intrusive_ptr/_virtual_includes/pw_intrusive_ptr/pw_intrusive_ptr/ref_counted.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_intrusive_ptr/_virtual_includes/pw_intrusive_ptr/pw_intrusive_ptr/internal/ref_counted_base.h	1
/proc/self/cwd/pw_intrusive_ptr/ref_counted_base.cc	3
/usr/local/bin/../include/c++/v1/optional	2
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/bredr_signaling_channel.cc	2
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/signaling_channel.cc	6
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/signaling_channel.h	4
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/scoped_channel.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/scoped_channel.h	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/channel.h	1
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/bredr_dynamic_channel.cc	4
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/dynamic_channel_registry.cc	5
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/bredr_command_handler.cc	8
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/command_handler.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/command_handler.h	4
/proc/self/cwd/pw_bluetooth_sapphire/host/common/log.cc	2
/proc/self/cwd/pw_log_basic/log_basic.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/builder/pw_string/string_builder.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	7
/proc/self/cwd/pw_string/string_builder.cc	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/util.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/internal/length.h	1
/proc/self/cwd/pw_string/format.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status_with_size.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/log.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/assert/pw_assert/assert.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/endian.h	7
/proc/self/cwd/pw_bluetooth_sapphire/host/common/byte_buffer.cc	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/byte_buffer.h	20
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/bredr_command_handler.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/dynamic_channel_registry.h	1
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/fragmenter.cc	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/fragmenter.h	2
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/fcs.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/pdu.h	4
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/acl_data_packet.cc	5
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/packet.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/packet_view.h	11
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/pdu.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/types.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async_basic/_virtual_includes/fake_dispatcher_private/pw_async_basic/fake_dispatcher.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async_basic/_virtual_includes/task_private/pw_async_basic/task.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/bredr_dynamic_channel.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/bredr_signaling_channel.h	1

Fuzzer: l2cap_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	331	46.4%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	381	53.5%
All colors	712	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
176	345	bt::testing::ControllerTest ::Initialize(pw::bluetooth::Controller::FeaturesBits, bool)	call site: 00345	DeleteThreadLocalValue
13	328	bt::testing::ControllerTest ::Initialize(pw::bluetooth::Controller::FeaturesBits, bool)	call site: 00328
11	260	bt::testing::ControllerTest ::Initialize(pw::bluetooth::Controller::FeaturesBits, bool)	call site: 00260	_ZN3fit7is_nullIRZN2bt7testing14ControllerTestINS2_16FuzzerControllerEE10InitializeEN2pw9bluetooth10Controller12FeaturesBitsEbEUlbE_TnNSt3__19enable_ifIXntsr23is_comparable_with_nullIT_EE5valueEbE4typeELb0EEEbOSE_
10	294	bt::hci::Transport::Initialize(fit::callback_impl<16ul, false, void (bool), std::__1::allocator >)	call site: 00294	_ZN3fit7is_nullIRZN2bt3hci9Transport10InitializeENS_13callback_implILm16ELb0EFvbENSt3__19allocatorISt4byteEEEEE3$_0TnNS6_9enable_ifIXntsr23is_comparable_with_nullIT_EE5valueEbE4typeELb0EEEbOSE_
7	305	bt::hci::Transport::Initialize(fit::callback_impl<16ul, false, void (bool), std::__1::allocator >)	call site: 00305	_ZN3fit7is_nullIRZN2bt3hci9Transport10InitializeENS_13callback_implILm16ELb0EFvbENSt3__19allocatorISt4byteEEEEE3$_1TnNS6_9enable_ifIXntsr23is_comparable_with_nullIT_EE5valueEbE4typeELb0EEEbOSE_
5	162	pw::string::FormatVaList(pw::span , char const*, __va_list_tag*)	call site: 00162
5	287	bt::hci::Transport::Initialize(fit::callback_impl<16ul, false, void (bool), std::__1::allocator >)	call site: 00287	__clang_call_terminate
5	679	bt::testing::DataFuzzTest::ToggleConnection()	call site: 00679	_ZN3fit7is_nullIRZN2bt7testing12DataFuzzTest16ToggleConnectionEvEUlvE_TnNSt3__19enable_ifIXsr23is_comparable_with_nullIT_EE5valueEbE4typeELb1EEEbOS8_
5	690	bt::testing::DataFuzzTest::ToggleConnection()	call site: 00690	_ZN3fit7is_nullIRZN2bt7testing12DataFuzzTest16ToggleConnectionEvEUlNS1_5l2cap14ChannelManager18BrEdrFixedChannelsEE_TnNSt3__19enable_ifIXsr23is_comparable_with_nullIT_EE5valueEbE4typeELb1EEEbOSB_
4	196	unsigned long pw::containers::internal::GenericIntrusiveList ::remove_if ::remove(pw::containers::internal::IntrusiveForwardListItem const&)::{lambda(pw::containers::internal::IntrusiveForwardListItem const&)#1}>(pw::containers::internal::GenericIntrusiveList ::remove(pw::containers::internal::IntrusiveForwardListItem const&)::{lambda(pw::containers::internal::IntrusiveForwardListItem const&)#1}, unsigned long)	call site: 00196	pw_Log
4	318	bt::hci::Transport::Initialize(fit::callback_impl<16ul, false, void (bool), std::__1::allocator >)	call site: 00318
4	557	bt::testing::ControllerTest ::InitializeACLDataChannel(bt::hci::DataBufferInfo const&, bt::hci::DataBufferInfo const&)	call site: 00557	_ZN3fit7is_nullIRNSt3__16__bindIMN2bt7testing14ControllerTestINS4_16FuzzerControllerEEEFvNS1_10unique_ptrINS3_3hci6PacketINS3_8hci_spec13ACLDataHeaderEEENS1_14default_deleteISD_EEEEEJPS7_RKNS1_12placeholders4__phILi1EEEEEETnNS1_9enable_ifIXntsr23is_comparable_with_nullIT_EE5valueEbE4typeELb0EEEbOSS_

Runtime coverage analysis

Covered functions

924

Functions that are reachable but not covered

456

Reachable functions

834

Percentage of reachable functions covered

45.32%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/l2cap_fuzztest.cc	9
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/testing/_virtual_includes/testing/pw_bluetooth_sapphire/internal/host/testing/controller_test.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/fake_dispatcher_fixture/pw_async/fake_dispatcher_fixture.h	4
/proc/self/cwd/external/googletest+/googletest/src/gtest.cc	36
/proc/self/cwd/external/googletest+/googletest/src/gtest-internal-inl.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/fake_dispatcher/pw_async/fake_dispatcher.h	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/dispatcher/pw_async/dispatcher.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_chrono/_virtual_includes/system_clock/pw_chrono/system_clock.h	2
/proc/self/cwd/pw_async_basic/fake_dispatcher.cc	6
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/legacy_intrusive_list/pw_containers/internal/legacy_intrusive_list.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_forward_list/pw_containers/intrusive_forward_list.h	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_list_common/pw_containers/internal/intrusive_list.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_list_common/pw_containers/internal/intrusive_list_item.h	12
/proc/self/cwd/pw_containers/intrusive_item.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/heap_dispatcher/pw_async/heap_dispatcher.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/dispatcher/pw_async/function_dispatcher.h	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/weak_self.h	22
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_intrusive_ptr/_virtual_includes/pw_intrusive_ptr/pw_intrusive_ptr/intrusive_ptr.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/_virtual_includes/fake_lease_provider/pw_bluetooth_sapphire/fake_lease_provider.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/_virtual_includes/lease/pw_bluetooth_sapphire/lease.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	7
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/function.h	20
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/function.h	54
/proc/self/cwd/pw_intrusive_ptr/ref_counted_base.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_intrusive_ptr/_virtual_includes/pw_intrusive_ptr/pw_intrusive_ptr/ref_counted.h	2
/proc/self/cwd/pw_log_basic/log_basic.cc	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/builder/pw_string/string_builder.h	13
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	12
/proc/self/cwd/pw_string/string_builder.cc	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/util.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/internal/length.h	1
/proc/self/cwd/pw_string/format.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status_with_size.h	7
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async_basic/_virtual_includes/task_private/pw_async_basic/task.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_random/_virtual_includes/fuzzer_generator/pw_random/fuzzer.h	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_random/_virtual_includes/pw_random/pw_random/random.h	2
/proc/self/cwd/pw_bluetooth_sapphire/host/common/random.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_intrusive_ptr/_virtual_includes/pw_intrusive_ptr/pw_intrusive_ptr/internal/ref_counted_base.h	1
/usr/local/bin/../include/c++/v1/optional	4
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/testing/_virtual_includes/controller_test_double_base/pw_bluetooth_sapphire/internal/host/testing/controller_test_double_base.h	2
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/../nullable.h	9
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/transport.cc	5
/proc/self/cwd/pw_bluetooth_sapphire/host/common/log.cc	2
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/log.h	1
/proc/self/cwd/external/googletest+/googletest/include/gtest/gtest-assertion-result.h	4
/proc/self/cwd/external/googletest+/googletest/include/gtest/gtest-message.h	11
/proc/self/cwd/external/googletest+/googletest/include/gtest/gtest.h	4
/proc/self/cwd/external/googletest+/googletest/include/gtest/internal/gtest-port.h	28
/proc/self/cwd/external/googletest+/googletest/src/gtest-port.cc	3
/proc/self/cwd/external/googletest+/googletest/include/gtest/internal/gtest-filepath.h	2
/proc/self/cwd/external/googletest+/googletest/include/gtest/gtest-test-part.h	8
/proc/self/cwd/external/googletest+/googletest/include/gtest/internal/gtest-param-util.h	4
/proc/self/cwd/external/googletest+/googletest/include/gtest/internal/gtest-internal.h	1
/proc/self/cwd/external/googletest+/googletest/include/gtest/internal/gtest-death-test-internal.h	2
/proc/self/cwd/external/googletest+/googletest/src/gtest-test-part.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async_basic/_virtual_includes/fake_dispatcher_private/pw_async_basic/fake_dispatcher.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/data_buffer_info.h	2
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/acl_data_channel.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/fake_inspect.h	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/transport.h	2
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/channel_manager.cc	1
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/types.h	1
/proc/self/cwd/pw_bluetooth_sapphire/host/common/byte_buffer.cc	6
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/byte_buffer.h	8
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/endian.h	3
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/lib/cpp-type/_virtual_includes/cpp-type/cpp-type/member_pointer_traits.h	1
/proc/self/cwd/pw_bluetooth_sapphire/host/testing/controller_test_double_base.cc	2

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
testing::internal::UnitTestImpl::RunAllTests()	/proc/self/cwd/external/googletest+/googletest/src/gtest.cc	1	['N/A']	15	0	575	90	27	868	0	2961	2421
fit::internal::target >),std::__1::allocator >)::$_0,false,false,std::__1::allocator ,void,unsignedlong,bt::hci::EventPacketconst&>::invoke(void*,unsignedlong,bt::hci::EventPacketconst&)	/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/function.h	3	['N/A', 'size_t', 'N/A']	13	0	29	3	2	1137	0	2080	1724
bt::l2cap::internal::BrEdrDynamicChannelRegistry::OnRxConfigReq(unsignedshort,unsignedshort,bt::l2cap::internal::ChannelConfiguration,bt::l2cap::internal::BrEdrCommandHandler::ConfigurationResponder*)	/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/bredr_dynamic_channel.cc	5	['N/A', 'short', 'short', 'N/A', 'N/A']	14	0	78	13	14	534	0	1239	813

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

2869 / 8257

Cyclomatic complexity statically reachable by fuzzers

12912 / 36457

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

/proc/self/cwd/pw_bluetooth_hci/uart_transport_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['LLVMFuzzerTestOneInput', 'pw::bluetooth_hci::DecodeHciUartData(pw::span, fit::function_impl<8ul, false, void (pw::bluetooth_hci::Packet const&), std::__1::allocator > const&)', 'pw::bluetooth_hci::DecodeHciUartData(pw::span, fit::function_impl<8ul, false, void (pw::bluetooth_hci::Packet const&), std::__1::allocator > const&)', 'pw::bluetooth_hci::DecodeHciUartData(pw::span, fit::function_impl<8ul, false, void (pw::bluetooth_hci::Packet const&), std::__1::allocator > const&)', 'pw::bluetooth_hci::DecodeHciUartData(pw::span, fit::function_impl<8ul, false, void (pw::bluetooth_hci::Packet const&), std::__1::allocator > const&)', 'pw::bluetooth_hci::DecodeHciUartData(pw::span, fit::function_impl<8ul, false, void (pw::bluetooth_hci::Packet const&), std::__1::allocator > const&)']

/proc/self/cwd/pw_bluetooth_sapphire/host/sm/valid_packet_reader_parse_sdu_fuzztest.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['pw::string::FormatVaList(pw::span, char const*, __va_list_tag*)', 'pw::StringBuilder::ResizeAndTerminate(unsigned long)', 'pw::StringBuilder::view() const', 'bt::sm::ValidPacketReader::ParseSdu(std::__1::unique_ptr > const&)', 'pw::string::FormatVaList(pw::span, char const*, __va_list_tag*)', 'bt::sm::fuzz(unsigned char const*, unsigned long)', 'pw::StringBuilder::StatusCode(pw::Status)', 'bt::sm::ValidPacketReader::ParseSdu(std::__1::unique_ptr > const&)', 'bt::DynamicByteBuffer::DynamicByteBuffer(unsigned long)', 'pw::StringBuffer<150ul>::StringBuffer()']

/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/basic_mode_rx_engine_fuzztest.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['bt::l2cap::OutboundFrame::MakeBasicHeader() const', 'bt::l2cap::OutboundFrame::OutboundFrame(unsigned short, bt::ByteBuffer const&, bt::l2cap::FrameCheckSequenceOption)', 'LLVMFuzzerTestOneInput', 'bt::StaticByteBuffer<4ul>::StaticByteBuffer()', 'bt::MutableByteBuffer::mutable_view(unsigned long, unsigned long)', 'bt::MutableBufferView::MutableBufferView(void*, unsigned long)', 'bt::MutableByteBuffer::Write(unsigned char const*, unsigned long, unsigned long)', 'bt::MutableByteBuffer::Write(unsigned char const*, unsigned long, unsigned long)', 'bt::l2cap::OutboundFrame::WriteToFragment(bt::MutableBufferView, unsigned long)', 'bt::l2cap::Fragmenter::BuildFrame(unsigned short, bt::ByteBuffer const&, bt::l2cap::FrameCheckSequenceOption, bool) const']

/proc/self/cwd/pw_protobuf/encoder_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['pw::protobuf::StreamEncoder::StreamEncoder(pw::protobuf::StreamEncoder&, pw::span, bool)', 'unsigned long pw::varint::EncodedSize(unsigned long)', 'pw::Result::Result(std::__1::in_place_t, unsigned long&&)', 'pw::protobuf::fuzz::(anonymous namespace)::RecursiveFuzzedEncode(FuzzedDataProvider&, pw::protobuf::StreamEncoder&, unsigned int)', 'pw::protobuf::StreamEncoder::CloseNestedMessage(pw::protobuf::StreamEncoder&)', 'pw::protobuf::StreamEncoder::~StreamEncoder()', 'pw::protobuf::fuzz::(anonymous namespace)::TestOneInput(FuzzedDataProvider&)']

/proc/self/cwd/pw_bluetooth_sapphire/host/sdp/data_element_fuzztest.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['pw::string::FormatVaList(pw::span, char const*, __va_list_tag*)', 'bt::UUID::UUID(bt::ByteBuffer const&)', 'void bt::sdp::DataElement::Set(unsigned char)', 'void bt::sdp::DataElement::Set(bt::UUID)', 'pw::Status::ResourceExhausted()', 'bt::sdp::fuzz(unsigned char const*, unsigned long)', 'pw::StringBuilder::StatusCode(pw::Status)', 'bt::DynamicByteBuffer::DynamicByteBuffer(unsigned long)', 'bt::ByteBuffer::view(unsigned long, unsigned long) const', 'bt::sdp::DataElement::Read(bt::sdp::DataElement*, bt::ByteBuffer const&)']

/proc/self/cwd/pw_bluetooth_sapphire/host/common/advertising_data_fuzztest.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['bt::AdvertisingData::FromBytes(bt::ByteBuffer const&)', 'bt::AdvertisingData::FromBytes(bt::ByteBuffer const&)', 'pw::utf8::EncodeCodePoint(unsigned int)', 'bt::common::fuzz(unsigned char const*, unsigned long)', 'bt::common::fuzz(unsigned char const*, unsigned long)', '_ZN2pw6ResultINS_3utf16CodePointAndSizeEEC2INS_6StatusETnNSt3__19enable_ifIXsr3std11conjunctionINS6_14is_convertibleIOT_S5_EENS6_16is_constructibleIS5_JSA_EEENS6_8negationINS6_7is_sameIu7__decayIS9_ES3_EEEENSE_INSF_ISG_S2_EEEENSE_INSF_ISG_NS6_10in_place_tEEEEENSE_INS_15internal_result29HasConversionOperatorToResultIS2_SA_vEEEEEE5valueEiE4typeELi0EEESA_', 'bt::AdvertisingData::FromBytes(bt::ByteBuffer const&)', 'bt::AdvertisingData::FromBytes(bt::ByteBuffer const&)', 'bt::AdvertisingData::FromBytes(bt::ByteBuffer const&)', 'bt::ParseUuids(bt::BufferView const&, bt::UUIDElemSize, fit::function_impl<16ul, false, bool (bt::UUID const&), std::__1::allocator >)']

/proc/self/cwd/pw_tokenizer/detokenize_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['pw::tokenizer::DecodedFormatString::value() const', 'pw::span::subspan(unsigned long, unsigned long) const', 'pw::tokenizer::DetokenizedString::DetokenizedString(pw::tokenizer::Detokenizer const&, bool, unsigned int, pw::span const, 18446744073709551615ul> const&, pw::span const&)', 'pw::span::empty() const', 'pw::tokenizer::StringSegment::Decode(pw::span const&) const', 'pw::tokenizer::Detokenizer::Detokenize(pw::span const&, std::__1::basic_string_view >, bool) const', 'pw::span, 18446744073709551615ul>::span()', 'pw::tokenizer::DetokenizedString::DetokenizedString(pw::tokenizer::Detokenizer const&, bool, unsigned int, pw::span const, 18446744073709551615ul> const&, pw::span const&)']

/proc/self/cwd/pw_protobuf/decoder_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['pw::protobuf::StreamDecoder::Advance(unsigned long)', 'pw::protobuf::StreamDecoder::Next()', 'pw::protobuf::StreamDecoder::CloseNestedDecoder(pw::protobuf::StreamDecoder&)', 'pw::protobuf::StreamDecoder::ReadOneVarint(pw::span, pw::protobuf::internal::VarintType)', '_ZN2pw6ResultINS_4spanISt4byteLm18446744073709551615EEEEC2INS_6StatusETnNSt3__19enable_ifIXsr3std11conjunctionINS7_14is_convertibleIOT_S6_EENS7_16is_constructibleIS6_JSB_EEENS7_8negationINS7_7is_sameIu7__decayISA_ES4_EEEENSF_INSG_ISH_S3_EEEENSF_INSG_ISH_NS7_10in_place_tEEEEENSF_INS_15internal_result29HasConversionOperatorToResultIS3_SB_vEEEEEE5valueEiE4typeELi0EEESB_', 'pw::internal::ConvertToValue(pw::StatusWithSize)', 'pw::protobuf::fuzz::(anonymous namespace)::TestOneInput(FuzzedDataProvider&)', 'pw::varint::Read(pw::stream::Reader&, unsigned long*, unsigned long)', 'pw::protobuf::fuzz::(anonymous namespace)::TestOneInput(FuzzedDataProvider&)', 'pw::Result >::Result >(std::__1::in_place_t, pw::span&&)']

/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/common_handler_fuzztest.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['pw::string::FormatVaList(pw::span, char const*, __va_list_tag*)', 'pw::StringBuilder::ResizeAndTerminate(unsigned long)', 'pw::string::FormatVaList(pw::span, char const*, __va_list_tag*)', 'bt::l2cap::internal::fuzz(unsigned char const*, unsigned long)', 'pw::StringBuilder::StatusCode(pw::Status)', 'bt::DynamicByteBuffer::DynamicByteBuffer(unsigned long)', 'bt::l2cap::internal::CommandHandler::Response::ParseReject(bt::ByteBuffer const&)', 'pw::StringBuffer<150ul>::StringBuffer()', 'pw::OkStatus()', 'pw::StringBuilder::HandleStatusWithSize(pw::StatusWithSize)']

/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/channel_configuration_fuzztest.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['pw::string::FormatVaList(pw::span, char const*, __va_list_tag*)', 'pw::StringBuilder::ResizeAndTerminate(unsigned long)', 'pw::string::FormatVaList(pw::span, char const*, __va_list_tag*)', 'bt::l2cap::internal::fuzz(unsigned char const*, unsigned long)', 'pw::StringBuilder::StatusCode(pw::Status)', 'bt::l2cap::internal::ChannelConfiguration::ReadNextOption(bt::ByteBuffer const&)', 'bt::DynamicByteBuffer::DynamicByteBuffer(unsigned long)', 'bt::ByteBuffer::view(unsigned long, unsigned long) const', 'bt::l2cap::internal::ChannelConfiguration::ReadNextOption(bt::ByteBuffer const&)', 'pw::StringBuffer<150ul>::StringBuffer()']

/proc/self/cwd/pw_bluetooth_sapphire/host/sdp/pdu_fuzztest.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['bt::sdp::fuzz(unsigned char const*, unsigned long)', '_ZN2pw6ResultINS_3utf16CodePointAndSizeEEC2INS_6StatusETnNSt3__19enable_ifIXsr3std11conjunctionINS6_14is_convertibleIOT_S5_EENS6_16is_constructibleIS5_JSA_EEENS6_8negationINS6_7is_sameIu7__decayIS9_ES3_EEEENSE_INSF_ISG_S2_EEEENSE_INSF_ISG_NS6_10in_place_tEEEEENSE_INS_15internal_result29HasConversionOperatorToResultIS2_SA_vEEEEEE5valueEiE4typeELi0EEESA_', 'bt::sdp::ServiceSearchResponse::Parse(bt::ByteBuffer const&)', 'bt::sdp::fuzz(unsigned char const*, unsigned long)', 'bt::sdp::ServiceAttributeResponse::Parse(bt::ByteBuffer const&)', 'bt::sdp::ServiceAttributeResponse::Parse(bt::ByteBuffer const&)', 'bt::UUID::UUID(bt::ByteBuffer const&)', 'bt::sdp::ServiceSearchAttributeResponse::Parse(bt::ByteBuffer const&)', 'bt::sdp::ServiceSearchAttributeResponse::Parse(bt::ByteBuffer const&)', 'bt::sdp::fuzz(unsigned char const*, unsigned long)']

/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/enhanced_retransmission_mode_engines_fuzztest.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['bt::l2cap::internal::MakeLinkedEnhancedRetransmissionModeEngines(unsigned short, unsigned short, unsigned char, unsigned char, bt::l2cap::internal::TxEngine::TxChannel&, fit::function_impl<16ul, false, void (), std::__1::allocator >, pw::async::Dispatcher&)', 'LLVMFuzzerTestOneInput', 'pw::string::FormatVaList(pw::span, char const*, __va_list_tag*)', 'pw::async::test::backend::NativeFakeDispatcher::DrainTaskQueue()', 'pw::StringBuilder::ResizeAndTerminate(unsigned long)', 'bt::l2cap::internal::MakeLinkedEnhancedRetransmissionModeEngines(unsigned short, unsigned short, unsigned char, unsigned char, bt::l2cap::internal::TxEngine::TxChannel&, fit::function_impl<16ul, false, void (), std::__1::allocator >, pw::async::Dispatcher&)', 'bt::l2cap::internal::EnhancedRetransmissionModeRxEngine::set_receive_seq_num_callback(fit::function_impl<16ul, false, void (unsigned char, bool), std::__1::allocator >)', 'bt::l2cap::internal::MakeLinkedEnhancedRetransmissionModeEngines(unsigned short, unsigned short, unsigned char, unsigned char, bt::l2cap::internal::TxEngine::TxChannel&, fit::function_impl<16ul, false, void (), std::__1::allocator >, pw::async::Dispatcher&)', 'bt::l2cap::internal::MakeLinkedEnhancedRetransmissionModeEngines(unsigned short, unsigned short, unsigned char, unsigned char, bt::l2cap::internal::TxEngine::TxChannel&, fit::function_impl<16ul, false, void (), std::__1::allocator >, pw::async::Dispatcher&)']

/proc/self/cwd/pw_bluetooth_sapphire/host/gap/peer_cache_fuzztest.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['bt::gap::PeerCache::InsertPeerRecord(bt::PeerId, bt::DeviceAddress const&, bool)', 'bt::gap::Peer::LowEnergyData::LowEnergyData(bt::gap::Peer*)', 'bt::gap::Peer::LowEnergyData::LowEnergyData(bt::gap::Peer*)', 'unsigned long pw::containers::internal::GenericIntrusiveList::remove_if::remove(pw::containers::internal::IntrusiveForwardListItem const&)::{lambda(pw::containers::internal::IntrusiveForwardListItem const&)#1}>(pw::containers::internal::GenericIntrusiveList::remove(pw::containers::internal::IntrusiveForwardListItem const&)::{lambda(pw::containers::internal::IntrusiveForwardListItem const&)#1}, unsigned long)', 'bt::gap::Peer::Peer(fit::function_impl<16ul, false, void (bt::gap::Peer const&, bt::gap::Peer::NotifyListenersChange), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, bool (bt::sm::PairingData const&), std::__1::allocator >, bt::PeerId, bt::DeviceAddress const&, bool, bt::gap::PeerMetrics*, pw::async::Dispatcher&)', 'bt::gap::PeerCache::InsertPeerRecord(bt::PeerId, bt::DeviceAddress const&, bool)', 'pw::async::test::backend::NativeFakeDispatcher::DrainTaskQueue()', 'bt::gap::Peer::Peer(fit::function_impl<16ul, false, void (bt::gap::Peer const&, bt::gap::Peer::NotifyListenersChange), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, bool (bt::sm::PairingData const&), std::__1::allocator >, bt::PeerId, bt::DeviceAddress const&, bool, bt::gap::PeerMetrics*, pw::async::Dispatcher&)', 'bt::gap::Peer::Peer(fit::function_impl<16ul, false, void (bt::gap::Peer const&, bt::gap::Peer::NotifyListenersChange), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, bool (bt::sm::PairingData const&), std::__1::allocator >, bt::PeerId, bt::DeviceAddress const&, bool, bt::gap::PeerMetrics*, pw::async::Dispatcher&)', 'bt::gap::Peer::Peer(fit::function_impl<16ul, false, void (bt::gap::Peer const&, bt::gap::Peer::NotifyListenersChange), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, void (bt::gap::Peer const&), std::__1::allocator >, fit::function_impl<16ul, false, bool (bt::sm::PairingData const&), std::__1::allocator >, bt::PeerId, bt::DeviceAddress const&, bool, bt::gap::PeerMetrics*, pw::async::Dispatcher&)']

/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/bredr_dynamic_channel_registry_fuzztest.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['fit::function_impl<16ul, false, bt::l2cap::internal::SignalingChannelInterface::ResponseHandlerAction (bt::l2cap::internal::SignalingChannelInterface::Status, bt::ByteBuffer const&), std::__1::allocator > bt::l2cap::internal::CommandHandler::BuildResponseHandler > >(fit::function_impl<16ul, false, void (bt::l2cap::internal::BrEdrCommandHandler::InformationResponse const&), std::__1::allocator >)', 'bt::l2cap::OutboundFrame::MakeBasicHeader() const', 'bt::l2cap::internal::DynamicChannelRegistry::OpenOutbound(unsigned short, bt::l2cap::ChannelParameters, fit::function_impl<16ul, false, void (bt::l2cap::internal::DynamicChannel const*), std::__1::allocator >)', 'LLVMFuzzerTestOneInput', 'bt::l2cap::internal::SignalingChannel::SignalingChannel(WeakPtr >, pw::bluetooth::emboss::ConnectionRole, pw::async::Dispatcher&, pw::bluetooth_sapphire::LeaseProvider&)', 'bt::l2cap::internal::SignalingChannel::SignalingChannel(WeakPtr >, pw::bluetooth::emboss::ConnectionRole, pw::async::Dispatcher&, pw::bluetooth_sapphire::LeaseProvider&)', 'bt::l2cap::internal::BrEdrDynamicChannelRegistry::SendInformationRequests()', 'bt::l2cap::OutboundFrame::OutboundFrame(unsigned short, bt::ByteBuffer const&, bt::l2cap::FrameCheckSequenceOption)', 'pw::async::test::backend::NativeFakeDispatcher::DrainTaskQueue()', 'bt::l2cap::testing::FakeChannel::SetSendCallback(fit::function_impl<16ul, false, void (std::__1::unique_ptr >), std::__1::allocator >)']

/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/l2cap_fuzztest.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['bt::testing::ControllerTest::Initialize(pw::bluetooth::Controller::FeaturesBits, bool)', 'bt::testing::ControllerTest::Initialize(pw::bluetooth::Controller::FeaturesBits, bool)', 'bt::testing::ControllerTest::Initialize(pw::bluetooth::Controller::FeaturesBits, bool)', 'bt::hci::Transport::Initialize(fit::callback_impl<16ul, false, void (bool), std::__1::allocator >)', 'bt::hci::Transport::Initialize(fit::callback_impl<16ul, false, void (bool), std::__1::allocator >)', 'pw::string::FormatVaList(pw::span, char const*, __va_list_tag*)', 'bt::hci::Transport::Initialize(fit::callback_impl<16ul, false, void (bool), std::__1::allocator >)', 'bt::testing::DataFuzzTest::ToggleConnection()', 'bt::testing::DataFuzzTest::ToggleConnection()', 'unsigned long pw::containers::internal::GenericIntrusiveList::remove_if::remove(pw::containers::internal::IntrusiveForwardListItem const&)::{lambda(pw::containers::internal::IntrusiveForwardListItem const&)#1}>(pw::containers::internal::GenericIntrusiveList::remove(pw::containers::internal::IntrusiveForwardListItem const&)::{lambda(pw::containers::internal::IntrusiveForwardListItem const&)#1}, unsigned long)']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
bt::l2cap::PsmToString(unsignedshort)	35	6	17.14%	[]
bt::l2cap::A2dpOffloadManager::RequestStopA2dpOffload(unsignedshort,unsignedshort,fit::callback_impl<16ul,false,void(fit::result >),std::__1::allocator >)	67	11	16.41%	[]
bt::l2cap::internal::BrEdrDynamicChannel::info()const	39	13	33.33%	[]
bt::l2cap::internal::ChannelImpl::ChannelImpl(pw::async::Dispatcher&,unsignedshort,unsignedshort,WeakPtr >,bt::l2cap::ChannelInfo,WeakPtr >,unsignedshort,bt::l2cap::A2dpOffloadManager&,pw::bluetooth_sapphire::LeaseProvider&,unsignedshort)	55	28	50.90%	[]
bt::l2cap::internal::LogicalLink::HandleNextAclPriorityRequest()	56	13	23.21%	[]

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/link_type.cc	[]	[]
/proc/self/cwd/external/emboss+/runtime/cpp/emboss_prelude.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/testing/_virtual_includes/testing/pw_bluetooth_sapphire/internal/host/testing/controller_test.h	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth/public/pw_bluetooth/hci_common.emb.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/types.h	['bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/acl_data_packet.cc	['basic_mode_rx_engine_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']	['basic_mode_rx_engine_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/fake_channel.cc	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_stream/_virtual_includes/pw_stream/pw_stream/seek.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/_virtual_includes/fake_lease_provider/pw_bluetooth_sapphire/fake_lease_provider.h	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/utf_codecs/pw_string/utf_codecs.h	['advertising_data_fuzzer', 'pdu_fuzzer']	['advertising_data_fuzzer', 'pdu_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/random.h	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/usr/local/bin/../include/c++/v1/__charconv/from_chars_integral.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/endian.h	['uart_transport_fuzzer', 'basic_mode_rx_engine_fuzzer', 'encoder_fuzz_test', 'data_element_fuzzer', 'advertising_data_fuzzer', 'detokenize_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['uart_transport_fuzzer', 'basic_mode_rx_engine_fuzzer', 'encoder_fuzz_test', 'data_element_fuzzer', 'advertising_data_fuzzer', 'detokenize_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/stdcompat/include/lib/stdcompat/internal/bit.h	['encoder_fuzz_test']	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/error.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/definitions/pw_bluetooth_sapphire/internal/host/l2cap/l2cap_defs.h	[]	[]
/proc/self/cwd/external/+_repo_rules+mbedtls/library/chacha20.c	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/testing/controller_test_double_base.cc	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/external/googletest+/googletest/include/gtest/gtest-matchers.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/util.h	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/stdcompat/include/lib/stdcompat/bit.h	['encoder_fuzz_test']	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/bredr_command_handler.h	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/external/+_repo_rules+mbedtls/library/aesni.c	[]	[]
/proc/self/cwd/pw_bytes/byte_builder.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/string/pw_string/string.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/common_handler_fuzztest.cc	['common_handler_fuzzer']	['common_handler_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/a2dp_offload_manager.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/lib/cpp-string/string_printf.cc	['advertising_data_fuzzer', 'pdu_fuzzer', 'peer_cache_fuzzer']	['pdu_fuzzer', 'peer_cache_fuzzer']
/proc/self/cwd/external/googletest+/googletest/include/gtest/gtest-message.h	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/gap/gap.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_elf/_virtual_includes/reader/pw_elf/internal/reader_impl.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/sco_data_packet.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/gap/_virtual_includes/peer/pw_bluetooth_sapphire/internal/host/gap/peer_metrics.h	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/testing/pw_bluetooth_sapphire/internal/host/l2cap/fake_tx_channel.h	['enhanced_retransmission_mode_engines_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_stream/_virtual_includes/pw_stream/pw_stream/memory_stream.h	['encoder_fuzz_test', 'decoder_fuzz_test']	['encoder_fuzz_test', 'decoder_fuzz_test']
/proc/self/cwd/pw_bluetooth_sapphire/host/common/metrics.cc	[]	[]
/proc/self/cwd/pw_crypto/public/pw_crypto/aes.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/gap/peer_cache_fuzztest.cc	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/credit_based_flow_control_tx_engine.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/emboss_packet.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/logical_link.cc	[]	[]
/proc/self/cwd/external/googletest+/googletest/include/gtest/internal/gtest-filepath.h	['l2cap_fuzzer']	[]
/proc/self/cwd/external/googletest+/googletest/include/gtest/gtest.h	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/common/device_class.cc	[]	[]
/proc/self/cwd/external/googletest+/googletest/src/gtest-printers.cc	[]	[]
/proc/self/cwd/external/googletest+/googletest/src/gtest-port.cc	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth/public/pw_bluetooth/hci_commands.emb.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/common/advertising_data.cc	['advertising_data_fuzzer']	['advertising_data_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/fragmenter.h	['basic_mode_rx_engine_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']	['basic_mode_rx_engine_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']
/usr/local/bin/../include/c++/v1/string	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/gap/peer_metrics.cc	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/sdp/pdu.cc	['pdu_fuzzer']	['pdu_fuzzer']
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/../nullable.h	['uart_transport_fuzzer', 'advertising_data_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_base64/_virtual_includes/pw_base64/pw_base64/base64.h	['detokenize_fuzzer']	['detokenize_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_list_common/pw_containers/internal/intrusive_list_item.h	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/sco_data_packet.h	[]	[]
/proc/self/cwd/pw_elf/reader.cc	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/transport.cc	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/error.h	['pdu_fuzzer']	['pdu_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/l2cap_fuzztest.cc	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_protobuf/_virtual_includes/pw_protobuf/pw_protobuf/serialized_size.h	['encoder_fuzz_test']	['encoder_fuzz_test']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/bredr_signaling_channel.h	['bredr_dynamic_channel_registry_fuzzer']	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/bredr_dynamic_channel_registry_fuzztest.cc	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/scoped_channel.cc	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/check_impl.h	['valid_packet_reader_fuzzer', 'basic_mode_rx_engine_fuzzer', 'encoder_fuzz_test', 'data_element_fuzzer', 'advertising_data_fuzzer', 'decoder_fuzz_test', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['encoder_fuzz_test', 'decoder_fuzz_test']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/recombiner.h	[]	[]
/proc/self/cwd/pw_crypto/public/pw_crypto/aes_cmac.h	[]	[]
/proc/self/cwd/pw_stream/memory_stream.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/sco_data_channel.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/byte_builder.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_stream/_virtual_includes/pw_stream/pw_stream/stream.h	['encoder_fuzz_test', 'decoder_fuzz_test']	['encoder_fuzz_test', 'decoder_fuzz_test']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/builder/pw_string/string_builder.h	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/gap/peer_cache.cc	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/le_signaling_channel.h	[]	[]
/proc/self/cwd/pw_bluetooth_hci/packet.cc	['uart_transport_fuzzer']	['uart_transport_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/transport.h	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/assert/pw_assert/assert.h	['uart_transport_fuzzer', 'encoder_fuzz_test', 'advertising_data_fuzzer', 'decoder_fuzz_test', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/common/manufacturer_names.cc	[]	[]
/proc/self/cwd/external/googletest+/googletest/include/gtest/gtest-printers.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/control_packets.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_intrusive_ptr/_virtual_includes/pw_intrusive_ptr/pw_intrusive_ptr/ref_counted.h	['peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	[]
/proc/self/cwd/external/+_repo_rules+mbedtls/library/cipher.c	[]	[]
/proc/self/cwd/external/emboss+/runtime/cpp/emboss_enum_view.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_protobuf/_virtual_includes/pw_protobuf/pw_protobuf/encoder.h	['encoder_fuzz_test']	['encoder_fuzz_test']
/proc/self/cwd/pw_bluetooth_sapphire/host/common/log.cc	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/result.h	['valid_packet_reader_fuzzer', 'advertising_data_fuzzer', 'pdu_fuzzer', 'peer_cache_fuzzer']	['advertising_data_fuzzer', 'peer_cache_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status_with_size.h	['uart_transport_fuzzer', 'valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'decoder_fuzz_test', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['uart_transport_fuzzer', 'valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'decoder_fuzz_test', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/device_class.h	[]	[]
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/function.h	['uart_transport_fuzzer', 'advertising_data_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['uart_transport_fuzzer', 'advertising_data_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_intrusive_ptr/_virtual_includes/pw_intrusive_ptr/pw_intrusive_ptr/internal/ref_counted_base.h	['bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/basic_mode_rx_engine_fuzztest.cc	['basic_mode_rx_engine_fuzzer']	['basic_mode_rx_engine_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/acl_data_packet.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/common/identifier.cc	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/logical_link.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/rx_engine.h	['basic_mode_rx_engine_fuzzer']	['basic_mode_rx_engine_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/dispatcher/pw_async/dispatcher.h	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_random/_virtual_includes/pw_random/pw_random/random.h	['peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/to_string.h	['advertising_data_fuzzer', 'pdu_fuzzer', 'peer_cache_fuzzer']	['advertising_data_fuzzer', 'pdu_fuzzer', 'peer_cache_fuzzer']
/proc/self/cwd/external/emboss+/runtime/cpp/emboss_memory_util.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/vector/pw_containers/vector.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/legacy_intrusive_list/pw_containers/internal/legacy_intrusive_list.h	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/external/googletest+/googletest/include/gtest/internal/gtest-port.h	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/pw_crypto/aes_mbedtls.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/command_channel.h	[]	[]
/proc/self/cwd/external/emboss+/runtime/cpp/emboss_array_view.h	[]	[]
/proc/self/cwd/pw_status/status.cc	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/bredr_signaling_channel.cc	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/external/+_repo_rules+mbedtls/library/chachapoly.c	[]	[]
/proc/self/cwd/pw_bluetooth_hci/uart_transport.cc	['uart_transport_fuzzer']	['uart_transport_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/dynamic_channel_registry.h	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/acl_data_channel.cc	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/sco_data_channel.cc	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/common/uuid.cc	['data_element_fuzzer', 'advertising_data_fuzzer', 'pdu_fuzzer']	['data_element_fuzzer', 'advertising_data_fuzzer', 'pdu_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/bredr_command_handler.cc	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/external/emboss+/runtime/cpp/emboss_arithmetic.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/metrics.h	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/external/+_repo_rules+mbedtls/library/aes.c	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/enhanced_retransmission_mode_rx_engine.h	['enhanced_retransmission_mode_engines_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/log.h	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/pw_log_basic/log_basic.cc	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/pdu.h	['basic_mode_rx_engine_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']	['basic_mode_rx_engine_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth/public/pw_bluetooth/l2cap_frames.emb.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/le_dynamic_channel.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/gap/_virtual_includes/gap/pw_bluetooth_sapphire/internal/host/gap/peer_cache.h	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/basic_mode_tx_engine.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/to_string/pw_string/type_to_string.h	[]	[]
/proc/self/cwd/pw_tokenizer/csv.cc	[]	[]
/proc/self/cwd/pw_tokenizer/detokenize.cc	['detokenize_fuzzer']	['detokenize_fuzzer']
/proc/self/cwd/pw_sys_io/sys_io.cc	[]	[]
/proc/self/cwd/external/+_repo_rules+mbedtls/library/arc4.c	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/hci-spec/_virtual_includes/hci-spec/pw_bluetooth_sapphire/internal/host/hci-spec/lmp_feature_set.h	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/signaling_channel.h	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/gap/_virtual_includes/peer/pw_bluetooth_sapphire/internal/host/gap/peer.h	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/heap_dispatcher/pw_async/heap_dispatcher.h	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async_basic/_virtual_includes/fake_dispatcher_private/pw_async_basic/fake_dispatcher.h	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_stream/_virtual_includes/pw_stream/pw_stream/null_stream.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_tokenizer/_virtual_includes/decoder/pw_tokenizer/internal/decode.h	['detokenize_fuzzer']	['detokenize_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/le_signaling_channel.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/definitions/pw_bluetooth_sapphire/internal/host/l2cap/frame_headers.h	['enhanced_retransmission_mode_engines_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/sm/_virtual_includes/definitions/pw_bluetooth_sapphire/internal/host/sm/types.h	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/external/+_repo_rules+mbedtls/library/poly1305.c	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/data_buffer_info.h	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/device_address.h	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/fake_dispatcher_fixture/pw_async/fake_dispatcher_fixture.h	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/pw_protobuf/encoder.cc	['encoder_fuzz_test']	['encoder_fuzz_test']
/proc/self/cwd/pw_bluetooth/public/pw_bluetooth/controller.h	[]	[]
/proc/self/cwd/external/googletest+/googletest/include/gtest/internal/gtest-death-test-internal.h	['l2cap_fuzzer']	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_varint/_virtual_includes/pw_varint/pw_varint/varint.h	['encoder_fuzz_test', 'detokenize_fuzzer', 'decoder_fuzz_test']	['encoder_fuzz_test', 'decoder_fuzz_test']
/proc/self/cwd/external/+_repo_rules+mbedtls/library/blowfish.c	[]	[]
/proc/self/cwd/external/googletest+/googletest/src/gtest-filepath.cc	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/common/slab_allocator.cc	['pdu_fuzzer']	['pdu_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/testing/_virtual_includes/controller_test_double_base/pw_bluetooth_sapphire/internal/host/testing/controller_test_double_base.h	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/function.h	['uart_transport_fuzzer', 'advertising_data_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['uart_transport_fuzzer', 'advertising_data_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/sdp/_virtual_includes/definitions/pw_bluetooth_sapphire/internal/host/sdp/data_element.h	['data_element_fuzzer', 'pdu_fuzzer']	['data_element_fuzzer', 'pdu_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/bredr_dynamic_channel.cc	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/a2dp_offload_manager.cc	[]	[]
/proc/self/cwd/external/googletest+/googletest/src/gtest-internal-inl.h	['l2cap_fuzzer']	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/acl_data_channel.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/supplement_data.h	['advertising_data_fuzzer']	['advertising_data_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/fragmenter.cc	['basic_mode_rx_engine_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']	['basic_mode_rx_engine_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/bredr_dynamic_channel.h	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/packet_view.h	['valid_packet_reader_fuzzer', 'basic_mode_rx_engine_fuzzer', 'channel_configuration_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']	['valid_packet_reader_fuzzer', 'basic_mode_rx_engine_fuzzer', 'channel_configuration_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/low_energy_command_handler.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/hci-spec/_virtual_includes/hci-spec/pw_bluetooth_sapphire/internal/host/hci-spec/link_key.h	[]	[]
/usr/local/bin/../include/c++/v1/sstream	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/iso_data_channel.h	[]	[]
/proc/self/cwd/pw_async_basic/fake_dispatcher.cc	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/external/googletest+/googletest/src/gtest-assertion-result.cc	[]	[]
/proc/self/cwd/pw_string/type_to_string.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_forward_list/pw_containers/intrusive_forward_list.h	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/pw_async/heap_dispatcher.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/sm/_virtual_includes/definitions/pw_bluetooth_sapphire/internal/host/sm/packet.h	['valid_packet_reader_fuzzer']	['valid_packet_reader_fuzzer']
/proc/self/cwd/pw_protobuf/stream_decoder.cc	['decoder_fuzz_test']	['decoder_fuzz_test']
/proc/self/cwd/external/+_repo_rules+mbedtls/library/cmac.c	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/hci-spec/_virtual_includes/hci-spec/pw_bluetooth_sapphire/internal/host/hci-spec/le_connection_parameters.h	[]	[]
/proc/self/cwd/pw_tokenizer/detokenize_fuzzer.cc	['detokenize_fuzzer']	['detokenize_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/signaling_channel.cc	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/usr/local/bin/../include/c++/v1/stdexcept	[]	[]
/proc/self/cwd/external/+_repo_rules+mbedtls/library/cipher_wrap.c	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/string/pw_string/internal/string_common_functions.inc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/error.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/pdu.cc	['basic_mode_rx_engine_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']	['basic_mode_rx_engine_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/packet.h	['basic_mode_rx_engine_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']	['basic_mode_rx_engine_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/common/supplement_data.cc	['advertising_data_fuzzer']	['advertising_data_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/testing/_virtual_includes/fuzzing/pw_bluetooth_sapphire/internal/host/testing/peer_fuzzer.h	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/sm/types.cc	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/command_handler.h	['common_handler_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']	['common_handler_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/pw_intrusive_ptr/ref_counted_base.cc	['peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/credit_based_flow_control_rx_engine.h	[]	[]
/usr/local/bin/../include/c++/v1/initializer_list	[]	[]
/proc/self/cwd/external/emboss+/runtime/cpp/emboss_arithmetic_maximum_operation_generated.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/common/host_error.cc	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/enhanced_retransmission_mode_engines_fuzztest.cc	['enhanced_retransmission_mode_engines_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer']
/proc/self/cwd/external/+_repo_rules+mbedtls/library/bignum.c	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/channel_manager.cc	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/channel_configuration.h	['channel_configuration_fuzzer']	['channel_configuration_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_protobuf/_virtual_includes/pw_protobuf/pw_protobuf/stream_decoder.h	['decoder_fuzz_test']	['decoder_fuzz_test']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/byte_buffer.h	['valid_packet_reader_fuzzer', 'basic_mode_rx_engine_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['valid_packet_reader_fuzzer', 'basic_mode_rx_engine_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/pw_tokenizer/pw_tokenizer_private/csv.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/string/pw_string/internal/string_impl.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/channel_configuration_fuzztest.cc	['channel_configuration_fuzzer']	['channel_configuration_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/fake_dispatcher/pw_async/fake_dispatcher.h	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/status.h	['uart_transport_fuzzer', 'valid_packet_reader_fuzzer', 'encoder_fuzz_test', 'data_element_fuzzer', 'advertising_data_fuzzer', 'decoder_fuzz_test', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['uart_transport_fuzzer', 'valid_packet_reader_fuzzer', 'encoder_fuzz_test', 'data_element_fuzzer', 'advertising_data_fuzzer', 'decoder_fuzz_test', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/testing/pw_bluetooth_sapphire/internal/host/l2cap/fake_channel.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_protobuf/_virtual_includes/pw_protobuf/pw_protobuf/internal/codegen.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/basic_mode_rx_engine.h	['basic_mode_rx_engine_fuzzer']	['basic_mode_rx_engine_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/identifier.h	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/channel_manager.h	[]	[]
/proc/self/cwd/pw_protobuf/encoder_fuzzer.cc	['encoder_fuzz_test']	['encoder_fuzz_test']
/proc/self/cwd/external/googletest+/googletest/include/gtest/gtest-assertion-result.h	['l2cap_fuzzer']	['l2cap_fuzzer']
/usr/local/bin/../include/c++/v1/variant	[]	[]
/proc/self/cwd/external/googletest+/googletest/include/gtest/internal/gtest-param-util.h	['l2cap_fuzzer']	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/types.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/sdp/_virtual_includes/sdp/pw_bluetooth_sapphire/internal/host/sdp/pdu.h	['pdu_fuzzer']	['pdu_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_hci/_virtual_includes/packet/pw_bluetooth_hci/packet.h	['uart_transport_fuzzer']	['uart_transport_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/fake_inspect.h	['peer_cache_fuzzer', 'l2cap_fuzzer']	['peer_cache_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/pw_crypto/public/pw_crypto/aes_mbedtls.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/iso_data_channel.cc	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/credit_based_flow_control_rx_engine.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/format/pw_string/format.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/channel_configuration.cc	['channel_configuration_fuzzer']	['channel_configuration_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/enhanced_retransmission_mode_tx_engine.h	['enhanced_retransmission_mode_engines_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer']
/proc/self/cwd/external/googletest+/googletest/src/gtest-test-part.cc	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/_virtual_includes/null_lease_provider/pw_bluetooth_sapphire/null_lease_provider.h	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_chrono/_virtual_includes/system_clock/pw_chrono/system_clock.h	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/usr/local/bin/../include/c++/v1/optional	['uart_transport_fuzzer', 'advertising_data_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	[]
/proc/self/cwd/pw_protobuf/decoder_fuzzer.cc	['decoder_fuzz_test']	['decoder_fuzz_test']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/slab_allocators.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/sm/packet.cc	['valid_packet_reader_fuzzer']	['valid_packet_reader_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/smart_task.h	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer']
/proc/self/cwd/external/googletest+/googletest/src/gtest.cc	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/sm/util.cc	[]	[]
/proc/self/cwd/external/emboss+/runtime/cpp/emboss_maybe.h	[]	[]
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/defer.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/command_channel.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_result/_virtual_includes/pw_result/pw_result/internal/result_internal.h	['encoder_fuzz_test', 'advertising_data_fuzzer', 'decoder_fuzz_test', 'pdu_fuzzer']	['encoder_fuzz_test', 'advertising_data_fuzzer', 'decoder_fuzz_test', 'pdu_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/to_string/pw_string/to_string.h	[]	[]
/proc/self/cwd/external/+_repo_rules+mbedtls/library/camellia.c	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_random/_virtual_includes/fuzzer_generator/pw_random/fuzzer.h	['peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/sm/valid_packet_reader_parse_sdu_fuzztest.cc	['valid_packet_reader_fuzzer']	['valid_packet_reader_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/gap/identity_resolving_list.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_toolchain/_virtual_includes/sibling_cast/pw_toolchain/internal/sibling_cast.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_elf/_virtual_includes/reader/pw_elf/internal/stream_utils.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_tokenizer/_virtual_includes/decoder/pw_tokenizer/detokenize.h	['detokenize_fuzzer']	['detokenize_fuzzer']
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/result.h	['valid_packet_reader_fuzzer', 'advertising_data_fuzzer', 'pdu_fuzzer', 'peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/control_packets.cc	[]	[]
/proc/self/cwd/external/emboss+/runtime/cpp/emboss_arithmetic_all_known_generated.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/common/byte_buffer.cc	['valid_packet_reader_fuzzer', 'basic_mode_rx_engine_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['valid_packet_reader_fuzzer', 'basic_mode_rx_engine_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/enhanced_retransmission_mode_rx_engine.cc	['enhanced_retransmission_mode_engines_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/dispatcher/pw_async/function_dispatcher.h	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/le_dynamic_channel.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/common/random.cc	['peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_list_common/pw_containers/internal/intrusive_list_iterator.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/gap/peer.cc	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/common/device_address.cc	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/external/+_repo_rules+mbedtls/library/constant_time.c	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/sdp/data_element.cc	['data_element_fuzzer', 'pdu_fuzzer']	['data_element_fuzzer', 'pdu_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/enhanced_retransmission_mode_tx_engine.cc	['enhanced_retransmission_mode_engines_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth/public/pw_bluetooth/hci_events.emb.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_result/_virtual_includes/pw_result/pw_result/result.h	['encoder_fuzz_test', 'advertising_data_fuzzer', 'decoder_fuzz_test', 'pdu_fuzzer']	['encoder_fuzz_test', 'advertising_data_fuzzer', 'decoder_fuzz_test', 'pdu_fuzzer']
/proc/self/cwd/external/emboss+/runtime/cpp/emboss_view_parameters.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/array.h	['encoder_fuzz_test']	['encoder_fuzz_test']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/weak_self.h	['peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/common/advertising_data_fuzztest.cc	['advertising_data_fuzzer']	['advertising_data_fuzzer']
/proc/self/cwd/pw_string/string_builder.cc	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/dynamic_channel.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_intrusive_ptr/_virtual_includes/pw_intrusive_ptr/pw_intrusive_ptr/intrusive_ptr.h	['peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/external/googletest+/googletest/src/gtest-death-test.cc	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/dynamic_channel.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/_virtual_includes/lease/pw_bluetooth_sapphire/lease.h	['bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/tx_engine.h	['enhanced_retransmission_mode_engines_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/basic_mode_tx_engine.h	[]	[]
/proc/self/cwd/pw_varint/stream.cc	['decoder_fuzz_test']	['decoder_fuzz_test']
/proc/self/cwd/external/googletest+/googletest/include/gtest/gtest-test-part.h	['l2cap_fuzzer']	['l2cap_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/fcs.cc	['basic_mode_rx_engine_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer']
/usr/local/bin/../include/c++/v1/__exception/exception.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_protobuf/_virtual_includes/pw_protobuf/pw_protobuf/wire_format.h	['encoder_fuzz_test', 'decoder_fuzz_test']	['encoder_fuzz_test', 'decoder_fuzz_test']
/proc/self/cwd/external/googletest+/googletest/include/gtest/internal/gtest-internal.h	['l2cap_fuzzer']	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_tokenizer/_virtual_includes/decoder/pw_tokenizer/token_database.h	['detokenize_fuzzer']	['detokenize_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/sdp/pdu_fuzztest.cc	['pdu_fuzzer']	['pdu_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/hci-spec/util.cc	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_elf/_virtual_includes/reader/pw_elf/reader.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth/public/pw_bluetooth/hci_android.emb.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/scoped_channel.h	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/enhanced_retransmission_mode_engines.cc	['enhanced_retransmission_mode_engines_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer']
/proc/self/cwd/external/emboss+/runtime/cpp/emboss_bit_util.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/inspectable.h	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/pw_varint/varint_c.c	['encoder_fuzz_test', 'detokenize_fuzzer']	['encoder_fuzz_test']
/proc/self/cwd/pw_bluetooth_sapphire/host/sdp/data_element_fuzztest.cc	['data_element_fuzzer']	['data_element_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/recombiner.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/channel.h	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/low_energy_command_handler.cc	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async_basic/_virtual_includes/task_private/pw_async_basic/task.h	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/channel.cc	[]	[]
/proc/self/cwd/pw_bluetooth_hci/uart_transport_fuzzer.cc	['uart_transport_fuzzer']	['uart_transport_fuzzer']
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/dynamic_channel_registry.cc	['bredr_dynamic_channel_registry_fuzzer']	['bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/pw_tokenizer/base64.cc	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/command_handler.cc	['common_handler_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']	['common_handler_fuzzer', 'bredr_dynamic_channel_registry_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_tokenizer/_virtual_includes/base64/pw_tokenizer/base64.h	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/hci-spec/le_connection_parameters.cc	[]	[]
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/basic_mode_rx_engine.cc	['basic_mode_rx_engine_fuzzer']	['basic_mode_rx_engine_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/advertising_data.h	['advertising_data_fuzzer', 'peer_cache_fuzzer']	['advertising_data_fuzzer', 'peer_cache_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/task/pw_async/task.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/uuid.h	['data_element_fuzzer', 'advertising_data_fuzzer', 'pdu_fuzzer']	['data_element_fuzzer', 'advertising_data_fuzzer', 'pdu_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/internal/length.h	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_tokenizer/_virtual_includes/pw_tokenizer/pw_tokenizer/internal/tokenize_string.h	['detokenize_fuzzer']	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth/public/pw_bluetooth/hci_data.emb.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/credit_based_flow_control_tx_engine.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/gap/_virtual_includes/gap/pw_bluetooth_sapphire/internal/host/gap/identity_resolving_list.h	['peer_cache_fuzzer']	['peer_cache_fuzzer']
/proc/self/cwd/pw_tokenizer/decode.cc	['detokenize_fuzzer']	['detokenize_fuzzer']
/proc/self/cwd/pw_sys_io_stdio/sys_io.cc	[]	[]
/proc/self/cwd/pw_containers/intrusive_item.cc	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/lib/cpp-type/_virtual_includes/cpp-type/cpp-type/member_pointer_traits.h	['common_handler_fuzzer', 'channel_configuration_fuzzer', 'l2cap_fuzzer']	['common_handler_fuzzer', 'channel_configuration_fuzzer', 'l2cap_fuzzer']
/usr/local/bin/../include/c++/v1/stdlib.h	[]	[]
/proc/self/cwd/external/+_repo_rules+mbedtls/library/des.c	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_list_common/pw_containers/internal/intrusive_list.h	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/pw_string/format.cc	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['valid_packet_reader_fuzzer', 'data_element_fuzzer', 'advertising_data_fuzzer', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/external/+_repo_rules+mbedtls/library/platform_util.c	[]	[]
/proc/self/cwd/external/+_repo_rules+mbedtls/include/mbedtls/cipher.h	[]	[]
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/span_impl.h	['uart_transport_fuzzer', 'valid_packet_reader_fuzzer', 'encoder_fuzz_test', 'data_element_fuzzer', 'advertising_data_fuzzer', 'detokenize_fuzzer', 'decoder_fuzz_test', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']	['uart_transport_fuzzer', 'valid_packet_reader_fuzzer', 'encoder_fuzz_test', 'data_element_fuzzer', 'advertising_data_fuzzer', 'detokenize_fuzzer', 'decoder_fuzz_test', 'common_handler_fuzzer', 'channel_configuration_fuzzer', 'pdu_fuzzer', 'enhanced_retransmission_mode_engines_fuzzer', 'peer_cache_fuzzer', 'bredr_dynamic_channel_registry_fuzzer', 'l2cap_fuzzer']
/proc/self/cwd/pw_base64/base64.cc	['detokenize_fuzzer']	[]

Directories in report

Directory
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_protobuf/_virtual_includes/pw_protobuf/pw_protobuf/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/heap_dispatcher/pw_async/
/proc/self/cwd/pw_bluetooth_sapphire/host/l2cap/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/_virtual_includes/fake_lease_provider/pw_bluetooth_sapphire/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_list_common/pw_containers/internal/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/utf_codecs/pw_string/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_tokenizer/_virtual_includes/base64/pw_tokenizer/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_tokenizer/_virtual_includes/decoder/pw_tokenizer/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/string/pw_string/internal/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/legacy_intrusive_list/pw_containers/internal/
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/stdcompat/include/lib/stdcompat/internal/
/usr/local/bin/../include/c++/v1/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/sdp/_virtual_includes/definitions/pw_bluetooth_sapphire/internal/host/sdp/
/proc/self/cwd/pw_string/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_hci/_virtual_includes/packet/pw_bluetooth_hci/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_random/_virtual_includes/pw_random/pw_random/
/proc/self/cwd/pw_elf/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/testing/_virtual_includes/fuzzing/pw_bluetooth_sapphire/internal/host/testing/
/proc/self/cwd/external/googletest+/googletest/include/gtest/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_chrono/_virtual_includes/system_clock/pw_chrono/
/proc/self/cwd/pw_bluetooth_sapphire/host/sm/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_result/_virtual_includes/pw_result/pw_result/internal/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/fake_dispatcher_fixture/pw_async/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_result/_virtual_includes/pw_result/pw_result/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/intrusive_forward_list/pw_containers/
/proc/self/cwd/pw_bluetooth_sapphire/host/transport/
/proc/self/cwd/pw_bluetooth/public/pw_bluetooth/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/format/pw_string/
/proc/self/cwd/external/+_repo_rules+mbedtls/library/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_toolchain/_virtual_includes/sibling_cast/pw_toolchain/internal/
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/testing/_virtual_includes/controller_test_double_base/pw_bluetooth_sapphire/internal/host/testing/
/proc/self/cwd/pw_tokenizer/
/proc/self/cwd/external/emboss+/runtime/cpp/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/sm/_virtual_includes/definitions/pw_bluetooth_sapphire/internal/host/sm/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_status/_virtual_includes/pw_status/pw_status/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/fake_dispatcher/pw_async/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/sdp/_virtual_includes/sdp/pw_bluetooth_sapphire/internal/host/sdp/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_tokenizer/_virtual_includes/pw_tokenizer/pw_tokenizer/internal/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/assert/pw_assert/
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_containers/_virtual_includes/vector/pw_containers/
/proc/self/cwd/pw_sys_io/
/proc/self/cwd/pw_bluetooth_sapphire/host/common/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/gap/_virtual_includes/gap/pw_bluetooth_sapphire/internal/host/gap/
/proc/self/cwd/pw_sys_io_stdio/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/gap/_virtual_includes/peer/pw_bluetooth_sapphire/internal/host/gap/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_base64/_virtual_includes/pw_base64/pw_base64/
/proc/self/cwd/pw_async_basic/
/proc/self/cwd/pw_status/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/builder/pw_string/
/proc/self/cwd/pw_crypto/public/pw_crypto/
/proc/self/cwd/pw_varint/
/proc/self/cwd/pw_crypto/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/hci-spec/_virtual_includes/hci-spec/pw_bluetooth_sapphire/internal/host/hci-spec/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_elf/_virtual_includes/reader/pw_elf/internal/
/proc/self/cwd/pw_bytes/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bytes/_virtual_includes/pw_bytes/pw_bytes/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_span/_virtual_includes/pw_span/pw_span/internal/
/proc/self/cwd/pw_bluetooth_sapphire/lib/cpp-string/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/_virtual_includes/null_lease_provider/pw_bluetooth_sapphire/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/task/pw_async/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_varint/_virtual_includes/pw_varint/pw_varint/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_intrusive_ptr/_virtual_includes/pw_intrusive_ptr/pw_intrusive_ptr/
/proc/self/cwd/pw_bluetooth_hci/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/common/_virtual_includes/common/pw_bluetooth_sapphire/internal/host/common/
/proc/self/cwd/pw_stream/
/proc/self/cwd/pw_async/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/to_string/pw_string/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/definitions/pw_bluetooth_sapphire/internal/host/l2cap/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_intrusive_ptr/_virtual_includes/pw_intrusive_ptr/pw_intrusive_ptr/internal/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_stream/_virtual_includes/pw_stream/pw_stream/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async/_virtual_includes/dispatcher/pw_async/
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/fit/include/lib/fit/internal/../
/proc/self/cwd/third_party/fuchsia/repo/sdk/lib/stdcompat/include/lib/stdcompat/
/proc/self/cwd/pw_base64/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_protobuf/_virtual_includes/pw_protobuf/pw_protobuf/internal/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/transport/_virtual_includes/transport/pw_bluetooth_sapphire/internal/host/transport/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/lib/cpp-type/_virtual_includes/cpp-type/cpp-type/
/proc/self/cwd/pw_protobuf/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_elf/_virtual_includes/reader/pw_elf/
/proc/self/cwd/pw_bluetooth_sapphire/host/sdp/
/proc/self/cwd/external/+_repo_rules+mbedtls/include/mbedtls/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/string/pw_string/
/usr/local/bin/../include/c++/v1/__exception/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/l2cap/pw_bluetooth_sapphire/internal/host/l2cap/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async_basic/_virtual_includes/task_private/pw_async_basic/
/proc/self/cwd/pw_tokenizer/pw_tokenizer_private/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/testing/_virtual_includes/testing/pw_bluetooth_sapphire/internal/host/testing/
/proc/self/cwd/pw_bluetooth_sapphire/host/testing/
/usr/local/bin/../include/c++/v1/__charconv/
/proc/self/cwd/external/googletest+/googletest/src/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_async_basic/_virtual_includes/fake_dispatcher_private/pw_async_basic/
/proc/self/cwd/pw_intrusive_ptr/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/host/l2cap/_virtual_includes/testing/pw_bluetooth_sapphire/internal/host/l2cap/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/internal/
/proc/self/cwd/external/googletest+/googletest/include/gtest/internal/
/proc/self/cwd/pw_log_basic/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth_sapphire/_virtual_includes/lease/pw_bluetooth_sapphire/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_tokenizer/_virtual_includes/decoder/pw_tokenizer/internal/
/proc/self/cwd/pw_containers/
/proc/self/cwd/pw_bluetooth_sapphire/host/hci-spec/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_string/_virtual_includes/util/pw_string/
/proc/self/cwd/pw_bluetooth_sapphire/host/gap/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_bluetooth/public/pw_bluetooth/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_assert/_virtual_includes/check/pw_assert/internal/
/proc/self/cwd/bazel-out/k8-fastbuild-ST-df3643f24b8e/bin/pw_random/_virtual_includes/fuzzer_generator/pw_random/