Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzzer details

Fuzzer: fuzz_target_proxyprotocol

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 16 51.6%
gold [1:9] 0 0.0%
yellow [10:29] 6 19.3%
greenyellow [30:49] 0 0.0%
lawngreen 50+ 9 29.0%
All colors 31 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
13 7 makeComboAddressFromRaw(unsigned char, char const*, unsigned long) call site: 00007 __cxa_allocate_exception
2 26 long parseProxyHeader , std::__1::allocator > >(std::__1::basic_string , std::__1::allocator > const&, bool&, ComboAddress&, ComboAddress&, bool&, std::__1::vector >&) call site: 00026 __cxa_begin_catch
1 29 LLVMFuzzerTestOneInput call site: 00029 __cxa_end_catch

Runtime coverage analysis

Covered functions
6
Functions that are reachable but not covered
13
Reachable functions
24
Percentage of reachable functions covered
45.83%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/pdns/pdns/fuzz_proxyprotocol.cc 1
/src/pdns/pdns/./iputils.hh 4
/src/pdns/pdns/proxy-protocol.cc 2
/src/pdns/pdns/./pdnsexception.hh 1
/src/pdns/pdns/./proxy-protocol.hh 1

Fuzzer: fuzz_target_dnslabeltext_parseRFC1035CharString

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 0 0.0%
gold [1:9] 0 0.0%
yellow [10:29] 0 0.0%
greenyellow [30:49] 0 0.0%
lawngreen 50+ 2 100.%
All colors 2 100

Runtime coverage analysis

Covered functions
2
Functions that are reachable but not covered
0
Reachable functions
3
Percentage of reachable functions covered
100.0%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/pdns/pdns/fuzz_dnslabeltext_parseRFC1035CharString.cc 1
/src/pdns/pdns/dnslabeltext.rl 1

Fuzzer: fuzz_target_yahttp

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 33 23.0%
gold [1:9] 4 2.79%
yellow [10:29] 18 12.5%
greenyellow [30:49] 0 0.0%
lawngreen 50+ 88 61.5%
All colors 143 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
20 75 YaHTTP::CookieJar::keyValuePair(std::__1::basic_string , std::__1::allocator > const&, std::__1::basic_string , std::__1::allocator >&, std::__1::basic_string , std::__1::allocator >&) call site: 00075 strptime
4 46 YaHTTP::isspace(char) call site: 00046 __cxa_allocate_exception
2 65 YaHTTP::AsyncLoader ::feed(std::__1::basic_string , std::__1::allocator > const&) call site: 00065
1 1 LLVMFuzzerTestOneInput call site: 00001
1 44 YaHTTP::Utility::parseUrlParameters(std::__1::basic_string , std::__1::allocator > const&) call site: 00044
1 70 YaHTTP::Cookie::Cookie() call site: 00070
1 133 LLVMFuzzerTestOneInput call site: 00133
1 135 LLVMFuzzerTestOneInput call site: 00135
1 138 LLVMFuzzerTestOneInput call site: 00138 __cxa_begin_catch
1 141 LLVMFuzzerTestOneInput call site: 00141 __cxa_end_catch

Runtime coverage analysis

Covered functions
42
Functions that are reachable but not covered
40
Reachable functions
119
Percentage of reachable functions covered
66.39%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/pdns/pdns/fuzz_yahttp.cc 1
/src/pdns/pdns/../ext/yahttp/yahttp/reqresp.hpp 14
/src/pdns/pdns/../ext/yahttp/yahttp/url.hpp 12
/src/pdns/pdns/../ext/yahttp/yahttp/cookie.hpp 5
/src/pdns/pdns/../ext/yahttp/yahttp/utility.hpp 5
/src/pdns/ext/yahttp/yahttp/reqresp.cpp 4
/src/pdns/ext/yahttp/yahttp/./exception.hpp 2
/usr/local/bin/../include/c++/v1/__exception/exception.h 1
/src/pdns/ext/yahttp/yahttp/./utility.hpp 5
/src/pdns/ext/yahttp/yahttp/./cookie.hpp 4

Fuzzer: fuzz_target_packetcache

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 152 59.6%
gold [1:9] 0 0.0%
yellow [10:29] 5 1.96%
greenyellow [30:49] 1 0.39%
lawngreen 50+ 97 38.0%
All colors 255 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
14 396 4 :

['std::__1::to_string(int)', 'DNSName::packetParser(char const*, unsigned long, unsigned long, bool, unsigned short*, unsigned short*, unsigned int*, int, unsigned short)', 'std::range_error::range_error[abi:ne180100](char const*)', 'abort']

219 627 DNSName::packetParser(charconst*,unsignedlong,unsignedlong,bool,unsignedshort*,unsignedshort*,unsignedint*,int,unsignedshort) call site: 00000 /src/pdns/pdns/dnsname.cc:198
10 10 4 :

['__cxa_throw', '__cxa_free_exception', 'std::range_error::range_error[abi:ne180100](char const*)', '__cxa_allocate_exception']

10 10 checkLabelLength(unsignedchar) call site: 00000 /src/pdns/pdns/dnsname.cc:122
0 0 None 741 741 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:73
0 0 None 741 741 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:82
0 0 None 741 741 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:84
0 0 None 741 741 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:87
0 0 None 550 550 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:65
0 0 None 487 489 DNSName::parsePacketUncompressed(pdns::views::UnsignedCharViewconst&,unsignedlong,bool) call site: 00000 /src/pdns/pdns/dnsname.cc:144
0 0 None 487 489 DNSName::parsePacketUncompressed(pdns::views::UnsignedCharViewconst&,unsignedlong,bool) call site: 00000 /src/pdns/pdns/dnsname.cc:169
0 0 None 12 32 DNSName::packetParser(charconst*,unsignedlong,unsignedlong,bool,unsignedshort*,unsignedshort*,unsignedint*,int,unsignedshort) call site: 00000 /src/pdns/pdns/dnsname.cc:231
0 0 None 12 32 DNSName::packetParser(charconst*,unsignedlong,unsignedlong,bool,unsignedshort*,unsignedshort*,unsignedint*,int,unsignedshort) call site: 00000 /src/pdns/pdns/dnsname.cc:235
0 0 None 10 10 checkLabelLength(unsignedchar) call site: 00000 /src/pdns/pdns/dnsname.cc:119

Runtime coverage analysis

Covered functions
30
Functions that are reachable but not covered
101
Reachable functions
146
Percentage of reachable functions covered
30.82%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/pdns/pdns/fuzz_packetcache.cc 1
/src/pdns/pdns/./packetcache.hh 5
/src/pdns/pdns/./burtle.hh 3
/src/pdns/pdns/./dnsname.hh 2
/src/pdns/pdns/./dns.hh 3
/src/pdns/pdns/ednsoptions.cc 1
/src/pdns/pdns/dnsname.cc 5
/usr/include/boost/container/string.hpp 18
/usr/include/boost/container/new_allocator.hpp 4
/usr/local/bin/../include/c++/v1/stdexcept 4
/usr/include/boost/container/throw_exception.hpp 4
/usr/include/boost/container/detail/min_max.hpp 2
/usr/include/boost/container/detail/next_capacity.hpp 1
/usr/include/boost/container/detail/allocator_version_traits.hpp 1
/src/pdns/pdns/./views.hh 3

Fuzzer: fuzz_target_dnsdistcache

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 179 55.2%
gold [1:9] 9 2.77%
yellow [10:29] 13 4.01%
greenyellow [30:49] 9 2.77%
lawngreen 50+ 114 35.1%
All colors 324 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
60 60 8 :

['std::__1::basic_string , std::__1::allocator >::~basic_string()', 'PDNSException::PDNSException(std::__1::basic_string , std::__1::allocator >)', 'makeIPv6sockaddr(std::__1::basic_string , std::__1::allocator > const&, sockaddr_in6*)', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+[abi:ne180100] , std::__1::allocator >(std::__1::basic_string , std::__1::allocator >&&, char const*)', '__cxa_free_exception', 'std::__1::basic_string , std::__1::allocator > std::__1::operator+ , std::__1::allocator >(char const*, std::__1::basic_string , std::__1::allocator > const&)', '__cxa_throw', '__cxa_allocate_exception']

62 62 ComboAddress::ComboAddress(std::__1::basic_string ,std::__1::allocator >const&,unsignedshort) call site: 00000 /src/pdns/pdns/./iputils.hh:245
14 396 4 :

['std::__1::to_string(int)', 'DNSName::packetParser(char const*, unsigned long, unsigned long, bool, unsigned short*, unsigned short*, unsigned int*, int, unsigned short)', 'std::range_error::range_error[abi:ne180100](char const*)', 'abort']

231 627 DNSName::packetParser(charconst*,unsignedlong,unsignedlong,bool,unsignedshort*,unsignedshort*,unsignedint*,int,unsignedshort) call site: 00000 /src/pdns/pdns/dnsname.cc:198
10 10 4 :

['__cxa_throw', '__cxa_free_exception', 'std::range_error::range_error[abi:ne180100](char const*)', '__cxa_allocate_exception']

10 10 checkLabelLength(unsignedchar) call site: 00000 /src/pdns/pdns/dnsname.cc:122
8 8 4 :

['__cxa_free_exception', '__cxa_allocate_exception', '__cxa_throw', 'std::runtime_error::runtime_error(char const*)']

10 98 DNSDistPacketCache::DNSDistPacketCache(DNSDistPacketCache::CacheSettings) call site: 00000 /src/pdns/pdns/dnsdistdist/dnsdist-cache.cc:37
8 8 4 :

['__cxa_free_exception', '__cxa_allocate_exception', '__cxa_throw', 'std::runtime_error::runtime_error(char const*)']

8 8 dnsdist::getEDNSOptionsStart(std::__1::vector >>const&,unsignedlong,unsignedshort*,unsignedlong*) call site: 00000 /src/pdns/pdns/dnsdistdist/dnsdist-ecs.cc:388
0 0 None 741 741 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:73
0 0 None 741 741 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:82
0 0 None 741 741 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:84
0 0 None 741 741 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:87
0 0 None 550 550 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:65
0 0 None 487 489 DNSName::parsePacketUncompressed(pdns::views::UnsignedCharViewconst&,unsignedlong,bool) call site: 00000 /src/pdns/pdns/dnsname.cc:144
0 0 None 487 489 DNSName::parsePacketUncompressed(pdns::views::UnsignedCharViewconst&,unsignedlong,bool) call site: 00000 /src/pdns/pdns/dnsname.cc:169

Runtime coverage analysis

Covered functions
58
Functions that are reachable but not covered
145
Reachable functions
229
Percentage of reachable functions covered
36.68%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/pdns/pdns/dnsdistdist/fuzz_dnsdistcache.cc 1
/src/pdns/pdns/dnsdistdist/./dnsdist-cache.hh 5
/src/pdns/pdns/dnsdistdist/dnsdist-cache.cc 3
/src/pdns/pdns/dnsdistdist/./stat_t.hh 3
/src/pdns/pdns/dnsdistdist/./lock.hh 4
/src/pdns/pdns/dnsdistdist/dnsname.cc 4
/usr/include/boost/container/string.hpp 18
/usr/include/boost/container/new_allocator.hpp 4
/usr/local/bin/../include/c++/v1/stdexcept 4
/usr/include/boost/container/throw_exception.hpp 4
/usr/include/boost/container/detail/min_max.hpp 2
/usr/include/boost/container/detail/next_capacity.hpp 1
/usr/include/boost/container/detail/allocator_version_traits.hpp 1
/src/pdns/pdns/dnsdistdist/./views.hh 3
/src/pdns/pdns/dnsdistdist/./dnsname.hh 3
/src/pdns/pdns/dnsdistdist/./burtle.hh 3
/src/pdns/pdns/dnsdistdist/./packetcache.hh 1
/src/pdns/pdns/dnsdistdist/./dns.hh 4
/src/pdns/pdns/dnsdistdist/ednsoptions.cc 2
/usr/include/boost/optional/optional.hpp 12
/src/pdns/pdns/dnsdistdist/dnsdist-ecs.cc 1
/src/pdns/pdns/dnsdistdist/./ednssubnet.hh 2
/src/pdns/pdns/dnsdistdist/./iputils.hh 8
/src/pdns/pdns/dnsdistdist/ednssubnet.cc 1
/src/pdns/pdns/dnsdistdist/iputils.cc 1
/usr/include/boost/optional/detail/optional_aligned_storage.hpp 3

Fuzzer: fuzz_target_moadnsparser

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 567 60.3%
gold [1:9] 128 13.6%
yellow [10:29] 29 3.08%
greenyellow [30:49] 1 0.10%
lawngreen 50+ 214 22.7%
All colors 939 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
10 10 4 :

['__cxa_throw', '__cxa_free_exception', 'std::range_error::range_error[abi:ne180100](char const*)', '__cxa_allocate_exception']

10 10 checkLabelLength(unsignedchar) call site: 00000 /src/pdns/pdns/dnsname.cc:122
10 10 4 :

['__cxa_free_exception', 'std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_throw', '__cxa_allocate_exception']

10 10 PacketReader::xfrBlob(std::__1::basic_string ,std::__1::allocator >&,int) call site: 00000 /src/pdns/pdns/dnsdistdist/dnsparser.cc:576
10 10 4 :

['__cxa_free_exception', 'std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_throw', '__cxa_allocate_exception']

10 10 PacketReader::PacketReader(std::__1::basic_string_view >const&,unsignedshort,bool) call site: 00000 /src/pdns/pdns/dnsdistdist/./dnsparser.hh:74
8 8 4 :

['__cxa_free_exception', '__cxa_allocate_exception', '__cxa_throw', 'std::runtime_error::runtime_error(char const*)']

8 8 PacketReader::xfrCAWithoutPort(unsignedchar,ComboAddress&) call site: 00000 /src/pdns/pdns/dnsdistdist/./dnsparser.hh:106
4 4 1 :

['std::range_error::range_error[abi:ne180100](char const*)']

10 10 DNSName::packetParser(charconst*,unsignedlong,unsignedlong,bool,unsignedshort*,unsignedshort*,unsignedint*,int,unsignedshort) call site: 00000 /src/pdns/pdns/dnsname.cc:218
2 2 1 :

['abort']

2 2 DNSName::packetParser(charconst*,unsignedlong,unsignedlong,bool,unsignedshort*,unsignedshort*,unsignedint*,int,unsignedshort) call site: 00000 /src/pdns/pdns/dnsname.cc:199
0 0 None 741 741 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:73
0 0 None 741 741 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:82
0 0 None 741 741 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:84
0 0 None 741 741 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:87
0 0 None 550 550 DNSName::DNSName(std::__1::basic_string_view >) call site: 00000 /src/pdns/pdns/dnsname.cc:65
0 0 None 487 489 DNSName::parsePacketUncompressed(pdns::views::UnsignedCharViewconst&,unsignedlong,bool) call site: 00000 /src/pdns/pdns/dnsname.cc:144

Runtime coverage analysis

Covered functions
314
Functions that are reachable but not covered
413
Reachable functions
826
Percentage of reachable functions covered
50.0%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/pdns/pdns/fuzz_moadnsparser.cc 2
/src/pdns/pdns/dnsrecords.cc 158
/src/pdns/pdns/./dnsparser.hh 14
/src/pdns/pdns/dnsparser.cc 15
/src/pdns/pdns/./qtype.hh 1
/src/pdns/pdns/sillyrecords.cc 3
/src/pdns/pdns/nsecrecords.cc 13
/src/pdns/pdns/dnsname.cc 8
/usr/include/boost/container/string.hpp 21
/usr/include/boost/container/new_allocator.hpp 6
/usr/local/bin/../include/c++/v1/stdexcept 5
/usr/include/boost/container/throw_exception.hpp 4
/usr/include/boost/container/detail/min_max.hpp 2
/usr/include/boost/container/detail/next_capacity.hpp 1
/usr/include/boost/container/detail/allocator_version_traits.hpp 1
/src/pdns/pdns/./views.hh 3
/src/pdns/pdns/./dnsname.hh 6
/src/pdns/pdns/./pdnsexception.hh 1
/src/pdns/pdns/./dnsrecords.hh 2
/usr/include/boost/algorithm/string/classification.hpp 1
/usr/include/boost/range/as_literal.hpp 7
/usr/include/boost/range/iterator_range_core.hpp 20
/usr/include/boost/algorithm/string/detail/classification.hpp 4
/usr/include/boost/range/distance.hpp 1
/usr/include/boost/range/begin.hpp 6
/usr/include/boost/range/end.hpp 6
/usr/include/boost/iterator/distance.hpp 2
/usr/include/boost/algorithm/string/split.hpp 1
/usr/include/boost/algorithm/string/finder.hpp 1
/usr/include/boost/algorithm/string/detail/finder.hpp 3
/usr/include/boost/algorithm/string/iter_find.hpp 1
/usr/include/boost/algorithm/string/find_iterator.hpp 5
/usr/include/boost/algorithm/string/detail/find_iterator.hpp 5
/usr/include/boost/function/function_template.hpp 13
/usr/include/boost/function/function_base.hpp 7
/usr/include/boost/core/addressof.hpp 1
/usr/include/boost/throw_exception.hpp 5
/usr/include/boost/exception/exception.hpp 7
/usr/include/boost/iterator/transform_iterator.hpp 4
/usr/include/boost/iterator/iterator_adaptor.hpp 3
/src/pdns/pdns/./iputils.hh 14
/src/pdns/pdns/misc.cc 2
/src/pdns/pdns/./misc.hh 4
/usr/local/bin/../include/c++/v1/optional 2

Fuzzer: fuzz_target_zoneparsertng

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 1323 73.7%
gold [1:9] 122 6.80%
yellow [10:29] 19 1.05%
greenyellow [30:49] 36 2.00%
lawngreen 50+ 293 16.3%
All colors 1793 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
143 143 1 :

['boost::container::basic_string , void>::operator+=(boost::container::basic_string , void> const&)']

143 143 DNSName::operator+=(DNSNameconst&) call site: 00000 /src/pdns/pdns/./dnsname.hh:165
10 10 4 :

['__cxa_free_exception', 'std::out_of_range::out_of_range[abi:ne180100](char const*)', '__cxa_throw', '__cxa_allocate_exception']

10 10 DNSName::toString(std::__1::basic_string ,std::__1::allocator >&,std::__1::basic_string ,std::__1::allocator >const&,bool)const call site: 00000 /src/pdns/pdns/dnsname.cc:260
0 0 None 1185 13398 ZoneParserTNG::get(DNSResourceRecord&,std::__1::basic_string ,std::__1::allocator >*) call site: 00000 /src/pdns/pdns/zoneparser-tng.cc:349
0 0 None 1185 13398 ZoneParserTNG::get(DNSResourceRecord&,std::__1::basic_string ,std::__1::allocator >*) call site: 00000 /src/pdns/pdns/zoneparser-tng.cc:351
0 0 None 1185 13398 ZoneParserTNG::get(DNSResourceRecord&,std::__1::basic_string ,std::__1::allocator >*) call site: 00000 /src/pdns/pdns/zoneparser-tng.cc:369
0 0 None 1185 13398 ZoneParserTNG::get(DNSResourceRecord&,std::__1::basic_string ,std::__1::allocator >*) call site: 00000 /src/pdns/pdns/zoneparser-tng.cc:379
0 0 None 1185 13398 ZoneParserTNG::get(DNSResourceRecord&,std::__1::basic_string ,std::__1::allocator >*) call site: 00000 /src/pdns/pdns/zoneparser-tng.cc:504
0 0 None 1185 13398 ZoneParserTNG::get(DNSResourceRecord&,std::__1::basic_string ,std::__1::allocator >*) call site: 00000 /src/pdns/pdns/zoneparser-tng.cc:569
0 0 None 2 10 ZoneParserTNG::getLine() call site: 00000 /src/pdns/pdns/zoneparser-tng.cc:677
0 0 None 0 0 DNSName::operator+=(DNSNameconst&) call site: 00000 /src/pdns/pdns/./dnsname.hh:162
0 0 None 0 0 voidstringtok ,std::__1::allocator >,std::__1::allocator ,std::__1::allocator >>>>(std::__1::vector ,std::__1::allocator >,std::__1::allocator ,std::__1::allocator >>>&,std::__1::basic_string ,std::__1::allocator >const&,charconst*) call site: 00000 /src/pdns/pdns/./misc.hh:131
0 0 None 0 0 unsignedintpdns::checked_stoi (std::__1::basic_string ,std::__1::allocator >const&,unsignedlong*,int) call site: 00000 /src/pdns/pdns/./misc.hh:751

Runtime coverage analysis

Covered functions
129
Functions that are reachable but not covered
1081
Reachable functions
1431
Percentage of reachable functions covered
24.46%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/pdns/pdns/fuzz_zoneparsertng.cc 2
/src/pdns/pdns/dnsrecords.cc 158
/src/pdns/pdns/./dnsparser.hh 16
/src/pdns/pdns/dnsparser.cc 17
/src/pdns/pdns/./qtype.hh 3
/src/pdns/pdns/sillyrecords.cc 3
/src/pdns/pdns/nsecrecords.cc 13
/src/pdns/pdns/dnsname.cc 14
/usr/include/boost/container/string.hpp 38
/usr/include/boost/container/new_allocator.hpp 8
/usr/local/bin/../include/c++/v1/stdexcept 5
/usr/include/boost/container/throw_exception.hpp 4
/usr/include/boost/container/detail/min_max.hpp 2
/usr/include/boost/container/detail/next_capacity.hpp 1
/usr/include/boost/container/detail/allocator_version_traits.hpp 1
/src/pdns/pdns/./views.hh 3
/src/pdns/pdns/./dnsname.hh 24
/src/pdns/pdns/./pdnsexception.hh 1
/src/pdns/pdns/./dnsrecords.hh 2
/usr/include/boost/algorithm/string/classification.hpp 3
/usr/include/boost/range/as_literal.hpp 11
/usr/include/boost/range/iterator_range_core.hpp 34
/usr/include/boost/algorithm/string/detail/classification.hpp 9
/usr/include/boost/range/distance.hpp 1
/usr/include/boost/range/begin.hpp 12
/usr/include/boost/range/end.hpp 12
/usr/include/boost/iterator/distance.hpp 2
/usr/include/boost/algorithm/string/split.hpp 2
/usr/include/boost/algorithm/string/finder.hpp 1
/usr/include/boost/algorithm/string/detail/finder.hpp 3
/usr/include/boost/algorithm/string/iter_find.hpp 2
/usr/include/boost/algorithm/string/find_iterator.hpp 10
/usr/include/boost/algorithm/string/detail/find_iterator.hpp 10
/usr/include/boost/function/function_template.hpp 26
/usr/include/boost/function/function_base.hpp 7
/usr/include/boost/core/addressof.hpp 1
/usr/include/boost/throw_exception.hpp 17
/usr/include/boost/exception/exception.hpp 7
/usr/include/boost/iterator/transform_iterator.hpp 8
/usr/include/boost/iterator/iterator_adaptor.hpp 6
/src/pdns/pdns/./iputils.hh 14
/src/pdns/pdns/misc.cc 5
/src/pdns/pdns/./misc.hh 14
/usr/local/bin/../include/c++/v1/optional 2
/src/pdns/pdns/zoneparser-tng.cc 15
/src/pdns/pdns/./zoneparser-tng.hh 4
/src/pdns/pdns/./dns.hh 2
/usr/include/boost/algorithm/string/trim.hpp 9
/usr/include/boost/algorithm/string/detail/trim.hpp 8
/src/pdns/pdns/dnslabeltext.rl 1
/usr/include/boost/algorithm/string/predicate.hpp 4
/usr/include/boost/algorithm/string/compare.hpp 1
/usr/include/boost/format/format_implementation.hpp 7
/usr/include/boost/format/alt_sstream.hpp 7
/usr/include/boost/optional/optional.hpp 13
/usr/include/boost/format/parsing.hpp 11
/usr/include/boost/optional/detail/optional_aligned_storage.hpp 6
/usr/include/boost/format/exceptions.hpp 12
/usr/local/bin/../include/c++/v1/__exception/exception.h 2
/usr/include/boost/format/internals.hpp 9
/usr/include/boost/format/alt_sstream_impl.hpp 2
/usr/include/boost/format/format_class.hpp 2
/usr/include/boost/format/feed_args.hpp 10
/usr/include/boost/utility/base_from_member.hpp 2
/usr/include/boost/smart_ptr/shared_ptr.hpp 5
/usr/include/boost/smart_ptr/detail/shared_count.hpp 2
/usr/include/boost/smart_ptr/detail/sp_counted_impl.hpp 1
/usr/include/boost/smart_ptr/detail/sp_counted_base_gcc_atomic.hpp 4
/usr/include/boost/format/format_fwd.hpp 1
/src/pdns/pdns/dnswriter.cc 9
/usr/include/boost/container/vector.hpp 4
/usr/include/boost/container/static_vector.hpp 1
/src/pdns/pdns/./dnswriter.hh 3
/src/pdns/pdns/qtype.cc 1

Analyses and suggestions

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name Functions filename Arg count Args Function depth hitcount instr count bb count cyclomatic complexity Reachable functions Incoming references total cyclomatic complexity Unreached complexity
HTTPSRecordContent::HTTPSRecordContent(std::__1::basic_string ,std::__1::allocator >const&) /src/pdns/pdns/dnsrecords.cc 2 ['N/A', 'N/A'] 12 0 185 33 24 451 0 1913 927
HTTPSRecordContent::getZoneRepresentation(bool)const /src/pdns/pdns/dnsrecords.cc 3 ['N/A', 'N/A', 'bool'] 10 0 63 10 10 161 0 590 406
StatBag::resizeRing(std::__1::basic_string ,std::__1::allocator >const&,unsignedint) /src/pdns/pdns/statbag.cc 3 ['N/A', 'N/A', 'int'] 9 0 127 19 20 267 0 446 405
YaHTTP::operator>>(std::__1::basic_istream >&,YaHTTP::Response&) /src/pdns/ext/yahttp/yahttp/reqresp.cpp 2 ['N/A', 'N/A'] 6 0 177 37 29 88 0 683 377
DNSDistPacketCache::get(DNSQuestion&,unsignedshort,unsignedint*,boost::optional &,bool,bool,unsignedint,bool,bool,bool) /src/pdns/pdns/dnsdistdist/dnsdist-cache.cc 11 ['N/A', 'N/A', 'short', 'N/A', 'N/A', 'bool', 'bool', 'int', 'bool', 'bool', 'bool'] 9 0 781 98 94 178 0 547 316
YaHTTP::operator<<(std::__1::basic_ostream >&,YaHTTP::Requestconst&) /src/pdns/ext/yahttp/yahttp/reqresp.cpp 2 ['N/A', 'N/A'] 6 0 21 3 2 35 0 329 301
handleEDNSClientSubnet(DNSQuestion&,bool&,bool&) /src/pdns/pdns/dnsdistdist/dnsdist-ecs.cc 3 ['N/A', 'N/A', 'N/A'] 14 0 123 18 14 292 0 1000 254

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers
39.0%
1128 / 2886
Cyclomatic complexity statically reachable by fuzzers
38.0%
8691 / 23047

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name Functions filename Args Function call depth Reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzz engine guidance

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

/src/pdns/pdns/fuzz_proxyprotocol.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['makeComboAddressFromRaw(unsigned char, char const*, unsigned long)', 'long parseProxyHeader, std::__1::allocator > >(std::__1::basic_string, std::__1::allocator > const&, bool&, ComboAddress&, ComboAddress&, bool&, std::__1::vector >&)', 'LLVMFuzzerTestOneInput']

/src/pdns/pdns/fuzz_dnslabeltext_parseRFC1035CharString.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


/src/pdns/pdns/fuzz_yahttp.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['YaHTTP::CookieJar::keyValuePair(std::__1::basic_string, std::__1::allocator > const&, std::__1::basic_string, std::__1::allocator >&, std::__1::basic_string, std::__1::allocator >&)', 'YaHTTP::isspace(char)', 'YaHTTP::AsyncLoader::feed(std::__1::basic_string, std::__1::allocator > const&)', 'LLVMFuzzerTestOneInput', 'YaHTTP::Utility::parseUrlParameters(std::__1::basic_string, std::__1::allocator > const&)', 'YaHTTP::Cookie::Cookie()']

/src/pdns/pdns/fuzz_packetcache.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['DNSName::DNSName(char const*, unsigned long, unsigned long, bool, unsigned short*, unsigned short*, unsigned int*, unsigned short)', 'DNSName::parsePacketUncompressed(pdns::views::UnsignedCharView const&, unsigned long, bool)', 'DNSName::packetParser(char const*, unsigned long, unsigned long, bool, unsigned short*, unsigned short*, unsigned int*, int, unsigned short)', 'DNSName::packetParser(char const*, unsigned long, unsigned long, bool, unsigned short*, unsigned short*, unsigned int*, int, unsigned short)', 'DNSName::parsePacketUncompressed(pdns::views::UnsignedCharView const&, unsigned long, bool)', 'LLVMFuzzerTestOneInput', 'DNSName::DNSName(char const*, unsigned long, unsigned long, bool, unsigned short*, unsigned short*, unsigned int*, unsigned short)', 'DNSName::parsePacketUncompressed(pdns::views::UnsignedCharView const&, unsigned long, bool)', 'DNSName::DNSName(char const*, unsigned long, unsigned long, bool, unsigned short*, unsigned short*, unsigned int*, unsigned short)', 'PacketCache::hashAfterQname(std::__1::basic_string_view > const&, unsigned int, unsigned long, std::__1::unordered_set, std::__1::equal_to, std::__1::allocator > const&, std::__1::vector > const&)']

/src/pdns/pdns/dnsdistdist/fuzz_dnsdistcache.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['DNSName::DNSName(char const*, unsigned long, unsigned long, bool, unsigned short*, unsigned short*, unsigned int*, unsigned short)', 'DNSName::parsePacketUncompressed(pdns::views::UnsignedCharView const&, unsigned long, bool)', 'DNSName::packetParser(char const*, unsigned long, unsigned long, bool, unsigned short*, unsigned short*, unsigned int*, int, unsigned short)', 'DNSName::parsePacketUncompressed(pdns::views::UnsignedCharView const&, unsigned long, bool)', 'DNSDistPacketCache::getClientSubnet(std::__1::vector > > const&, unsigned long, boost::optional&)', 'LLVMFuzzerTestOneInput', 'DNSName::DNSName(char const*, unsigned long, unsigned long, bool, unsigned short*, unsigned short*, unsigned int*, unsigned short)', 'DNSName::parsePacketUncompressed(pdns::views::UnsignedCharView const&, unsigned long, bool)', 'DNSDistPacketCache::getClientSubnet(std::__1::vector > > const&, unsigned long, boost::optional&)']

/src/pdns/pdns/fuzz_moadnsparser.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['APLRecordContent::report(ReportIsOnlyCallableByReportAllTypes const&)', 'makeComboAddressFromRaw(unsigned char, char const*, unsigned long)', 'DNSName::DNSName(char const*, unsigned long, unsigned long, bool, unsigned short*, unsigned short*, unsigned int*, unsigned short)', 'DNSName::parsePacketUncompressed(pdns::views::UnsignedCharView const&, unsigned long, bool)', 'DNSName::packetParser(char const*, unsigned long, unsigned long, bool, unsigned short*, unsigned short*, unsigned int*, int, unsigned short)', 'DNSName::parsePacketUncompressed(pdns::views::UnsignedCharView const&, unsigned long, bool)', 'DNSName::DNSName(char const*, unsigned long, unsigned long, bool, unsigned short*, unsigned short*, unsigned int*, unsigned short)', 'DNSName::operator=(DNSName&&)', 'DNSName::parsePacketUncompressed(pdns::views::UnsignedCharView const&, unsigned long, bool)', 'DNSName::parsePacketUncompressed(pdns::views::UnsignedCharView const&, unsigned long, bool)']

/src/pdns/pdns/fuzz_zoneparsertng.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['ZoneParserTNG::get(DNSResourceRecord&, std::__1::basic_string, std::__1::allocator >*)', 'NSECRecordContent::report(ReportIsOnlyCallableByReportAllTypes const&)', 'APLRecordContent::report(ReportIsOnlyCallableByReportAllTypes const&)', 'LLVMFuzzerTestOneInput', 'DNSName::operator=(DNSName&&)', 'ZoneParserTNG::get(DNSResourceRecord&, std::__1::basic_string, std::__1::allocator >*)', 'unsigned char pdns::checked_stoi(std::__1::basic_string, std::__1::allocator > const&, unsigned long*, int)', 'DNSName::DNSName(std::__1::basic_string_view >)', 'APLRecordContent::report(ReportIsOnlyCallableByReportAllTypes const&)', 'NSEC3RecordContent::report(ReportIsOnlyCallableByReportAllTypes const&)']

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
/src/pdns/pdns/dnsdistdist/./proxy-protocol.hh [] []
/src/pdns/pdns/dnsdistdist/ext/arc4random/./chacha_private.h [] []
/src/pdns/pdns/./svc-records.hh [] []
/src/pdns/ext/yahttp/yahttp/./utility.hpp ['fuzz_target_yahttp'] []
/usr/include/boost/function/function_template.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/optional/detail/optional_aligned_storage.hpp ['fuzz_target_dnsdistcache', 'fuzz_target_zoneparsertng'] ['fuzz_target_dnsdistcache']
/src/pdns/pdns/misc.cc ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng']
/usr/include/boost/smart_ptr/detail/sp_counted_base_gcc_atomic.hpp ['fuzz_target_zoneparsertng'] []
/src/pdns/pdns/statbag.cc [] []
/usr/include/boost/algorithm/string/detail/formatter.hpp [] []
/usr/include/boost/algorithm/string/replace.hpp [] []
/usr/include/boost/smart_ptr/shared_ptr.hpp ['fuzz_target_zoneparsertng'] ['fuzz_target_zoneparsertng']
/src/pdns/pdns/dnsdistdist/ext/arc4random/bsd-getentropy.c [] []
/src/pdns/ext/yahttp/yahttp/./cookie.hpp ['fuzz_target_yahttp'] []
/usr/include/boost/range/iterator_range_core.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng']
/src/pdns/pdns/dnsdistdist/./burtle.hh ['fuzz_target_dnsdistcache'] []
/usr/include/boost/function/function_base.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng']
/src/pdns/pdns/dnsdistdist/./iputils.hh ['fuzz_target_dnsdistcache'] []
/usr/include/boost/type_traits/integral_constant.hpp [] []
/usr/include/boost/optional/detail/optional_trivially_copyable_base.hpp [] []
/src/pdns/pdns/dnsdistdist/dnsdist-configuration.cc [] []
/src/pdns/pdns/./statbag.hh [] []
/src/pdns/pdns/dnsdistdist/./dnswriter.hh [] []
/src/pdns/pdns/nsecrecords.cc ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng']
/src/pdns/pdns/dnsdistdist/./pdnsexception.hh [] []
/src/pdns/pdns/dnsdistdist/dnsdist-dnsparser.cc [] []
/src/pdns/pdns/dnsdistdist/./channel.hh [] []
/src/pdns/pdns/dnsdistdist/ednssubnet.cc ['fuzz_target_dnsdistcache'] ['fuzz_target_dnsdistcache']
/usr/include/boost/iterator/transform_iterator.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/iterator/iterator_facade.hpp [] []
/usr/include/boost/container/throw_exception.hpp ['fuzz_target_packetcache', 'fuzz_target_dnsdistcache', 'fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/./dnsname.hh ['fuzz_target_packetcache', 'fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/core/empty_value.hpp [] []
/src/pdns/pdns/dnsdistdist/dnsdist-ecs.cc ['fuzz_target_dnsdistcache'] ['fuzz_target_dnsdistcache']
/src/pdns/pdns/dnsdistdist/dnsname.cc ['fuzz_target_dnsdistcache'] ['fuzz_target_dnsdistcache']
/src/pdns/pdns/./iputils.hh ['fuzz_target_proxyprotocol', 'fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/algorithm/string/detail/find_iterator.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/dnsdistdist/./dns_random.hh [] []
/usr/include/boost/container/static_vector.hpp ['fuzz_target_zoneparsertng'] []
/src/pdns/ext/arc4random/./chacha_private.h [] []
/src/pdns/ext/arc4random/./arc4random.h [] []
/usr/local/bin/../include/c++/v1/stdexcept ['fuzz_target_packetcache', 'fuzz_target_dnsdistcache', 'fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/dnsdistdist/dnslabeltext.rl [] []
/usr/include/boost/algorithm/string/detail/find_format.hpp [] []
/src/pdns/pdns/dnswriter.cc ['fuzz_target_zoneparsertng'] ['fuzz_target_zoneparsertng']
/usr/include/boost/algorithm/string/detail/sequence.hpp [] []
/src/pdns/pdns/dnsdistdist/dns.cc [] []
/usr/include/boost/algorithm/string/join.hpp [] []
/src/pdns/pdns/dnsdistdist/./noinitvector.hh [] []
/src/pdns/pdns/dnsdistdist/./qtype.hh [] []
/src/pdns/pdns/dnsdistdist/./dns.hh ['fuzz_target_dnsdistcache'] []
/src/pdns/pdns/./dnswriter.hh ['fuzz_target_zoneparsertng'] []
/usr/include/boost/format/free_funcs.hpp [] []
/usr/include/boost/circular_buffer/details.hpp [] []
/src/pdns/pdns/./ednsoptions.hh [] []
/src/pdns/pdns/./qtype.hh ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/algorithm/string/detail/finder.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/dnsdistdist/misc.cc [] []
/usr/include/boost/range/begin.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng']
/src/pdns/pdns/../ext/yahttp/yahttp/cookie.hpp ['fuzz_target_yahttp'] []
/src/pdns/pdns/dnsdistdist/dnswriter.cc [] []
/src/pdns/pdns/./dnsparser.hh ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/dnsdistdist/./ednssubnet.hh ['fuzz_target_dnsdistcache'] []
/src/pdns/pdns/dnsdistdist/ednsoptions.cc ['fuzz_target_dnsdistcache'] ['fuzz_target_dnsdistcache']
/src/pdns/pdns/dnsdistdist/dnsdist-dnsquestion.cc [] []
/src/pdns/pdns/rcpgenerator.cc [] []
/src/pdns/pdns/unix_utility.cc [] []
/usr/include/boost/algorithm/string/detail/find_format_store.hpp [] []
/src/pdns/pdns/dnsdistdist/./dnsname.hh ['fuzz_target_dnsdistcache'] []
/src/pdns/pdns/./logger.hh [] []
/usr/local/bin/../include/c++/v1/string [] []
/usr/include/boost/optional/detail/optional_relops.hpp [] []
/usr/include/boost/container/detail/min_max.hpp ['fuzz_target_packetcache', 'fuzz_target_dnsdistcache', 'fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/format/format_fwd.hpp ['fuzz_target_zoneparsertng'] []
/src/pdns/pdns/dnsdistdist/./ednsoptions.hh [] []
/usr/local/bin/../include/c++/v1/sstream [] []
/src/pdns/pdns/proxy-protocol.cc ['fuzz_target_proxyprotocol'] ['fuzz_target_proxyprotocol']
/usr/include/boost/range/empty.hpp [] []
/usr/include/boost/core/pointer_traits.hpp [] []
/src/pdns/pdns/qtype.cc ['fuzz_target_zoneparsertng'] ['fuzz_target_zoneparsertng']
/usr/include/boost/algorithm/string/detail/replace_storage.hpp [] []
/usr/include/boost/algorithm/string/classification.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/dnsdistdist/./sholder.hh [] []
/usr/include/boost/format/format_class.hpp ['fuzz_target_zoneparsertng'] ['fuzz_target_zoneparsertng']
/src/pdns/pdns/./dnsrecords.hh ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/smart_ptr/detail/sp_counted_impl.hpp ['fuzz_target_zoneparsertng'] []
/usr/include/boost/smart_ptr/detail/shared_count.hpp ['fuzz_target_zoneparsertng'] []
/usr/include/boost/container/string.hpp ['fuzz_target_packetcache', 'fuzz_target_dnsdistcache', 'fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/dnsrecords.cc ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng']
/src/pdns/pdns/dnsdistdist/channel.cc [] []
/usr/include/boost/container/new_allocator.hpp ['fuzz_target_packetcache', 'fuzz_target_dnsdistcache', 'fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/dnsdistdist/./svc-records.hh [] []
/src/pdns/pdns/dnsdistdist/ext/arc4random/arc4random_uniform.c [] []
/src/pdns/pdns/./dns_random.hh [] []
/src/pdns/pdns/dnsdistdist/./dnsdist.hh [] []
/src/pdns/pdns/dnsdistdist/./dnsparser.hh [] []
/usr/include/boost/container/detail/allocator_version_traits.hpp ['fuzz_target_packetcache', 'fuzz_target_dnsdistcache', 'fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/svc-records.cc [] []
/src/pdns/pdns/dnsdistdist/./dnsdist-cache.hh ['fuzz_target_dnsdistcache'] []
/usr/include/boost/algorithm/string/split.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/core/allocator_access.hpp [] []
/src/pdns/pdns/base64.cc [] []
/src/pdns/ext/yahttp/yahttp/./exception.hpp ['fuzz_target_yahttp'] []
/src/pdns/pdns/dnsdistdist/./dnsdist-rule-chains.hh [] []
/usr/include/boost/range/end.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng']
/usr/include/boost/format/internals.hpp ['fuzz_target_zoneparsertng'] ['fuzz_target_zoneparsertng']
/src/pdns/pdns/./rcpgenerator.hh [] []
/src/pdns/pdns/fuzz_moadnsparser.cc ['fuzz_target_moadnsparser'] ['fuzz_target_moadnsparser']
/src/pdns/pdns/fuzz_dnslabeltext_parseRFC1035CharString.cc ['fuzz_target_dnslabeltext_parseRFC1035CharString'] ['fuzz_target_dnslabeltext_parseRFC1035CharString']
/usr/include/boost/format/alt_sstream_impl.hpp ['fuzz_target_zoneparsertng'] []
/usr/include/boost/iterator/distance.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/range/distance.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/dnsdistdist/./views.hh ['fuzz_target_dnsdistcache'] []
/usr/include/boost/algorithm/string/detail/util.hpp [] []
/src/pdns/pdns/dnsdistdist/./stat_t.hh ['fuzz_target_dnsdistcache'] []
/usr/include/boost/algorithm/string/predicate.hpp ['fuzz_target_zoneparsertng'] ['fuzz_target_zoneparsertng']
/src/pdns/pdns/../ext/yahttp/yahttp/utility.hpp ['fuzz_target_yahttp'] []
/src/pdns/ext/yahttp/yahttp/./reqresp.hpp [] []
/src/pdns/pdns/./zoneparser-tng.hh ['fuzz_target_zoneparsertng'] []
/src/pdns/ext/arc4random/arc4random_uniform.c [] []
/usr/include/boost/algorithm/string/detail/find_format_all.hpp [] []
/usr/include/boost/algorithm/string/find_iterator.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/local/bin/../include/c++/v1/optional ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/algorithm/string/detail/trim.hpp ['fuzz_target_zoneparsertng'] []
/src/pdns/pdns/dnsdistdist/dnsdist-cache.cc ['fuzz_target_dnsdistcache'] ['fuzz_target_dnsdistcache']
/src/pdns/ext/arc4random/bsd-getentropy.c [] []
/usr/include/boost/algorithm/string/compare.hpp ['fuzz_target_zoneparsertng'] []
/src/pdns/pdns/fuzz_proxyprotocol.cc ['fuzz_target_proxyprotocol'] ['fuzz_target_proxyprotocol']
/usr/include/boost/optional/optional.hpp ['fuzz_target_dnsdistcache', 'fuzz_target_zoneparsertng'] ['fuzz_target_dnsdistcache']
/src/pdns/pdns/dnsdistdist/qtype.cc [] []
/usr/include/boost/algorithm/string/find_format.hpp [] []
/src/pdns/pdns/dnsdistdist/ext/arc4random/arc4random.c [] []
/usr/include/boost/format/feed_args.hpp ['fuzz_target_zoneparsertng'] ['fuzz_target_zoneparsertng']
/src/pdns/pdns/dnsdistdist/dnsdist-crypto.cc [] []
/usr/include/boost/algorithm/string/iter_find.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/range/algorithm/equal.hpp [] []
/src/pdns/pdns/./views.hh ['fuzz_target_packetcache', 'fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/circular_buffer/base.hpp [] []
/src/pdns/pdns/logger.cc [] []
/src/pdns/pdns/dnsdistdist/ext/arc4random/./arc4random.h [] []
/usr/include/boost/container/detail/next_capacity.hpp ['fuzz_target_packetcache', 'fuzz_target_dnsdistcache', 'fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/format/exceptions.hpp ['fuzz_target_zoneparsertng'] []
/src/pdns/pdns/dnslabeltext.cc [] []
/usr/include/boost/format/parsing.hpp ['fuzz_target_zoneparsertng'] ['fuzz_target_zoneparsertng']
/src/pdns/pdns/dnsdistdist/dnslabeltext.cc [] []
/usr/include/boost/algorithm/string/erase.hpp [] []
/usr/include/boost/exception/exception.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/format/alt_sstream.hpp ['fuzz_target_zoneparsertng'] ['fuzz_target_zoneparsertng']
/src/pdns/pdns/sillyrecords.cc ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng']
/src/pdns/pdns/zoneparser-tng.cc ['fuzz_target_zoneparsertng'] ['fuzz_target_zoneparsertng']
/usr/include/boost/algorithm/string/trim.hpp ['fuzz_target_zoneparsertng'] []
/usr/include/boost/algorithm/string/finder.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/../ext/yahttp/yahttp/url.hpp ['fuzz_target_yahttp'] []
/src/pdns/pdns/dnsdistdist/./packetcache.hh ['fuzz_target_dnsdistcache'] []
/src/pdns/pdns/dnsdistdist/./dnsdist-configuration.hh [] []
/src/pdns/pdns/dnsdistdist/./dnsdist-dnsparser.hh [] []
/src/pdns/pdns/dnsdistdist/svc-records.cc [] []
/src/pdns/pdns/./burtle.hh ['fuzz_target_packetcache'] []
/src/pdns/pdns/fuzz_yahttp.cc ['fuzz_target_yahttp'] ['fuzz_target_yahttp']
/src/pdns/pdns/ednsoptions.cc ['fuzz_target_packetcache'] ['fuzz_target_packetcache']
/src/pdns/pdns/./proxy-protocol.hh ['fuzz_target_proxyprotocol'] []
/src/pdns/pdns/fuzz_zoneparsertng.cc ['fuzz_target_zoneparsertng'] ['fuzz_target_zoneparsertng']
/src/pdns/pdns/dnsdistdist/./dnsdist-query-count.hh [] []
/src/pdns/pdns/dnsdistdist/dnsparser.cc [] []
/usr/include/boost/core/addressof.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/dnsdistdist/dnsdist-protocols.cc [] []
/src/pdns/pdns/dnsdistdist/fuzz_dnsdistcache.cc ['fuzz_target_dnsdistcache'] ['fuzz_target_dnsdistcache']
/src/pdns/pdns/./noinitvector.hh [] []
/src/pdns/pdns/dnsdistdist/./dnsdist-carbon.hh [] []
/src/pdns/pdns/dnsdistdist/./lock.hh ['fuzz_target_dnsdistcache'] []
/usr/include/boost/range/detail/safe_bool.hpp [] []
/usr/local/bin/../include/c++/v1/__exception/exception.h ['fuzz_target_yahttp', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/./pdnsexception.hh ['fuzz_target_proxyprotocol', 'fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/ext/yahttp/yahttp/reqresp.cpp ['fuzz_target_yahttp'] ['fuzz_target_yahttp']
/src/pdns/pdns/fuzz_packetcache.cc ['fuzz_target_packetcache'] ['fuzz_target_packetcache']
/src/pdns/pdns/./misc.hh ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/container/vector.hpp ['fuzz_target_zoneparsertng'] []
/src/pdns/pdns/dnsdistdist/iputils.cc ['fuzz_target_dnsdistcache'] ['fuzz_target_dnsdistcache']
/src/pdns/pdns/base32.cc [] []
/usr/include/boost/algorithm/string/formatter.hpp [] []
/usr/include/boost/iterator/iterator_adaptor.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/./lock.hh [] []
/src/pdns/pdns/dnsdistdist/./misc.hh [] []
/usr/include/boost/format/format_implementation.hpp ['fuzz_target_zoneparsertng'] ['fuzz_target_zoneparsertng']
/src/pdns/pdns/dnsparser.cc ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng']
/src/pdns/pdns/./dns.hh ['fuzz_target_packetcache', 'fuzz_target_zoneparsertng'] []
/usr/include/boost/throw_exception.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/ext/arc4random/arc4random.c [] []
/src/pdns/pdns/./packetcache.hh ['fuzz_target_packetcache'] []
/src/pdns/pdns/dnslabeltext.rl ['fuzz_target_dnslabeltext_parseRFC1035CharString', 'fuzz_target_zoneparsertng'] ['fuzz_target_dnslabeltext_parseRFC1035CharString', 'fuzz_target_zoneparsertng']
/src/pdns/pdns/dnsname.cc ['fuzz_target_packetcache', 'fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] ['fuzz_target_packetcache', 'fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng']
/usr/include/boost/range/as_literal.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng']
/usr/include/boost/utility/base_from_member.hpp ['fuzz_target_zoneparsertng'] []
/usr/include/boost/algorithm/string/detail/classification.hpp ['fuzz_target_moadnsparser', 'fuzz_target_zoneparsertng'] []
/src/pdns/pdns/../ext/yahttp/yahttp/reqresp.hpp ['fuzz_target_yahttp'] []

Directories in report

Directory
/src/pdns/ext/arc4random/
/usr/include/boost/iterator/
/usr/include/boost/range/
/usr/include/boost/optional/detail/
/src/pdns/pdns/./
/usr/include/boost/utility/
/usr/include/boost/algorithm/string/detail/
/usr/include/boost/
/usr/include/boost/circular_buffer/
/src/pdns/pdns/
/src/pdns/pdns/../ext/yahttp/yahttp/
/usr/include/boost/smart_ptr/
/src/pdns/ext/yahttp/yahttp/
/usr/include/boost/core/
/usr/include/boost/type_traits/
/usr/include/boost/optional/
/usr/include/boost/range/algorithm/
/src/pdns/pdns/dnsdistdist/ext/arc4random/
/src/pdns/ext/arc4random/./
/usr/local/bin/../include/c++/v1/__exception/
/src/pdns/pdns/dnsdistdist/ext/arc4random/./
/usr/include/boost/range/detail/
/usr/local/bin/../include/c++/v1/
/src/pdns/pdns/dnsdistdist/./
/usr/include/boost/exception/
/src/pdns/ext/yahttp/yahttp/./
/usr/include/boost/smart_ptr/detail/
/usr/include/boost/container/
/usr/include/boost/algorithm/string/
/usr/include/boost/container/detail/
/usr/include/boost/format/
/src/pdns/pdns/dnsdistdist/
/usr/include/boost/function/