---
Fuzzer filename: '/src/qubes-os/qubes-core-qrexec/fuzz/qubesrpc_parse_fuzzer.c'
All functions:
  Function list name: All functions
  Elements:
    - functionName:    LLVMFuzzerTestOneInput
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/qubesrpc_parse_fuzzer.c'
      linkageType:     externalLinkage
      functionLinenumber: 33
      functionDepth:   0
      returnType:      void
      argCount:        2
      argTypes:
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - data
        - size
      BBCount:         39
      ICount:          190
      EdgeCount:       42
      CyclomaticComplexity: 5
      functionsReached:
        - __assert_fail
        - destroy_qrexec_parsed_command
        - parse_qubes_rpc_command
        - strlen
      functionUses:    0
      BranchProfiles:
        - Branch String:   'qubesrpc_parse_fuzzer.c:35,9'
          Branch Sides:
            - BranchSide:      'qubesrpc_parse_fuzzer.c:36,9'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - parse_qubes_rpc_command
                - free
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
                - __assert_fail
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
            - BranchSide:      'qubesrpc_parse_fuzzer.c:37,12'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - parse_qubes_rpc_command
                - free
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
                - __assert_fail
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
        - Branch String:   'qubesrpc_parse_fuzzer.c:42,9'
          Branch Sides:
            - BranchSide:      'qubesrpc_parse_fuzzer.c:43,14'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
                - __assert_fail
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
            - BranchSide:      'qubesrpc_parse_fuzzer.c:47,5'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
                - __assert_fail
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
        - Branch String:   'qubesrpc_parse_fuzzer.c:47,5'
          Branch Sides:
            - BranchSide:      'qubesrpc_parse_fuzzer.c:47,5'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
                - __assert_fail
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
            - BranchSide:      'qubesrpc_parse_fuzzer.c:48,5'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
                - __assert_fail
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
        - Branch String:   'qubesrpc_parse_fuzzer.c:48,5'
          Branch Sides:
            - BranchSide:      'qubesrpc_parse_fuzzer.c:48,5'
              BranchSideFuncs:
                - destroy_qrexec_parsed_command
                - free
                - __assert_fail
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
            - BranchSide:      'qubesrpc_parse_fuzzer.c:49,9'
              BranchSideFuncs:
                - destroy_qrexec_parsed_command
                - free
                - __assert_fail
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
        - Branch String:   'qubesrpc_parse_fuzzer.c:49,9'
          Branch Sides:
            - BranchSide:      'qubesrpc_parse_fuzzer.c:50,9'
              BranchSideFuncs:
                - __assert_fail
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
            - BranchSide:      'qubesrpc_parse_fuzzer.c:56,35'
              BranchSideFuncs:
                - destroy_qrexec_parsed_command
                - free
        - Branch String:   'qubesrpc_parse_fuzzer.c:50,9'
          Branch Sides:
            - BranchSide:      'qubesrpc_parse_fuzzer.c:50,9'
              BranchSideFuncs:
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
            - BranchSide:      'qubesrpc_parse_fuzzer.c:51,9'
              BranchSideFuncs:
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
        - Branch String:   'qubesrpc_parse_fuzzer.c:51,9'
          Branch Sides:
            - BranchSide:      'qubesrpc_parse_fuzzer.c:51,9'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
            - BranchSide:      'qubesrpc_parse_fuzzer.c:52,9'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
        - Branch String:   'qubesrpc_parse_fuzzer.c:52,9'
          Branch Sides:
            - BranchSide:      'qubesrpc_parse_fuzzer.c:52,9'
              BranchSideFuncs:
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
            - BranchSide:      'qubesrpc_parse_fuzzer.c:53,9'
              BranchSideFuncs:
                - strlen
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
        - Branch String:   'qubesrpc_parse_fuzzer.c:53,9'
          Branch Sides:
            - BranchSide:      'qubesrpc_parse_fuzzer.c:53,9'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
            - BranchSide:      'qubesrpc_parse_fuzzer.c:54,9'
              BranchSideFuncs:
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __assert_fail
                - destroy_qrexec_parsed_command
                - free
        - Branch String:   'qubesrpc_parse_fuzzer.c:54,9'
          Branch Sides:
            - BranchSide:      'qubesrpc_parse_fuzzer.c:54,9'
              BranchSideFuncs:
                - destroy_qrexec_parsed_command
                - free
            - BranchSide:      'qubesrpc_parse_fuzzer.c:55,5'
              BranchSideFuncs:
                - destroy_qrexec_parsed_command
                - free
      Callsites:
        - Src:             'qubesrpc_parse_fuzzer.c:40,41'
          Dst:             parse_qubes_rpc_command
        - Src:             'qubesrpc_parse_fuzzer.c:47,5'
          Dst:             strlen
        - Src:             'qubesrpc_parse_fuzzer.c:47,5'
          Dst:             __assert_fail
        - Src:             'qubesrpc_parse_fuzzer.c:48,5'
          Dst:             strlen
        - Src:             'qubesrpc_parse_fuzzer.c:48,5'
          Dst:             __assert_fail
        - Src:             'qubesrpc_parse_fuzzer.c:50,9'
          Dst:             __assert_fail
        - Src:             'qubesrpc_parse_fuzzer.c:51,9'
          Dst:             __assert_fail
        - Src:             'qubesrpc_parse_fuzzer.c:52,9'
          Dst:             strlen
        - Src:             'qubesrpc_parse_fuzzer.c:52,9'
          Dst:             __assert_fail
        - Src:             'qubesrpc_parse_fuzzer.c:53,9'
          Dst:             strlen
        - Src:             'qubesrpc_parse_fuzzer.c:53,9'
          Dst:             strlen
        - Src:             'qubesrpc_parse_fuzzer.c:53,9'
          Dst:             __assert_fail
        - Src:             'qubesrpc_parse_fuzzer.c:54,9'
          Dst:             strlen
        - Src:             'qubesrpc_parse_fuzzer.c:54,9'
          Dst:             __assert_fail
        - Src:             'qubesrpc_parse_fuzzer.c:56,5'
          Dst:             destroy_qrexec_parsed_command
    - functionName:    strlen
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      size_t
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    13
      BranchProfiles:  []
      Callsites:       []
    - functionName:    __assert_fail
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      void
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - int
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    13
      BranchProfiles:  []
      Callsites:       []
    - functionName:    fuzz_exit
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/qubesrpc_parse_fuzzer.c'
      linkageType:     InternalLinkage
      functionLinenumber: 29
      functionDepth:   0
      returnType:      void
      argCount:        1
      argTypes:
        - int
      constantsTouched: []
      argNames:
        - status
      BBCount:         1
      ICount:          5
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached:
        - abort
      functionUses:    14
      BranchProfiles:  []
      Callsites:
        - Src:             'qubesrpc_parse_fuzzer.c:30,5'
          Dst:             abort
    - functionName:    abort
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      void
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    14
      BranchProfiles:  []
      Callsites:       []
    - functionName:    fuzz_read
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 106
      functionDepth:   0
      returnType:      size_t
      argCount:        3
      argTypes:
        - int
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - fd
        - buf
        - count
      BBCount:         20
      ICount:          113
      EdgeCount:       26
      CyclomaticComplexity: 8
      functionsReached:
        - file_input_eof
        - file_read
        - panic
      functionUses:    5
      BranchProfiles:
        - Branch String:   'fuzz.c:107,30'
          Branch Sides:
            - BranchSide:      'fuzz.c:107,40'
              BranchSideFuncs:
                - panic
                - __sanitizer_cov_trace_const_cmp8
                - file_input_eof
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - file_read
            - BranchSide:      'fuzz.c:108,9'
              BranchSideFuncs:
                - panic
                - __sanitizer_cov_trace_const_cmp8
                - file_input_eof
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - file_read
        - Branch String:   'fuzz.c:107,9'
          Branch Sides:
            - BranchSide:      'fuzz.c:108,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - file_input_eof
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - file_read
            - BranchSide:      'fuzz.c:110,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - file_input_eof
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - file_read
        - Branch String:   'fuzz.c:110,9'
          Branch Sides:
            - BranchSide:      'fuzz.c:111,9'
              BranchSideFuncs: []
            - BranchSide:      'fuzz.c:113,31'
              BranchSideFuncs:
                - file_input_eof
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - file_read
        - Branch String:   'fuzz.c:113,9'
          Branch Sides:
            - BranchSide:      'fuzz.c:114,9'
              BranchSideFuncs: []
            - BranchSide:      'fuzz.c:116,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - file_read
        - Branch String:   'fuzz.c:116,9'
          Branch Sides:
            - BranchSide:      'fuzz.c:117,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - file_read
            - BranchSide:      'fuzz.c:119,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - file_read
        - Branch String:   'fuzz.c:119,9'
          Branch Sides:
            - BranchSide:      'fuzz.c:120,26'
              BranchSideFuncs:
                - file_read
            - BranchSide:      'fuzz.c:122,12'
              BranchSideFuncs: []
      Callsites:
        - Src:             'fuzz.c:108,9'
          Dst:             panic
        - Src:             'fuzz.c:113,9'
          Dst:             file_input_eof
        - Src:             'fuzz.c:120,9'
          Dst:             file_read
    - functionName:    panic
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 17
      functionDepth:   0
      returnType:      void
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - msg
      BBCount:         1
      ICount:          8
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached:
        - abort
        - fprintf
      functionUses:    4
      BranchProfiles:  []
      Callsites:
        - Src:             'fuzz.c:18,5'
          Dst:             fprintf
        - Src:             'fuzz.c:19,5'
          Dst:             abort
    - functionName:    file_input_eof
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 29
      functionDepth:   0
      returnType:      bool
      argCount:        1
      argTypes:
        - 'struct.fuzz_file *'
      constantsTouched: []
      argNames:
        - file
      BBCount:         1
      ICount:          12
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
    - functionName:    file_read
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 22
      functionDepth:   0
      returnType:      void
      argCount:        3
      argTypes:
        - 'struct.fuzz_file *'
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - file
        - buf
        - count
      BBCount:         7
      ICount:          55
      EdgeCount:       7
      CyclomaticComplexity: 2
      functionsReached:
        - __assert_fail
      functionUses:    2
      BranchProfiles:
        - Branch String:   'fuzz.c:23,5'
          Branch Sides:
            - BranchSide:      'fuzz.c:23,5'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'fuzz.c:23,5'
              BranchSideFuncs:
                - __assert_fail
      Callsites:
        - Src:             'fuzz.c:23,5'
          Dst:             __assert_fail
    - functionName:    fprintf
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - 'struct._IO_FILE *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    6
      BranchProfiles:  []
      Callsites:       []
    - functionName:    fuzz_libvchan_buffer_space
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 102
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - 'struct.fuzz_file *'
      constantsTouched: []
      argNames:
        - file
      BBCount:         1
      ICount:          7
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    fuzz_libvchan_data_ready
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 98
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - 'struct.fuzz_file *'
      constantsTouched: []
      argNames:
        - file
      BBCount:         1
      ICount:          11
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
    - functionName:    fuzz_libvchan_is_open
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 94
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - 'struct.fuzz_file *'
      constantsTouched: []
      argNames:
        - file
      BBCount:         4
      ICount:          26
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:
        - Branch String:   'fuzz.c:95,28'
          Branch Sides:
            - BranchSide:      'fuzz.c:95,31'
              BranchSideFuncs: []
            - BranchSide:      'fuzz.c:95,28'
              BranchSideFuncs: []
      Callsites:       []
    - functionName:    fuzz_libvchan_fd_for_select
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 90
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - 'struct.fuzz_file *'
      constantsTouched: []
      argNames:
        - file
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
    - functionName:    fuzz_libvchan_close
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 85
      functionDepth:   0
      returnType:      void
      argCount:        1
      argTypes:
        - 'struct.fuzz_file *'
      constantsTouched: []
      argNames:
        - file
      BBCount:         1
      ICount:          13
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
    - functionName:    fuzz_libvchan_wait
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 81
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - 'struct.fuzz_file *'
      constantsTouched: []
      argNames:
        - file
      BBCount:         1
      ICount:          7
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    fuzz_libvchan_recv
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 77
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - 'struct.fuzz_file *'
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - file
        - data
        - size
      BBCount:         3
      ICount:          24
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - fuzz_libvchan_read
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'fuzz.c:78,12'
          Dst:             fuzz_libvchan_read
    - functionName:    fuzz_libvchan_read
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 61
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - 'struct.fuzz_file *'
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - file
        - data
        - size
      BBCount:         17
      ICount:          90
      EdgeCount:       22
      CyclomaticComplexity: 7
      functionsReached:
        - file_input_eof
        - file_read
        - panic
      functionUses:    2
      BranchProfiles:
        - Branch String:   'fuzz.c:62,26'
          Branch Sides:
            - BranchSide:      'fuzz.c:62,30'
              BranchSideFuncs:
                - panic
                - __sanitizer_cov_trace_const_cmp8
                - file_input_eof
                - __sanitizer_cov_trace_cmp8
                - file_read
            - BranchSide:      'fuzz.c:63,9'
              BranchSideFuncs:
                - panic
                - __sanitizer_cov_trace_const_cmp8
                - file_input_eof
                - __sanitizer_cov_trace_cmp8
                - file_read
        - Branch String:   'fuzz.c:62,9'
          Branch Sides:
            - BranchSide:      'fuzz.c:63,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - file_input_eof
                - __sanitizer_cov_trace_cmp8
                - file_read
            - BranchSide:      'fuzz.c:65,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - file_input_eof
                - __sanitizer_cov_trace_cmp8
                - file_read
        - Branch String:   'fuzz.c:65,9'
          Branch Sides:
            - BranchSide:      'fuzz.c:66,9'
              BranchSideFuncs: []
            - BranchSide:      'fuzz.c:68,24'
              BranchSideFuncs:
                - file_input_eof
                - __sanitizer_cov_trace_cmp8
                - file_read
        - Branch String:   'fuzz.c:68,9'
          Branch Sides:
            - BranchSide:      'fuzz.c:69,9'
              BranchSideFuncs: []
            - BranchSide:      'fuzz.c:71,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - file_read
        - Branch String:   'fuzz.c:71,9'
          Branch Sides:
            - BranchSide:      'fuzz.c:72,16'
              BranchSideFuncs:
                - file_read
            - BranchSide:      'fuzz.c:73,15'
              BranchSideFuncs:
                - file_read
      Callsites:
        - Src:             'fuzz.c:63,9'
          Dst:             panic
        - Src:             'fuzz.c:68,9'
          Dst:             file_input_eof
        - Src:             'fuzz.c:73,5'
          Dst:             file_read
    - functionName:    fuzz_libvchan_send
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 57
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - 'struct.fuzz_file *'
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - file
        - data
        - size
      BBCount:         3
      ICount:          27
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - fuzz_write
      functionUses:    3
      BranchProfiles:  []
      Callsites:
        - Src:             'fuzz.c:58,12'
          Dst:             fuzz_write
    - functionName:    fuzz_write
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 127
      functionDepth:   0
      returnType:      size_t
      argCount:        3
      argTypes:
        - int
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - fd
        - buf
        - count
      BBCount:         19
      ICount:          111
      EdgeCount:       24
      CyclomaticComplexity: 7
      functionsReached:
        - panic
      functionUses:    6
      BranchProfiles:
        - Branch String:   'fuzz.c:128,30'
          Branch Sides:
            - BranchSide:      'fuzz.c:128,40'
              BranchSideFuncs:
                - panic
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'fuzz.c:129,9'
              BranchSideFuncs:
                - panic
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'fuzz.c:128,9'
          Branch Sides:
            - BranchSide:      'fuzz.c:129,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      'fuzz.c:131,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'fuzz.c:131,9'
          Branch Sides:
            - BranchSide:      'fuzz.c:132,9'
              BranchSideFuncs: []
            - BranchSide:      'fuzz.c:135,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   'fuzz.c:135,5'
          Branch Sides:
            - BranchSide:      'fuzz.c:136,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      'fuzz.c:140,12'
              BranchSideFuncs: []
        - Branch String:   'fuzz.c:136,20'
          Branch Sides:
            - BranchSide:      'fuzz.c:136,49'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
            - BranchSide:      'fuzz.c:136,16'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
      Callsites:
        - Src:             'fuzz.c:129,9'
          Dst:             panic
    - functionName:    fuzz_libvchan_write
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 53
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - 'struct.fuzz_file *'
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - file
        - data
        - size
      BBCount:         3
      ICount:          27
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - fuzz_write
      functionUses:    1
      BranchProfiles:  []
      Callsites:
        - Src:             'fuzz.c:54,12'
          Dst:             fuzz_write
    - functionName:    fuzz_file_destroy
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 49
      functionDepth:   0
      returnType:      void
      argCount:        1
      argTypes:
        - 'struct.fuzz_file *'
      constantsTouched: []
      argNames:
        - file
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
    - functionName:    fuzz_file_create
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/fuzz.c'
      linkageType:     InternalLinkage
      functionLinenumber: 33
      functionDepth:   0
      returnType:      'struct.fuzz_file *'
      argCount:        3
      argTypes:
        - int
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - fd
        - input_data
        - input_size
      BBCount:         6
      ICount:          62
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - panic
      functionUses:    0
      BranchProfiles:
        - Branch String:   'fuzz.c:35,9'
          Branch Sides:
            - BranchSide:      'fuzz.c:35,9'
              BranchSideFuncs:
                - panic
            - BranchSide:      'fuzz.c:36,9'
              BranchSideFuncs:
                - panic
      Callsites:
        - Src:             'fuzz.c:36,9'
          Dst:             panic
    - functionName:    send_exit_code
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/remote.c'
      linkageType:     InternalLinkage
      functionLinenumber: 212
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - 'struct.fuzz_file *'
        - int
      constantsTouched: []
      argNames:
        - vchan
        - status
      BBCount:         8
      ICount:          54
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - fuzz_libvchan_send
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/remote.c:217,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:219,9'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/remote.c:221,23'
              BranchSideFuncs:
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
        - Branch String:   '../libqrexec/remote.c:221,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:223,9'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/remote.c:225,5'
              BranchSideFuncs: []
      Callsites:
        - Src:             '../libqrexec/remote.c:217,9'
          Dst:             fuzz_libvchan_send
        - Src:             '../libqrexec/remote.c:221,9'
          Dst:             fuzz_libvchan_send
    - functionName:    handle_input
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/remote.c'
      linkageType:     InternalLinkage
      functionLinenumber: 153
      functionDepth:   0
      returnType:      int
      argCount:        5
      argTypes:
        - 'struct.fuzz_file *'
        - int
        - int
        - int
        - 'struct.prefix_data *'
      constantsTouched: []
      argNames:
        - vchan
        - fd
        - msg_type
        - data_protocol_version
        - prefix_data
      BBCount:         44
      ICount:          262
      EdgeCount:       59
      CyclomaticComplexity: 17
      functionsReached:
        - __errno_location
        - fuzz_libvchan_buffer_space
        - fuzz_libvchan_send
        - fuzz_read
        - max_data_chunk_size
        - write_vchan_all
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/remote.c:161,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:163,9'
              BranchSideFuncs:
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      '../libqrexec/remote.c:167,16'
              BranchSideFuncs:
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   '../libqrexec/remote.c:168,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:169,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      '../libqrexec/remote.c:205,8'
              BranchSideFuncs:
                - free
        - Branch String:   '../libqrexec/remote.c:170,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:171,19'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      '../libqrexec/remote.c:172,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   '../libqrexec/remote.c:172,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:173,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/remote.c:179,24'
              BranchSideFuncs:
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/remote.c:173,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:174,23'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/remote.c:175,20'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/remote.c:183,25'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:183,28'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/remote.c:185,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/remote.c:183,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:184,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/remote.c:185,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/remote.c:185,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:0,0'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - free
            - BranchSide:      '../libqrexec/remote.c:186,21'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   '../libqrexec/remote.c:186,37'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:186,40'
              BranchSideFuncs:
                - free
            - BranchSide:      '../libqrexec/remote.c:187,24'
              BranchSideFuncs:
                - free
        - Branch String:   '../libqrexec/remote.c:186,21'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:187,24'
              BranchSideFuncs:
                - free
            - BranchSide:      '../libqrexec/remote.c:189,17'
              BranchSideFuncs:
                - free
        - Branch String:   '../libqrexec/remote.c:194,68'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:194,75'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/remote.c:197,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/remote.c:194,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:195,13'
              BranchSideFuncs:
                - free
            - BranchSide:      '../libqrexec/remote.c:197,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/remote.c:197,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:197,37'
              BranchSideFuncs:
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      '../libqrexec/remote.c:200,13'
              BranchSideFuncs:
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   '../libqrexec/remote.c:197,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:198,13'
              BranchSideFuncs:
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
            - BranchSide:      '../libqrexec/remote.c:200,13'
              BranchSideFuncs:
                - fuzz_libvchan_buffer_space
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_libvchan_send
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - write_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   '../libqrexec/remote.c:200,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:168,5'
              BranchSideFuncs:
                - free
            - BranchSide:      '../libqrexec/remote.c:201,16'
              BranchSideFuncs:
                - free
      Callsites:
        - Src:             '../libqrexec/remote.c:154,28'
          Dst:             max_data_chunk_size
        - Src:             '../libqrexec/remote.c:168,25'
          Dst:             fuzz_libvchan_buffer_space
        - Src:             '../libqrexec/remote.c:179,19'
          Dst:             fuzz_read
        - Src:             '../libqrexec/remote.c:183,28'
          Dst:             __errno_location
        - Src:             '../libqrexec/remote.c:186,21'
          Dst:             __errno_location
        - Src:             '../libqrexec/remote.c:186,40'
          Dst:             __errno_location
        - Src:             '../libqrexec/remote.c:194,13'
          Dst:             fuzz_libvchan_send
        - Src:             '../libqrexec/remote.c:197,21'
          Dst:             write_vchan_all
    - functionName:    max_data_chunk_size
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/libqrexec-utils.h'
      linkageType:     InternalLinkage
      functionLinenumber: 158
      functionDepth:   0
      returnType:      size_t
      argCount:        1
      argTypes:
        - int
      constantsTouched: []
      argNames:
        - protocol_version
      BBCount:         4
      ICount:          23
      EdgeCount:       4
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   '../libqrexec/libqrexec-utils.h:159,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/libqrexec-utils.h:160,9'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/libqrexec-utils.h:162,9'
              BranchSideFuncs: []
      Callsites:       []
    - functionName:    __errno_location
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'int *'
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    30
      BranchProfiles:  []
      Callsites:       []
    - functionName:    handle_remote_data
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/remote.c'
      linkageType:     InternalLinkage
      functionLinenumber: 38
      functionDepth:   0
      returnType:      int
      argCount:        8
      argTypes:
        - 'struct.fuzz_file *'
        - int
        - 'int *'
        - 'struct.buffer *'
        - int
        - bool
        - bool
        - bool
      constantsTouched: []
      argNames:
        - data_vchan
        - stdin_fd
        - status
        - stdin_buf
        - data_protocol_version
        - replace_chars_stdout
        - replace_chars_stderr
        - is_service
      BBCount:         64
      ICount:          336
      EdgeCount:       78
      CyclomaticComplexity: 16
      functionsReached:
        - __errno_location
        - do_replace_chars
        - flush_client_data
        - fuzz_libvchan_data_ready
        - fuzz_libvchan_recv
        - max_data_chunk_size
        - read_vchan_all
        - write_all
        - write_stdin
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/remote.c:46,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:48,13'
              BranchSideFuncs:
                - malloc
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:50,13'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/remote.c:53,13'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/remote.c:56,18'
              BranchSideFuncs:
                - malloc
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
        - Branch String:   '../libqrexec/remote.c:57,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:59,9'
              BranchSideFuncs:
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:62,5'
              BranchSideFuncs:
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
        - Branch String:   '../libqrexec/remote.c:62,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:63,27'
              BranchSideFuncs:
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:144,8'
              BranchSideFuncs:
                - free
        - Branch String:   '../libqrexec/remote.c:63,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:64,13'
              BranchSideFuncs:
                - free
            - BranchSide:      '../libqrexec/remote.c:65,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
        - Branch String:   '../libqrexec/remote.c:65,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:68,13'
              BranchSideFuncs:
                - free
            - BranchSide:      '../libqrexec/remote.c:70,29'
              BranchSideFuncs:
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
        - Branch String:   '../libqrexec/remote.c:70,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:71,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - free
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:73,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - free
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
        - Branch String:   '../libqrexec/remote.c:73,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:78,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:78,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:109,21'
              BranchSideFuncs:
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:123,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - free
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:140,20'
              BranchSideFuncs:
                - free
        - Branch String:   '../libqrexec/remote.c:78,81'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:79,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:84,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - do_replace_chars
        - Branch String:   '../libqrexec/remote.c:78,21'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:81,37'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:84,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - do_replace_chars
        - Branch String:   '../libqrexec/remote.c:84,21'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:86,21'
              BranchSideFuncs:
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:87,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - do_replace_chars
        - Branch String:   '../libqrexec/remote.c:87,21'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:88,24'
              BranchSideFuncs:
                - free
            - BranchSide:      '../libqrexec/remote.c:91,25'
              BranchSideFuncs:
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
        - Branch String:   '../libqrexec/remote.c:91,25'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:92,42'
              BranchSideFuncs:
                - do_replace_chars
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/remote.c:93,41'
              BranchSideFuncs:
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
        - Branch String:   '../libqrexec/remote.c:93,21'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:95,29'
              BranchSideFuncs:
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:97,32'
              BranchSideFuncs:
                - free
            - BranchSide:      '../libqrexec/remote.c:100,35'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - free
        - Branch String:   '../libqrexec/remote.c:100,50'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:100,53'
              BranchSideFuncs:
                - free
            - BranchSide:      '../libqrexec/remote.c:103,32'
              BranchSideFuncs:
                - free
        - Branch String:   '../libqrexec/remote.c:100,33'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:102,29'
              BranchSideFuncs:
                - free
            - BranchSide:      '../libqrexec/remote.c:103,32'
              BranchSideFuncs:
                - free
        - Branch String:   '../libqrexec/remote.c:109,21'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:111,21'
              BranchSideFuncs:
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:114,21'
              BranchSideFuncs:
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - do_replace_chars
        - Branch String:   '../libqrexec/remote.c:114,21'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:115,38'
              BranchSideFuncs:
                - do_replace_chars
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:117,35'
              BranchSideFuncs:
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
        - Branch String:   '../libqrexec/remote.c:117,21'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:120,17'
              BranchSideFuncs:
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:121,17'
              BranchSideFuncs:
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
        - Branch String:   '../libqrexec/remote.c:123,21'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:125,21'
              BranchSideFuncs:
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - free
                - fuzz_libvchan_recv
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - read_vchan_all
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - write_all
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_stdin
                - __sanitizer_cov_trace_switch
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - do_replace_chars
            - BranchSide:      '../libqrexec/remote.c:130,25'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - free
        - Branch String:   '../libqrexec/remote.c:130,21'
          Branch Sides:
            - BranchSide:      '../libqrexec/remote.c:133,22'
              BranchSideFuncs:
                - free
            - BranchSide:      '../libqrexec/remote.c:135,28'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - free
      Callsites:
        - Src:             '../libqrexec/remote.c:40,28'
          Dst:             max_data_chunk_size
        - Src:             '../libqrexec/remote.c:46,13'
          Dst:             flush_client_data
        - Src:             '../libqrexec/remote.c:62,12'
          Dst:             fuzz_libvchan_data_ready
        - Src:             '../libqrexec/remote.c:63,13'
          Dst:             fuzz_libvchan_recv
        - Src:             '../libqrexec/remote.c:70,14'
          Dst:             read_vchan_all
        - Src:             '../libqrexec/remote.c:92,25'
          Dst:             do_replace_chars
        - Src:             '../libqrexec/remote.c:93,29'
          Dst:             write_stdin
        - Src:             '../libqrexec/remote.c:100,35'
          Dst:             __errno_location
        - Src:             '../libqrexec/remote.c:100,53'
          Dst:             __errno_location
        - Src:             '../libqrexec/remote.c:115,21'
          Dst:             do_replace_chars
        - Src:             '../libqrexec/remote.c:117,22'
          Dst:             write_all
    - functionName:    fork_and_flush_stdin
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/write-stdin.c'
      linkageType:     InternalLinkage
      functionLinenumber: 100
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - int
        - 'struct.buffer *'
      constantsTouched: []
      argNames:
        - fd
        - buffer
      BBCount:         6
      ICount:          36
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - buffer_len
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/write-stdin.c:102,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/write-stdin.c:103,9'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/write-stdin.c:111,13'
              BranchSideFuncs: []
      Callsites:
        - Src:             '../libqrexec/write-stdin.c:102,10'
          Dst:             buffer_len
    - functionName:    write_stdin
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/write-stdin.c'
      linkageType:     InternalLinkage
      functionLinenumber: 66
      functionDepth:   0
      returnType:      int
      argCount:        4
      argTypes:
        - int
        - 'char *'
        - int
        - 'struct.buffer *'
      constantsTouched: []
      argNames:
        - fd
        - data
        - len
        - buffer
      BBCount:         15
      ICount:          111
      EdgeCount:       19
      CyclomaticComplexity: 6
      functionsReached:
        - __errno_location
        - buffer_append
        - buffer_len
        - fuzz_exit
        - fuzz_write
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/write-stdin.c:70,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/write-stdin.c:71,23'
              BranchSideFuncs:
                - buffer_append
            - BranchSide:      '../libqrexec/write-stdin.c:74,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - fuzz_write
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - buffer_append
                - fuzz_exit
        - Branch String:   '../libqrexec/write-stdin.c:74,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/write-stdin.c:75,21'
              BranchSideFuncs:
                - fuzz_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - buffer_append
                - fuzz_exit
            - BranchSide:      '../libqrexec/write-stdin.c:91,5'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/write-stdin.c:76,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/write-stdin.c:78,13'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/write-stdin.c:80,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - fuzz_write
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_exit
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - buffer_append
        - Branch String:   '../libqrexec/write-stdin.c:80,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/write-stdin.c:81,17'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - buffer_append
            - BranchSide:      '../libqrexec/write-stdin.c:89,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - fuzz_write
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - buffer_append
                - fuzz_exit
        - Branch String:   '../libqrexec/write-stdin.c:81,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/write-stdin.c:82,17'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/write-stdin.c:84,27'
              BranchSideFuncs:
                - buffer_append
      Callsites:
        - Src:             '../libqrexec/write-stdin.c:70,9'
          Dst:             buffer_len
        - Src:             '../libqrexec/write-stdin.c:71,9'
          Dst:             buffer_append
        - Src:             '../libqrexec/write-stdin.c:75,15'
          Dst:             fuzz_write
        - Src:             '../libqrexec/write-stdin.c:78,13'
          Dst:             fuzz_exit
        - Src:             '../libqrexec/write-stdin.c:81,17'
          Dst:             __errno_location
        - Src:             '../libqrexec/write-stdin.c:84,13'
          Dst:             buffer_append
    - functionName:    flush_client_data
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/write-stdin.c'
      linkageType:     InternalLinkage
      functionLinenumber: 36
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - int
        - 'struct.buffer *'
      constantsTouched: []
      argNames:
        - fd
        - buffer
      BBCount:         13
      ICount:          78
      EdgeCount:       17
      CyclomaticComplexity: 6
      functionsReached:
        - __errno_location
        - buffer_data
        - buffer_len
        - buffer_remove
        - fuzz_write
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/write-stdin.c:37,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/write-stdin.c:38,9'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/write-stdin.c:41,5'
              BranchSideFuncs:
                - buffer_len
                - __sanitizer_cov_trace_const_cmp4
                - buffer_data
                - fuzz_write
                - buffer_remove
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/write-stdin.c:43,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/write-stdin.c:44,13'
              BranchSideFuncs:
                - buffer_data
                - fuzz_write
                - buffer_remove
                - buffer_len
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/write-stdin.c:46,21'
              BranchSideFuncs:
                - buffer_data
                - fuzz_write
                - buffer_remove
                - buffer_len
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/write-stdin.c:47,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/write-stdin.c:48,17'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/write-stdin.c:56,23'
              BranchSideFuncs:
                - buffer_remove
                - buffer_len
                - __sanitizer_cov_trace_const_cmp4
                - buffer_data
                - fuzz_write
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/write-stdin.c:48,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/write-stdin.c:49,17'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/write-stdin.c:51,17'
              BranchSideFuncs: []
      Callsites:
        - Src:             '../libqrexec/write-stdin.c:42,15'
          Dst:             buffer_len
        - Src:             '../libqrexec/write-stdin.c:46,25'
          Dst:             buffer_data
        - Src:             '../libqrexec/write-stdin.c:46,15'
          Dst:             fuzz_write
        - Src:             '../libqrexec/write-stdin.c:48,17'
          Dst:             __errno_location
        - Src:             '../libqrexec/write-stdin.c:56,9'
          Dst:             buffer_remove
    - functionName:    qubesd_call
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/ioall.c'
      linkageType:     InternalLinkage
      functionLinenumber: 252
      functionDepth:   0
      returnType:      'char *'
      argCount:        4
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
        - 'size_t *'
      constantsTouched: []
      argNames:
        - dest
        - method
        - arg
        - len
      BBCount:         29
      ICount:          239
      EdgeCount:       39
      CyclomaticComplexity: 12
      functionsReached:
        - __errno_location
        - close
        - connect
        - qubes_read_all_to_malloc
        - qubes_sendmsg_all
        - shutdown
        - socket
        - strlen
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/ioall.c:257,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:258,14'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - strlen
                - strlen
                - llvm.memcpy.p0i8.p0i8.i64
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - connect
                - __sanitizer_cov_trace_const_cmp4
                - qubes_sendmsg_all
                - __sanitizer_cov_trace_const_cmp4
                - close
                - shutdown
                - __sanitizer_cov_trace_const_cmp4
                - qubes_read_all_to_malloc
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - __sanitizer_cov_trace_cmp8
                - free
                - __errno_location
                - __errno_location
                - strlen
            - BranchSide:      '../libqrexec/ioall.c:263,14'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - strlen
                - strlen
                - llvm.memcpy.p0i8.p0i8.i64
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - connect
                - __sanitizer_cov_trace_const_cmp4
                - qubes_sendmsg_all
                - __sanitizer_cov_trace_const_cmp4
                - close
                - shutdown
                - __sanitizer_cov_trace_const_cmp4
                - qubes_read_all_to_malloc
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - __sanitizer_cov_trace_cmp8
                - free
                - __errno_location
                - __errno_location
                - strlen
        - Branch String:   '../libqrexec/ioall.c:272,39'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:272,52'
              BranchSideFuncs:
                - strlen
                - strlen
                - llvm.memcpy.p0i8.p0i8.i64
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - connect
                - __sanitizer_cov_trace_const_cmp4
                - qubes_sendmsg_all
                - __sanitizer_cov_trace_const_cmp4
                - close
                - shutdown
                - __sanitizer_cov_trace_const_cmp4
                - qubes_read_all_to_malloc
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - __sanitizer_cov_trace_cmp8
                - free
                - __errno_location
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:272,9'
              BranchSideFuncs:
                - strlen
                - llvm.memcpy.p0i8.p0i8.i64
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - connect
                - __sanitizer_cov_trace_const_cmp4
                - qubes_sendmsg_all
                - __sanitizer_cov_trace_const_cmp4
                - close
                - shutdown
                - __sanitizer_cov_trace_const_cmp4
                - qubes_read_all_to_malloc
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - __sanitizer_cov_trace_cmp8
                - free
                - __errno_location
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:283,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:284,13'
              BranchSideFuncs:
                - __errno_location
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - close
            - BranchSide:      '../libqrexec/ioall.c:290,17'
              BranchSideFuncs:
                - connect
                - __sanitizer_cov_trace_const_cmp4
                - qubes_sendmsg_all
                - __sanitizer_cov_trace_const_cmp4
                - close
                - shutdown
                - __sanitizer_cov_trace_const_cmp4
                - qubes_read_all_to_malloc
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - __sanitizer_cov_trace_cmp8
                - free
        - Branch String:   '../libqrexec/ioall.c:290,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:294,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - close
            - BranchSide:      '../libqrexec/ioall.c:297,25'
              BranchSideFuncs:
                - qubes_sendmsg_all
                - __sanitizer_cov_trace_const_cmp4
                - close
                - shutdown
                - __sanitizer_cov_trace_const_cmp4
                - qubes_read_all_to_malloc
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - __sanitizer_cov_trace_cmp8
                - free
        - Branch String:   '../libqrexec/ioall.c:307,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:308,9'
              BranchSideFuncs:
                - shutdown
                - __sanitizer_cov_trace_const_cmp4
                - qubes_read_all_to_malloc
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - __sanitizer_cov_trace_cmp8
                - free
            - BranchSide:      '../libqrexec/ioall.c:310,18'
              BranchSideFuncs:
                - shutdown
                - __sanitizer_cov_trace_const_cmp4
                - qubes_read_all_to_malloc
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - __sanitizer_cov_trace_cmp8
                - free
        - Branch String:   '../libqrexec/ioall.c:310,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:312,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - close
            - BranchSide:      '../libqrexec/ioall.c:317,36'
              BranchSideFuncs:
                - qubes_read_all_to_malloc
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - __sanitizer_cov_trace_cmp8
                - free
        - Branch String:   '../libqrexec/ioall.c:318,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:318,18'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - strlen
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - close
                - free
            - BranchSide:      '../libqrexec/ioall.c:318,48'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - close
        - Branch String:   '../libqrexec/ioall.c:318,26'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:318,36'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
                - close
            - BranchSide:      '../libqrexec/ioall.c:323,10'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
                - close
        - Branch String:   '../libqrexec/ioall.c:318,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:318,48'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
                - close
            - BranchSide:      '../libqrexec/ioall.c:323,10'
              BranchSideFuncs:
                - free
                - __sanitizer_cov_trace_const_cmp4
                - close
        - Branch String:   '../libqrexec/ioall.c:328,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:328,9'
              BranchSideFuncs:
                - close
            - BranchSide:      '../libqrexec/ioall.c:329,15'
              BranchSideFuncs:
                - close
      Callsites:
        - Src:             '../libqrexec/ioall.c:270,42'
          Dst:             strlen
        - Src:             '../libqrexec/ioall.c:272,45'
          Dst:             strlen
        - Src:             '../libqrexec/ioall.c:274,48'
          Dst:             strlen
        - Src:             '../libqrexec/ioall.c:282,12'
          Dst:             socket
        - Src:             '../libqrexec/ioall.c:284,17'
          Dst:             __errno_location
        - Src:             '../libqrexec/ioall.c:286,9'
          Dst:             __errno_location
        - Src:             '../libqrexec/ioall.c:290,9'
          Dst:             connect
        - Src:             '../libqrexec/ioall.c:307,10'
          Dst:             qubes_sendmsg_all
        - Src:             '../libqrexec/ioall.c:310,9'
          Dst:             shutdown
        - Src:             '../libqrexec/ioall.c:317,11'
          Dst:             qubes_read_all_to_malloc
        - Src:             '../libqrexec/ioall.c:318,29'
          Dst:             strlen
        - Src:             '../libqrexec/ioall.c:329,9'
          Dst:             close
    - functionName:    socket
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - int
        - int
        - int
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
    - functionName:    connect
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - int
        - 'struct.sockaddr *'
        - int
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
    - functionName:    qubes_sendmsg_all
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/ioall.c'
      linkageType:     InternalLinkage
      functionLinenumber: 221
      functionDepth:   0
      returnType:      bool
      argCount:        2
      argTypes:
        - 'struct.msghdr *'
        - int
      constantsTouched: []
      argNames:
        - msg
        - sock
      BBCount:         30
      ICount:          174
      EdgeCount:       37
      CyclomaticComplexity: 9
      functionsReached:
        - __assert_fail
        - __errno_location
        - sendmsg
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/ioall.c:222,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:223,37'
              BranchSideFuncs:
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:248,5'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/ioall.c:224,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:225,27'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
            - BranchSide:      '../libqrexec/ioall.c:234,39'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
        - Branch String:   '../libqrexec/ioall.c:226,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:226,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
            - BranchSide:      '../libqrexec/ioall.c:227,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
        - Branch String:   '../libqrexec/ioall.c:227,29'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:227,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:228,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:227,49'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:227,52'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:228,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:227,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:228,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:230,21'
              BranchSideFuncs:
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:235,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:222,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:236,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:236,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:236,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
            - BranchSide:      '../libqrexec/ioall.c:237,37'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
        - Branch String:   '../libqrexec/ioall.c:238,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:239,32'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:243,29'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - sendmsg
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __assert_fail
      Callsites:
        - Src:             '../libqrexec/ioall.c:223,29'
          Dst:             sendmsg
        - Src:             '../libqrexec/ioall.c:225,27'
          Dst:             __errno_location
        - Src:             '../libqrexec/ioall.c:226,13'
          Dst:             __assert_fail
        - Src:             '../libqrexec/ioall.c:230,13'
          Dst:             __errno_location
        - Src:             '../libqrexec/ioall.c:236,13'
          Dst:             __assert_fail
    - functionName:    shutdown
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - int
        - int
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    qubes_read_all_to_malloc
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/ioall.c'
      linkageType:     InternalLinkage
      functionLinenumber: 103
      functionDepth:   0
      returnType:      'char *'
      argCount:        4
      argTypes:
        - int
        - size_t
        - size_t
        - 'size_t *'
      constantsTouched: []
      argNames:
        - fd
        - initial_buffer_size
        - max_bytes
        - len
      BBCount:         40
      ICount:          250
      EdgeCount:       50
      CyclomaticComplexity: 12
      functionsReached:
        - __errno_location
        - abort
        - close
        - fuzz_read
        - realloc
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/ioall.c:109,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:114,9'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/ioall.c:116,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - malloc
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - close
                - free
                - __errno_location
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
                - abort
                - abort
        - Branch String:   '../libqrexec/ioall.c:116,22'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:116,25'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/ioall.c:121,9'
              BranchSideFuncs:
                - abort
        - Branch String:   '../libqrexec/ioall.c:116,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:121,9'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/ioall.c:123,24'
              BranchSideFuncs:
                - malloc
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - close
                - free
                - __errno_location
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
                - abort
        - Branch String:   '../libqrexec/ioall.c:124,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:126,9'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/ioall.c:128,6'
              BranchSideFuncs:
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - close
                - free
                - __errno_location
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
        - Branch String:   '../libqrexec/ioall.c:132,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:134,21'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - close
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - free
                - __errno_location
                - abort
                - abort
            - BranchSide:      '../libqrexec/ioall.c:145,53'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - close
                - abort
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - free
                - __errno_location
                - abort
        - Branch String:   '../libqrexec/ioall.c:135,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:136,17'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/ioall.c:137,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - close
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - free
                - __errno_location
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - abort
        - Branch String:   '../libqrexec/ioall.c:137,28'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:137,31'
              BranchSideFuncs:
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - close
                - free
                - __errno_location
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
            - BranchSide:      '../libqrexec/ioall.c:138,17'
              BranchSideFuncs:
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - close
                - free
                - __errno_location
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
        - Branch String:   '../libqrexec/ioall.c:137,43'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:137,46'
              BranchSideFuncs:
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - close
                - free
                - __errno_location
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
            - BranchSide:      '../libqrexec/ioall.c:138,17'
              BranchSideFuncs:
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - close
                - free
                - __errno_location
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
        - Branch String:   '../libqrexec/ioall.c:137,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:138,17'
              BranchSideFuncs:
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - close
                - free
                - __errno_location
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
            - BranchSide:      '../libqrexec/ioall.c:140,18'
              BranchSideFuncs:
                - free
                - __errno_location
                - close
        - Branch String:   '../libqrexec/ioall.c:146,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:148,13'
              BranchSideFuncs:
                - close
            - BranchSide:      '../libqrexec/ioall.c:152,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - close
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - free
                - __errno_location
                - abort
        - Branch String:   '../libqrexec/ioall.c:152,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:153,13'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/ioall.c:154,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - abort
                - close
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - free
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:154,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:156,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - abort
                - close
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
                - free
                - __errno_location
                - free
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:192,19'
              BranchSideFuncs:
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - close
                - free
                - __errno_location
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
        - Branch String:   '../libqrexec/ioall.c:156,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:159,22'
              BranchSideFuncs:
                - free
                - __errno_location
                - close
            - BranchSide:      '../libqrexec/ioall.c:165,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - realloc
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - free
                - __errno_location
                - close
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
                - free
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:165,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:166,29'
              BranchSideFuncs:
                - realloc
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - free
                - __errno_location
                - close
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
                - free
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:168,28'
              BranchSideFuncs:
                - realloc
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - free
                - __errno_location
                - close
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
                - free
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:170,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:178,22'
              BranchSideFuncs:
                - free
                - __errno_location
                - close
            - BranchSide:      '../libqrexec/ioall.c:187,23'
              BranchSideFuncs:
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - __sanitizer_cov_trace_cmp8
                - realloc
                - free
                - __errno_location
                - close
                - free
                - __errno_location
                - abort
                - __errno_location
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - free
                - __errno_location
                - abort
      Callsites:
        - Src:             '../libqrexec/ioall.c:114,9'
          Dst:             abort
        - Src:             '../libqrexec/ioall.c:121,9'
          Dst:             abort
        - Src:             '../libqrexec/ioall.c:126,9'
          Dst:             abort
        - Src:             '../libqrexec/ioall.c:131,23'
          Dst:             fuzz_read
        - Src:             '../libqrexec/ioall.c:134,21'
          Dst:             __errno_location
        - Src:             '../libqrexec/ioall.c:136,17'
          Dst:             abort
        - Src:             '../libqrexec/ioall.c:141,13'
          Dst:             __errno_location
        - Src:             '../libqrexec/ioall.c:153,13'
          Dst:             abort
        - Src:             '../libqrexec/ioall.c:160,17'
          Dst:             __errno_location
        - Src:             '../libqrexec/ioall.c:169,29'
          Dst:             realloc
        - Src:             '../libqrexec/ioall.c:179,17'
          Dst:             __errno_location
        - Src:             '../libqrexec/ioall.c:194,5'
          Dst:             close
    - functionName:    close
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - int
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    14
      BranchProfiles:  []
      Callsites:       []
    - functionName:    realloc
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    sendmsg
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      size_t
      argCount:        3
      argTypes:
        - int
        - 'struct.msghdr *'
        - int
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    copy_fd_all
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/ioall.c'
      linkageType:     InternalLinkage
      functionLinenumber: 199
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - int
        - int
      constantsTouched: []
      argNames:
        - fdout
        - fdin
      BBCount:         17
      ICount:          83
      EdgeCount:       22
      CyclomaticComplexity: 7
      functionsReached:
        - __errno_location
        - fuzz_read
        - write_all
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/ioall.c:204,23'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:204,26'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_all
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/ioall.c:206,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_all
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:204,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:205,13'
              BranchSideFuncs:
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_all
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:206,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_all
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:206,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:207,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - write_all
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:208,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - write_all
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:208,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:210,13'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/ioall.c:212,24'
              BranchSideFuncs:
                - write_all
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:212,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:202,5'
              BranchSideFuncs:
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - write_all
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:214,13'
              BranchSideFuncs: []
      Callsites:
        - Src:             '../libqrexec/ioall.c:203,15'
          Dst:             fuzz_read
        - Src:             '../libqrexec/ioall.c:204,26'
          Dst:             __errno_location
        - Src:             '../libqrexec/ioall.c:212,14'
          Dst:             write_all
    - functionName:    write_all
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/ioall.c'
      linkageType:     InternalLinkage
      functionLinenumber: 57
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - int
        - 'char *'
        - int
      constantsTouched: []
      argNames:
        - fd
        - buf
        - size
      BBCount:         14
      ICount:          86
      EdgeCount:       18
      CyclomaticComplexity: 6
      functionsReached:
        - __errno_location
        - fuzz_write
      functionUses:    2
      BranchProfiles:
        - Branch String:   '../libqrexec/ioall.c:60,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:61,21'
              BranchSideFuncs:
                - fuzz_write
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:70,5'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/ioall.c:62,23'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:62,26'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_cmp4
                - fuzz_write
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/ioall.c:64,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - fuzz_write
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:62,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:63,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - fuzz_write
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:64,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - fuzz_write
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:64,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:65,13'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/ioall.c:67,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - fuzz_write
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
      Callsites:
        - Src:             '../libqrexec/ioall.c:61,15'
          Dst:             fuzz_write
        - Src:             '../libqrexec/ioall.c:62,26'
          Dst:             __errno_location
    - functionName:    read_all
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/ioall.c'
      linkageType:     InternalLinkage
      functionLinenumber: 74
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - int
        - 'char *'
        - int
      constantsTouched: []
      argNames:
        - fd
        - buf
        - size
      BBCount:         22
      ICount:          119
      EdgeCount:       29
      CyclomaticComplexity: 9
      functionsReached:
        - __errno_location
        - fuzz_read
        - set_block
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/ioall.c:77,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:78,20'
              BranchSideFuncs:
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - set_block
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:98,5'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/ioall.c:79,23'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:79,26'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - set_block
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:81,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - set_block
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:79,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:80,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - set_block
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:81,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - set_block
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   '../libqrexec/ioall.c:81,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:82,13'
              BranchSideFuncs:
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:86,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - set_block
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/ioall.c:86,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:87,17'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/ioall.c:91,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
                - set_block
        - Branch String:   '../libqrexec/ioall.c:87,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:89,13'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/ioall.c:89,13'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/ioall.c:91,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:93,23'
              BranchSideFuncs:
                - set_block
                - __sanitizer_cov_trace_cmp4
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
            - BranchSide:      '../libqrexec/ioall.c:95,21'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - set_block
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __errno_location
      Callsites:
        - Src:             '../libqrexec/ioall.c:78,15'
          Dst:             fuzz_read
        - Src:             '../libqrexec/ioall.c:79,26'
          Dst:             __errno_location
        - Src:             '../libqrexec/ioall.c:82,13'
          Dst:             __errno_location
        - Src:             '../libqrexec/ioall.c:87,17'
          Dst:             __errno_location
        - Src:             '../libqrexec/ioall.c:93,13'
          Dst:             set_block
    - functionName:    set_block
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/ioall.c'
      linkageType:     InternalLinkage
      functionLinenumber: 49
      functionDepth:   0
      returnType:      void
      argCount:        1
      argTypes:
        - int
      constantsTouched: []
      argNames:
        - fd
      BBCount:         6
      ICount:          36
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - fcntl
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/ioall.c:51,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:52,9'
              BranchSideFuncs:
                - fcntl
            - BranchSide:      '../libqrexec/ioall.c:53,11'
              BranchSideFuncs:
                - fcntl
      Callsites:
        - Src:             '../libqrexec/ioall.c:50,14'
          Dst:             fcntl
        - Src:             '../libqrexec/ioall.c:53,5'
          Dst:             fcntl
    - functionName:    fcntl
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - int
        - int
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
    - functionName:    set_nonblock
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/ioall.c'
      linkageType:     InternalLinkage
      functionLinenumber: 39
      functionDepth:   0
      returnType:      void
      argCount:        1
      argTypes:
        - int
      constantsTouched: []
      argNames:
        - fd
      BBCount:         11
      ICount:          58
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - __errno_location
        - abort
        - fcntl
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/ioall.c:41,16'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:41,19'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - fcntl
                - abort
            - BranchSide:      '../libqrexec/ioall.c:43,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - fcntl
        - Branch String:   '../libqrexec/ioall.c:41,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:42,9'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/ioall.c:43,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - fcntl
        - Branch String:   '../libqrexec/ioall.c:43,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/ioall.c:44,9'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/ioall.c:45,11'
              BranchSideFuncs:
                - fcntl
      Callsites:
        - Src:             '../libqrexec/ioall.c:40,14'
          Dst:             fcntl
        - Src:             '../libqrexec/ioall.c:41,19'
          Dst:             __errno_location
        - Src:             '../libqrexec/ioall.c:42,9'
          Dst:             abort
        - Src:             '../libqrexec/ioall.c:45,5'
          Dst:             fcntl
    - functionName:    read_vchan_all
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/txrx-vchan.c'
      linkageType:     InternalLinkage
      functionLinenumber: 66
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - 'struct.fuzz_file *'
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - vchan
        - data
        - size
      BBCount:         9
      ICount:          64
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - fuzz_libvchan_read
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/txrx-vchan.c:71,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/txrx-vchan.c:72,29'
              BranchSideFuncs:
                - fuzz_libvchan_read
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      '../libqrexec/txrx-vchan.c:77,5'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/txrx-vchan.c:73,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/txrx-vchan.c:74,13'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/txrx-vchan.c:75,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - fuzz_libvchan_read
      Callsites:
        - Src:             '../libqrexec/txrx-vchan.c:72,15'
          Dst:             fuzz_libvchan_read
    - functionName:    write_vchan_all
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/txrx-vchan.c'
      linkageType:     InternalLinkage
      functionLinenumber: 52
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - 'struct.fuzz_file *'
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - vchan
        - data
        - size
      BBCount:         9
      ICount:          64
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - fuzz_libvchan_write
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/txrx-vchan.c:57,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/txrx-vchan.c:58,30'
              BranchSideFuncs:
                - fuzz_libvchan_write
                - __sanitizer_cov_trace_cmp8
            - BranchSide:      '../libqrexec/txrx-vchan.c:63,5'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/txrx-vchan.c:59,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/txrx-vchan.c:60,13'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/txrx-vchan.c:61,16'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp8
                - fuzz_libvchan_write
      Callsites:
        - Src:             '../libqrexec/txrx-vchan.c:58,15'
          Dst:             fuzz_libvchan_write
    - functionName:    ppoll_vchan
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/txrx-vchan.c'
      linkageType:     InternalLinkage
      functionLinenumber: 33
      functionDepth:   0
      returnType:      int
      argCount:        5
      argTypes:
        - 'struct.fuzz_file *'
        - 'struct.pollfd *'
        - size_t
        - 'struct.timespec *'
        - 'struct.__sigset_t *'
      constantsTouched: []
      argNames:
        - ctrl
        - fds
        - nfds
        - timeout
        - sigmask
      BBCount:         15
      ICount:          97
      EdgeCount:       18
      CyclomaticComplexity: 5
      functionsReached:
        - __assert_fail
        - fuzz_libvchan_data_ready
        - fuzz_libvchan_wait
        - ppoll
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/txrx-vchan.c:37,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/txrx-vchan.c:37,5'
              BranchSideFuncs:
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_wait
                - ppoll
            - BranchSide:      '../libqrexec/txrx-vchan.c:38,29'
              BranchSideFuncs:
                - fuzz_libvchan_data_ready
                - __sanitizer_cov_trace_const_cmp4
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_wait
                - ppoll
        - Branch String:   '../libqrexec/txrx-vchan.c:38,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/txrx-vchan.c:40,21'
              BranchSideFuncs:
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_wait
            - BranchSide:      '../libqrexec/txrx-vchan.c:42,21'
              BranchSideFuncs:
                - ppoll
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_wait
        - Branch String:   '../libqrexec/txrx-vchan.c:46,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/txrx-vchan.c:46,20'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - fuzz_libvchan_wait
            - BranchSide:      '../libqrexec/txrx-vchan.c:46,17'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/txrx-vchan.c:46,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/txrx-vchan.c:46,9'
              BranchSideFuncs:
                - fuzz_libvchan_wait
            - BranchSide:      '../libqrexec/txrx-vchan.c:47,23'
              BranchSideFuncs:
                - fuzz_libvchan_wait
      Callsites:
        - Src:             '../libqrexec/txrx-vchan.c:37,5'
          Dst:             __assert_fail
        - Src:             '../libqrexec/txrx-vchan.c:38,9'
          Dst:             fuzz_libvchan_data_ready
        - Src:             '../libqrexec/txrx-vchan.c:40,15'
          Dst:             ppoll
        - Src:             '../libqrexec/txrx-vchan.c:42,15'
          Dst:             ppoll
        - Src:             '../libqrexec/txrx-vchan.c:47,9'
          Dst:             fuzz_libvchan_wait
    - functionName:    ppoll
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        4
      argTypes:
        - 'struct.pollfd *'
        - size_t
        - 'struct.timespec *'
        - 'struct.__sigset_t *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
    - functionName:    buffer_data
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/buffer.c'
      linkageType:     InternalLinkage
      functionLinenumber: 125
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'struct.buffer *'
      constantsTouched: []
      argNames:
        - b
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    buffer_len
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/buffer.c'
      linkageType:     InternalLinkage
      functionLinenumber: 120
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - 'struct.buffer *'
      constantsTouched: []
      argNames:
        - b
      BBCount:         1
      ICount:          10
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
    - functionName:    buffer_remove
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/buffer.c'
      linkageType:     InternalLinkage
      functionLinenumber: 102
      functionDepth:   0
      returnType:      void
      argCount:        2
      argTypes:
        - 'struct.buffer *'
        - int
      constantsTouched: []
      argNames:
        - b
        - len
      BBCount:         11
      ICount:          84
      EdgeCount:       13
      CyclomaticComplexity: 4
      functionsReached:
        - buffer_free
        - fuzz_exit
        - limited_malloc
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/buffer.c:105,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:105,20'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/buffer.c:107,9'
              BranchSideFuncs:
                - fuzz_exit
        - Branch String:   '../libqrexec/buffer.c:105,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:107,9'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/buffer.c:109,15'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - buffer_free
                - limited_malloc
                - llvm.memcpy.p0i8.p0i8.i64
        - Branch String:   '../libqrexec/buffer.c:110,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:110,9'
              BranchSideFuncs:
                - limited_malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - buffer_free
            - BranchSide:      '../libqrexec/buffer.c:111,32'
              BranchSideFuncs:
                - limited_malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - buffer_free
      Callsites:
        - Src:             '../libqrexec/buffer.c:107,9'
          Dst:             fuzz_exit
        - Src:             '../libqrexec/buffer.c:111,17'
          Dst:             limited_malloc
        - Src:             '../libqrexec/buffer.c:114,5'
          Dst:             buffer_free
    - functionName:    limited_malloc
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/buffer.c'
      linkageType:     InternalLinkage
      functionLinenumber: 31
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - int
      constantsTouched: []
      argNames:
        - len
      BBCount:         12
      ICount:          61
      EdgeCount:       14
      CyclomaticComplexity: 4
      functionsReached:
        - fuzz_exit
      functionUses:    2
      BranchProfiles:
        - Branch String:   '../libqrexec/buffer.c:33,60'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:34,10'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/buffer.c:37,9'
              BranchSideFuncs:
                - fuzz_exit
        - Branch String:   '../libqrexec/buffer.c:34,36'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:34,40'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/buffer.c:37,9'
              BranchSideFuncs:
                - fuzz_exit
        - Branch String:   '../libqrexec/buffer.c:33,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:37,9'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/buffer.c:39,26'
              BranchSideFuncs:
                - malloc
                - fuzz_exit
        - Branch String:   '../libqrexec/buffer.c:40,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:42,9'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/buffer.c:44,12'
              BranchSideFuncs: []
      Callsites:
        - Src:             '../libqrexec/buffer.c:37,9'
          Dst:             fuzz_exit
        - Src:             '../libqrexec/buffer.c:42,9'
          Dst:             fuzz_exit
    - functionName:    buffer_free
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/buffer.c'
      linkageType:     InternalLinkage
      functionLinenumber: 62
      functionDepth:   0
      returnType:      void
      argCount:        1
      argTypes:
        - 'struct.buffer *'
      constantsTouched: []
      argNames:
        - b
      BBCount:         6
      ICount:          37
      EdgeCount:       7
      CyclomaticComplexity: 3
      functionsReached:
        - buffer_init
        - limited_free
      functionUses:    2
      BranchProfiles:
        - Branch String:   '../libqrexec/buffer.c:63,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:63,9'
              BranchSideFuncs:
                - limited_free
                - buffer_init
            - BranchSide:      '../libqrexec/buffer.c:64,22'
              BranchSideFuncs:
                - limited_free
                - buffer_init
      Callsites:
        - Src:             '../libqrexec/buffer.c:64,9'
          Dst:             limited_free
        - Src:             '../libqrexec/buffer.c:65,5'
          Dst:             buffer_init
    - functionName:    limited_free
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/buffer.c'
      linkageType:     InternalLinkage
      functionLinenumber: 48
      functionDepth:   0
      returnType:      void
      argCount:        2
      argTypes:
        - 'char *'
        - int
      constantsTouched: []
      argNames:
        - ptr
        - len
      BBCount:         8
      ICount:          45
      EdgeCount:       9
      CyclomaticComplexity: 3
      functionsReached:
        - abort
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/buffer.c:49,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:49,20'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/buffer.c:50,9'
              BranchSideFuncs:
                - abort
        - Branch String:   '../libqrexec/buffer.c:49,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:50,9'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/buffer.c:51,10'
              BranchSideFuncs:
                - free
      Callsites:
        - Src:             '../libqrexec/buffer.c:50,9'
          Dst:             abort
    - functionName:    buffer_init
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/buffer.c'
      linkageType:     InternalLinkage
      functionLinenumber: 56
      functionDepth:   0
      returnType:      void
      argCount:        1
      argTypes:
        - 'struct.buffer *'
      constantsTouched: []
      argNames:
        - b
      BBCount:         1
      ICount:          13
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    buffer_append
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/buffer.c'
      linkageType:     InternalLinkage
      functionLinenumber: 79
      functionDepth:   0
      returnType:      void
      argCount:        3
      argTypes:
        - 'struct.buffer *'
        - 'char *'
        - int
      constantsTouched: []
      argNames:
        - b
        - data
        - len
      BBCount:         16
      ICount:          118
      EdgeCount:       19
      CyclomaticComplexity: 5
      functionsReached:
        - buffer_free
        - fuzz_exit
        - limited_malloc
      functionUses:    3
      BranchProfiles:
        - Branch String:   '../libqrexec/buffer.c:82,23'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:82,26'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/buffer.c:84,9'
              BranchSideFuncs:
                - fuzz_exit
        - Branch String:   '../libqrexec/buffer.c:82,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:84,9'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/buffer.c:86,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - limited_malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - buffer_free
                - fuzz_exit
        - Branch String:   '../libqrexec/buffer.c:86,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:86,20'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/buffer.c:88,9'
              BranchSideFuncs:
                - fuzz_exit
        - Branch String:   '../libqrexec/buffer.c:86,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:88,9'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/buffer.c:90,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - limited_malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - buffer_free
        - Branch String:   '../libqrexec/buffer.c:90,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/buffer.c:91,9'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/buffer.c:92,15'
              BranchSideFuncs:
                - limited_malloc
                - llvm.memcpy.p0i8.p0i8.i64
                - llvm.memcpy.p0i8.p0i8.i64
                - buffer_free
      Callsites:
        - Src:             '../libqrexec/buffer.c:84,9'
          Dst:             fuzz_exit
        - Src:             '../libqrexec/buffer.c:88,9'
          Dst:             fuzz_exit
        - Src:             '../libqrexec/buffer.c:93,13'
          Dst:             limited_malloc
        - Src:             '../libqrexec/buffer.c:96,5'
          Dst:             buffer_free
    - functionName:    do_replace_chars
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/replace.c'
      linkageType:     InternalLinkage
      functionLinenumber: 24
      functionDepth:   0
      returnType:      void
      argCount:        2
      argTypes:
        - 'char *'
        - int
      constantsTouched: []
      argNames:
        - buf
        - len
      BBCount:         21
      ICount:          114
      EdgeCount:       28
      CyclomaticComplexity: 9
      functionsReached: []
      functionUses:    2
      BranchProfiles:
        - Branch String:   '../libqrexec/replace.c:28,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/replace.c:29,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/replace.c:38,1'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/replace.c:30,25'
          Branch Sides:
            - BranchSide:      '../libqrexec/replace.c:30,28'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/replace.c:31,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/replace.c:30,40'
          Branch Sides:
            - BranchSide:      '../libqrexec/replace.c:31,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/replace.c:37,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/replace.c:31,25'
          Branch Sides:
            - BranchSide:      '../libqrexec/replace.c:32,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/replace.c:37,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/replace.c:32,25'
          Branch Sides:
            - BranchSide:      '../libqrexec/replace.c:33,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/replace.c:37,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/replace.c:33,25'
          Branch Sides:
            - BranchSide:      '../libqrexec/replace.c:34,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/replace.c:37,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/replace.c:34,25'
          Branch Sides:
            - BranchSide:      '../libqrexec/replace.c:35,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/replace.c:37,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/replace.c:30,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/replace.c:36,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/replace.c:37,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
      Callsites:       []
    - functionName:    qubes_connect
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c'
      linkageType:     InternalLinkage
      functionLinenumber: 166
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - int
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - s
        - connect_path
        - total_path_length
      BBCount:         27
      ICount:          184
      EdgeCount:       35
      CyclomaticComplexity: 10
      functionsReached:
        - __errno_location
        - connect
        - mkdtemp
        - rmdir
        - symlink
        - unlink
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/exec.c:176,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:178,29'
              BranchSideFuncs:
                - mkdtemp
                - symlink
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - connect
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - unlink
                - rmdir
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
            - BranchSide:      '../libqrexec/exec.c:188,23'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - connect
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - unlink
                - rmdir
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/exec.c:178,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:179,13'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/exec.c:180,9'
              BranchSideFuncs:
                - symlink
                - __sanitizer_cov_trace_const_cmp4
                - llvm.memcpy.p0i8.p0i8.i64
                - connect
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - unlink
                - rmdir
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
        - Branch String:   '../libqrexec/exec.c:181,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:182,26'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - unlink
                - rmdir
            - BranchSide:      '../libqrexec/exec.c:185,23'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - connect
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - unlink
                - rmdir
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/exec.c:195,23'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:194,8'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - unlink
                - rmdir
                - connect
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/exec.c:195,27'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - unlink
                - rmdir
                - connect
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/exec.c:194,8'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:194,25'
              BranchSideFuncs:
                - connect
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - unlink
                - rmdir
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/exec.c:196,19'
              BranchSideFuncs:
                - __errno_location
                - __sanitizer_cov_trace_const_cmp4
                - __errno_location
                - unlink
                - rmdir
        - Branch String:   '../libqrexec/exec.c:198,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:199,16'
              BranchSideFuncs:
                - unlink
                - rmdir
                - __errno_location
            - BranchSide:      '../libqrexec/exec.c:203,13'
              BranchSideFuncs:
                - __errno_location
      Callsites:
        - Src:             '../libqrexec/exec.c:178,21'
          Dst:             mkdtemp
        - Src:             '../libqrexec/exec.c:181,13'
          Dst:             symlink
        - Src:             '../libqrexec/exec.c:182,26'
          Dst:             __errno_location
        - Src:             '../libqrexec/exec.c:194,17'
          Dst:             connect
        - Src:             '../libqrexec/exec.c:195,27'
          Dst:             __errno_location
        - Src:             '../libqrexec/exec.c:195,45'
          Dst:             __errno_location
        - Src:             '../libqrexec/exec.c:195,69'
          Dst:             __errno_location
        - Src:             '../libqrexec/exec.c:196,19'
          Dst:             __errno_location
        - Src:             '../libqrexec/exec.c:199,9'
          Dst:             unlink
        - Src:             '../libqrexec/exec.c:201,9'
          Dst:             rmdir
        - Src:             '../libqrexec/exec.c:203,5'
          Dst:             __errno_location
    - functionName:    mkdtemp
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    symlink
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    unlink
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
    - functionName:    rmdir
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    exec_wait_for_session
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c'
      linkageType:     InternalLinkage
      functionLinenumber: 516
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - source_domain
      BBCount:         9
      ICount:          63
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - execl
        - find_file
        - getenv
        - setenv
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/exec.c:518,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:519,29'
              BranchSideFuncs:
                - find_file
                - __sanitizer_cov_trace_const_cmp4
                - setenv
                - execl
            - BranchSide:      '../libqrexec/exec.c:521,17'
              BranchSideFuncs:
                - find_file
                - __sanitizer_cov_trace_const_cmp4
                - setenv
                - execl
        - Branch String:   '../libqrexec/exec.c:527,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:529,9'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/exec.c:532,36'
              BranchSideFuncs:
                - setenv
                - execl
      Callsites:
        - Src:             '../libqrexec/exec.c:517,39'
          Dst:             getenv
        - Src:             '../libqrexec/exec.c:525,15'
          Dst:             find_file
        - Src:             '../libqrexec/exec.c:532,5'
          Dst:             setenv
        - Src:             '../libqrexec/exec.c:533,12'
          Dst:             execl
    - functionName:    getenv
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
    - functionName:    find_file
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c'
      linkageType:     InternalLinkage
      functionLinenumber: 222
      functionDepth:   0
      returnType:      int
      argCount:        5
      argTypes:
        - 'char *'
        - 'char *'
        - 'char *'
        - size_t
        - 'struct.stat *'
      constantsTouched: []
      argNames:
        - path_list
        - name
        - buffer
        - buffer_size
        - statbuf
      BBCount:         17
      ICount:          132
      EdgeCount:       22
      CyclomaticComplexity: 7
      functionsReached:
        - stat
        - strchrnul
        - strcpy
        - strlen
      functionUses:    5
      BranchProfiles:
        - Branch String:   '../libqrexec/exec.c:228,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:229,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - strchrnul
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - strcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/exec.c:231,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - strchrnul
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - strcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/exec.c:231,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:233,42'
              BranchSideFuncs:
                - strchrnul
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - strcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
            - BranchSide:      '../libqrexec/exec.c:252,5'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/exec.c:236,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:238,13'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/exec.c:241,16'
              BranchSideFuncs:
                - llvm.memcpy.p0i8.p0i8.i64
                - strcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp1
                - strchrnul
                - __sanitizer_cov_trace_cmp8
        - Branch String:   '../libqrexec/exec.c:245,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:246,13'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/exec.c:248,22'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - strchrnul
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - strcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/exec.c:249,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:231,5'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - strchrnul
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - strcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
            - BranchSide:      '../libqrexec/exec.c:250,23'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp1
                - strchrnul
                - __sanitizer_cov_trace_cmp8
                - llvm.memcpy.p0i8.p0i8.i64
                - strcpy
                - stat
                - __sanitizer_cov_trace_const_cmp4
      Callsites:
        - Src:             '../libqrexec/exec.c:226,26'
          Dst:             strlen
        - Src:             '../libqrexec/exec.c:233,32'
          Dst:             strchrnul
        - Src:             '../libqrexec/exec.c:243,9'
          Dst:             strcpy
        - Src:             '../libqrexec/exec.c:245,13'
          Dst:             stat
    - functionName:    setenv
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - int
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    execl
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    strchrnul
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - int
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
    - functionName:    strcpy
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    stat
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - 'char *'
        - 'struct.stat *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    do_fork_exec
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c'
      linkageType:     InternalLinkage
      functionLinenumber: 104
      functionDepth:   0
      returnType:      int
      argCount:        6
      argTypes:
        - 'char *'
        - 'char *'
        - 'int *'
        - 'int *'
        - 'int *'
        - 'int *'
      constantsTouched: []
      argNames:
        - user
        - cmdline
        - pid
        - stdin_fd
        - stdout_fd
        - stderr_fd
      BBCount:         36
      ICount:          227
      EdgeCount:       41
      CyclomaticComplexity: 7
      functionsReached:
        - __errno_location
        - abort
        - close
        - fix_fds
        - fuzz_exit
        - fuzz_read
        - fuzz_write
        - signal
        - socketpair
        - waitid
      functionUses:    2
      BranchProfiles:
        - Branch String:   '../libqrexec/exec.c:109,53'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:110,49'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/exec.c:114,9'
              BranchSideFuncs:
                - fuzz_exit
        - Branch String:   '../libqrexec/exec.c:110,58'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:111,14'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/exec.c:114,9'
              BranchSideFuncs:
                - fuzz_exit
        - Branch String:   '../libqrexec/exec.c:111,24'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:111,63'
              BranchSideFuncs:
                - socketpair
                - __sanitizer_cov_trace_const_cmp4
                - socketpair
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - signal
                - fix_fds
                - close
                - abort
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - fuzz_write
                - fuzz_exit
                - fix_fds
                - abort
                - fuzz_exit
                - close
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - close
                - close
                - close
                - llvm.memset.p0i8.i64
                - waitid
                - fuzz_exit
            - BranchSide:      '../libqrexec/exec.c:112,64'
              BranchSideFuncs:
                - socketpair
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_switch
                - signal
                - fix_fds
                - close
                - abort
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - fuzz_write
                - fuzz_exit
                - fix_fds
                - abort
                - fuzz_exit
                - close
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - close
                - close
                - close
                - llvm.memset.p0i8.i64
                - waitid
                - fuzz_exit
        - Branch String:   '../libqrexec/exec.c:111,73'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:112,64'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/exec.c:114,9'
              BranchSideFuncs:
                - fuzz_exit
        - Branch String:   '../libqrexec/exec.c:109,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:114,9'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/exec.c:116,14'
              BranchSideFuncs:
                - __sanitizer_cov_trace_switch
                - signal
                - fix_fds
                - close
                - abort
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - fuzz_write
                - fuzz_exit
                - fix_fds
                - abort
                - fuzz_exit
                - close
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - close
                - close
                - close
                - llvm.memset.p0i8.i64
                - waitid
        - Branch String:   '../libqrexec/exec.c:116,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:119,13'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/exec.c:122,17'
              BranchSideFuncs:
                - signal
                - fix_fds
                - close
                - abort
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - fuzz_write
                - fuzz_exit
                - fix_fds
                - abort
            - BranchSide:      '../libqrexec/exec.c:143,19'
              BranchSideFuncs:
                - close
                - fuzz_read
                - __sanitizer_cov_trace_const_cmp8
                - close
                - close
                - close
                - llvm.memset.p0i8.i64
                - waitid
        - Branch String:   '../libqrexec/exec.c:122,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:123,17'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/exec.c:124,17'
              BranchSideFuncs:
                - fix_fds
                - close
                - abort
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - fuzz_write
                - fuzz_exit
                - fix_fds
        - Branch String:   '../libqrexec/exec.c:124,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:125,25'
              BranchSideFuncs:
                - fix_fds
                - close
                - abort
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - fuzz_write
                - fuzz_exit
            - BranchSide:      '../libqrexec/exec.c:127,25'
              BranchSideFuncs:
                - fix_fds
                - close
                - abort
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - fuzz_write
                - fuzz_exit
        - Branch String:   '../libqrexec/exec.c:134,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:135,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_pc_indir
                - __errno_location
                - fuzz_write
                - fuzz_exit
            - BranchSide:      '../libqrexec/exec.c:137,17'
              BranchSideFuncs:
                - abort
        - Branch String:   '../libqrexec/exec.c:139,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:139,26'
              BranchSideFuncs:
                - fuzz_write
                - fuzz_exit
            - BranchSide:      '../libqrexec/exec.c:140,13'
              BranchSideFuncs:
                - fuzz_exit
        - Branch String:   '../libqrexec/exec.c:144,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:145,27'
              BranchSideFuncs:
                - llvm.memset.p0i8.i64
                - waitid
                - close
                - close
                - close
            - BranchSide:      '../libqrexec/exec.c:149,24'
              BranchSideFuncs:
                - close
                - close
                - close
        - Branch String:   '../libqrexec/exec.c:157,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:157,9'
              BranchSideFuncs:
                - close
            - BranchSide:      '../libqrexec/exec.c:158,15'
              BranchSideFuncs:
                - close
      Callsites:
        - Src:             '../libqrexec/exec.c:109,9'
          Dst:             socketpair
        - Src:             '../libqrexec/exec.c:110,13'
          Dst:             socketpair
        - Src:             '../libqrexec/exec.c:111,27'
          Dst:             socketpair
        - Src:             '../libqrexec/exec.c:112,13'
          Dst:             socketpair
        - Src:             '../libqrexec/exec.c:114,9'
          Dst:             fuzz_exit
        - Src:             '../libqrexec/exec.c:119,13'
          Dst:             fuzz_exit
        - Src:             '../libqrexec/exec.c:122,17'
          Dst:             signal
        - Src:             '../libqrexec/exec.c:123,17'
          Dst:             abort
        - Src:             '../libqrexec/exec.c:125,17'
          Dst:             fix_fds
        - Src:             '../libqrexec/exec.c:127,17'
          Dst:             fix_fds
        - Src:             '../libqrexec/exec.c:129,13'
          Dst:             close
        - Src:             '../libqrexec/exec.c:137,17'
          Dst:             abort
        - Src:             '../libqrexec/exec.c:138,22'
          Dst:             __errno_location
        - Src:             '../libqrexec/exec.c:139,20'
          Dst:             fuzz_write
        - Src:             '../libqrexec/exec.c:140,13'
          Dst:             fuzz_exit
        - Src:             '../libqrexec/exec.c:143,13'
          Dst:             close
        - Src:             '../libqrexec/exec.c:144,17'
          Dst:             fuzz_read
        - Src:             '../libqrexec/exec.c:147,17'
          Dst:             waitid
        - Src:             '../libqrexec/exec.c:153,5'
          Dst:             close
        - Src:             '../libqrexec/exec.c:154,5'
          Dst:             close
        - Src:             '../libqrexec/exec.c:158,9'
          Dst:             close
    - functionName:    socketpair
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        4
      argTypes:
        - int
        - int
        - int
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    4
      BranchProfiles:  []
      Callsites:       []
    - functionName:    signal
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'func_type *'
      argCount:        2
      argTypes:
        - int
        - 'func_type *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    fix_fds
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c'
      linkageType:     InternalLinkage
      functionLinenumber: 81
      functionDepth:   0
      returnType:      void
      argCount:        3
      argTypes:
        - int
        - int
        - int
      constantsTouched: []
      argNames:
        - fdin
        - fdout
        - fderr
      BBCount:         38
      ICount:          170
      EdgeCount:       50
      CyclomaticComplexity: 14
      functionsReached:
        - abort
        - close
        - dup2
      functionUses:    2
      BranchProfiles:
        - Branch String:   '../libqrexec/exec.c:83,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:84,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - close
            - BranchSide:      '../libqrexec/exec.c:86,14'
              BranchSideFuncs:
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
        - Branch String:   '../libqrexec/exec.c:84,23'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:84,26'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - close
            - BranchSide:      '../libqrexec/exec.c:84,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - close
        - Branch String:   '../libqrexec/exec.c:84,37'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:84,40'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - close
            - BranchSide:      '../libqrexec/exec.c:84,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - close
        - Branch String:   '../libqrexec/exec.c:84,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:84,45'
              BranchSideFuncs:
                - close
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
            - BranchSide:      '../libqrexec/exec.c:85,19'
              BranchSideFuncs:
                - close
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - dup2
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
        - Branch String:   '../libqrexec/exec.c:86,27'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:86,35'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/exec.c:88,9'
              BranchSideFuncs:
                - abort
        - Branch String:   '../libqrexec/exec.c:86,49'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:86,57'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/exec.c:88,9'
              BranchSideFuncs:
                - abort
        - Branch String:   '../libqrexec/exec.c:86,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:88,9'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/exec.c:91,15'
              BranchSideFuncs:
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
                - close
                - __sanitizer_cov_trace_const_cmp4
        - Branch String:   '../libqrexec/exec.c:91,21'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:91,25'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/exec.c:94,9'
              BranchSideFuncs:
                - abort
        - Branch String:   '../libqrexec/exec.c:91,39'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:91,48'
              BranchSideFuncs:
                - close
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
            - BranchSide:      '../libqrexec/exec.c:92,10'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
        - Branch String:   '../libqrexec/exec.c:91,56'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:92,10'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/exec.c:94,9'
              BranchSideFuncs:
                - abort
        - Branch String:   '../libqrexec/exec.c:92,24'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:92,27'
              BranchSideFuncs:
                - __sanitizer_cov_trace_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
            - BranchSide:      '../libqrexec/exec.c:92,24'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/exec.c:92,42'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:92,45'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
            - BranchSide:      '../libqrexec/exec.c:92,42'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/exec.c:92,56'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:92,65'
              BranchSideFuncs:
                - close
                - __sanitizer_cov_trace_const_cmp4
                - abort
            - BranchSide:      '../libqrexec/exec.c:92,56'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/exec.c:91,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:91,9'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/exec.c:94,9'
              BranchSideFuncs:
                - abort
      Callsites:
        - Src:             '../libqrexec/exec.c:85,13'
          Dst:             close
        - Src:             '../libqrexec/exec.c:86,9'
          Dst:             dup2
        - Src:             '../libqrexec/exec.c:86,30'
          Dst:             dup2
        - Src:             '../libqrexec/exec.c:86,52'
          Dst:             dup2
        - Src:             '../libqrexec/exec.c:88,9'
          Dst:             abort
        - Src:             '../libqrexec/exec.c:91,9'
          Dst:             close
        - Src:             '../libqrexec/exec.c:91,42'
          Dst:             close
        - Src:             '../libqrexec/exec.c:92,59'
          Dst:             close
        - Src:             '../libqrexec/exec.c:94,9'
          Dst:             abort
    - functionName:    waitid
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        4
      argTypes:
        - int
        - int
        - 'struct.siginfo_t *'
        - int
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    dup2
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - int
        - int
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
    - functionName:    execute_parsed_qubes_rpc_command
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c'
      linkageType:     InternalLinkage
      functionLinenumber: 451
      functionDepth:   0
      returnType:      int
      argCount:        6
      argTypes:
        - 'struct.qrexec_parsed_command *'
        - 'int *'
        - 'int *'
        - 'int *'
        - 'int *'
        - 'struct.buffer *'
      constantsTouched: []
      argNames:
        - cmd
        - pid
        - stdin_fd
        - stdout_fd
        - stderr_fd
        - stdin_buffer
      BBCount:         29
      ICount:          215
      EdgeCount:       38
      CyclomaticComplexity: 11
      functionsReached:
        - __assert_fail
        - buffer_append
        - close
        - do_fork_exec
        - euidaccess
        - find_file
        - getenv
        - qubes_connect
        - set_nonblock
        - socket
        - strcmp
        - strlen
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/exec.c:453,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:453,5'
              BranchSideFuncs:
                - getenv
                - find_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - euidaccess
                - __sanitizer_cov_trace_const_cmp4
                - do_fork_exec
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - qubes_connect
                - __sanitizer_cov_trace_const_cmp4
                - set_nonblock
                - strlen
                - buffer_append
                - close
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - find_file
            - BranchSide:      '../libqrexec/exec.c:455,39'
              BranchSideFuncs:
                - getenv
                - find_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - euidaccess
                - __sanitizer_cov_trace_const_cmp4
                - do_fork_exec
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - qubes_connect
                - __sanitizer_cov_trace_const_cmp4
                - set_nonblock
                - strlen
                - buffer_append
                - close
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - find_file
        - Branch String:   '../libqrexec/exec.c:456,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:457,29'
              BranchSideFuncs:
                - find_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - euidaccess
                - __sanitizer_cov_trace_const_cmp4
                - do_fork_exec
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - qubes_connect
                - __sanitizer_cov_trace_const_cmp4
                - set_nonblock
                - strlen
                - buffer_append
                - close
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - find_file
            - BranchSide:      '../libqrexec/exec.c:462,25'
              BranchSideFuncs:
                - find_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - euidaccess
                - __sanitizer_cov_trace_const_cmp4
                - do_fork_exec
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - qubes_connect
                - __sanitizer_cov_trace_const_cmp4
                - set_nonblock
                - strlen
                - buffer_append
                - close
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - find_file
        - Branch String:   '../libqrexec/exec.c:465,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:465,27'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - euidaccess
                - __sanitizer_cov_trace_const_cmp4
                - do_fork_exec
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - qubes_connect
                - __sanitizer_cov_trace_const_cmp4
                - set_nonblock
                - strlen
                - buffer_append
                - close
                - find_file
            - BranchSide:      '../libqrexec/exec.c:469,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - euidaccess
                - __sanitizer_cov_trace_const_cmp4
                - do_fork_exec
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - qubes_connect
                - __sanitizer_cov_trace_const_cmp4
                - set_nonblock
                - strlen
                - buffer_append
                - close
        - Branch String:   '../libqrexec/exec.c:465,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:466,25'
              BranchSideFuncs:
                - find_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - euidaccess
                - __sanitizer_cov_trace_const_cmp4
                - do_fork_exec
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - qubes_connect
                - __sanitizer_cov_trace_const_cmp4
                - set_nonblock
                - strlen
                - buffer_append
                - close
            - BranchSide:      '../libqrexec/exec.c:469,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - euidaccess
                - __sanitizer_cov_trace_const_cmp4
                - do_fork_exec
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - qubes_connect
                - __sanitizer_cov_trace_const_cmp4
                - set_nonblock
                - strlen
                - buffer_append
                - close
        - Branch String:   '../libqrexec/exec.c:469,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:472,9'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/exec.c:475,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - euidaccess
                - __sanitizer_cov_trace_const_cmp4
                - do_fork_exec
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - qubes_connect
                - __sanitizer_cov_trace_const_cmp4
                - set_nonblock
                - strlen
                - buffer_append
                - close
        - Branch String:   '../libqrexec/exec.c:475,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:478,18'
              BranchSideFuncs:
                - socket
                - __sanitizer_cov_trace_const_cmp4
                - strlen
                - qubes_connect
                - __sanitizer_cov_trace_const_cmp4
                - set_nonblock
                - strlen
                - buffer_append
                - close
            - BranchSide:      '../libqrexec/exec.c:500,20'
              BranchSideFuncs:
                - euidaccess
                - __sanitizer_cov_trace_const_cmp4
                - do_fork_exec
        - Branch String:   '../libqrexec/exec.c:478,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:480,13'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/exec.c:482,27'
              BranchSideFuncs:
                - strlen
                - qubes_connect
                - __sanitizer_cov_trace_const_cmp4
                - set_nonblock
                - strlen
                - buffer_append
                - close
        - Branch String:   '../libqrexec/exec.c:482,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:484,19'
              BranchSideFuncs:
                - close
            - BranchSide:      '../libqrexec/exec.c:488,34'
              BranchSideFuncs:
                - set_nonblock
                - strlen
                - buffer_append
        - Branch String:   '../libqrexec/exec.c:489,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:490,14'
              BranchSideFuncs:
                - set_nonblock
                - strlen
                - buffer_append
            - BranchSide:      '../libqrexec/exec.c:491,10'
              BranchSideFuncs:
                - set_nonblock
                - strlen
                - buffer_append
        - Branch String:   '../libqrexec/exec.c:500,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:507,29'
              BranchSideFuncs:
                - do_fork_exec
            - BranchSide:      '../libqrexec/exec.c:513,5'
              BranchSideFuncs: []
      Callsites:
        - Src:             '../libqrexec/exec.c:453,5'
          Dst:             __assert_fail
        - Src:             '../libqrexec/exec.c:455,39'
          Dst:             getenv
        - Src:             '../libqrexec/exec.c:462,15'
          Dst:             find_file
        - Src:             '../libqrexec/exec.c:465,20'
          Dst:             strcmp
        - Src:             '../libqrexec/exec.c:466,15'
          Dst:             find_file
        - Src:             '../libqrexec/exec.c:478,18'
          Dst:             socket
        - Src:             '../libqrexec/exec.c:482,49'
          Dst:             strlen
        - Src:             '../libqrexec/exec.c:482,13'
          Dst:             qubes_connect
        - Src:             '../libqrexec/exec.c:484,13'
          Dst:             close
        - Src:             '../libqrexec/exec.c:492,9'
          Dst:             set_nonblock
        - Src:             '../libqrexec/exec.c:496,43'
          Dst:             strlen
        - Src:             '../libqrexec/exec.c:496,9'
          Dst:             buffer_append
        - Src:             '../libqrexec/exec.c:500,9'
          Dst:             euidaccess
        - Src:             '../libqrexec/exec.c:507,16'
          Dst:             do_fork_exec
    - functionName:    strcmp
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
    - functionName:    euidaccess
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - 'char *'
        - int
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    execute_qubes_rpc_command
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c'
      linkageType:     InternalLinkage
      functionLinenumber: 424
      functionDepth:   0
      returnType:      int
      argCount:        7
      argTypes:
        - 'char *'
        - 'int *'
        - 'int *'
        - 'int *'
        - 'int *'
        - bool
        - 'struct.buffer *'
      constantsTouched: []
      argNames:
        - cmdline
        - pid
        - stdin_fd
        - stdout_fd
        - stderr_fd
        - strip_username
        - stdin_buffer
      BBCount:         9
      ICount:          89
      EdgeCount:       11
      CyclomaticComplexity: 4
      functionsReached:
        - destroy_qrexec_parsed_command
        - do_fork_exec
        - execute_parsed_qubes_rpc_command
        - parse_qubes_rpc_command
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/exec.c:429,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:431,9'
              BranchSideFuncs:
                - do_fork_exec
                - destroy_qrexec_parsed_command
                - execute_parsed_qubes_rpc_command
            - BranchSide:      '../libqrexec/exec.c:434,9'
              BranchSideFuncs:
                - do_fork_exec
                - destroy_qrexec_parsed_command
                - execute_parsed_qubes_rpc_command
        - Branch String:   '../libqrexec/exec.c:434,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:437,13'
              BranchSideFuncs:
                - execute_parsed_qubes_rpc_command
                - destroy_qrexec_parsed_command
            - BranchSide:      '../libqrexec/exec.c:440,28'
              BranchSideFuncs:
                - do_fork_exec
                - destroy_qrexec_parsed_command
      Callsites:
        - Src:             '../libqrexec/exec.c:429,17'
          Dst:             parse_qubes_rpc_command
        - Src:             '../libqrexec/exec.c:436,15'
          Dst:             execute_parsed_qubes_rpc_command
        - Src:             '../libqrexec/exec.c:440,15'
          Dst:             do_fork_exec
        - Src:             '../libqrexec/exec.c:444,5'
          Dst:             destroy_qrexec_parsed_command
    - functionName:    parse_qubes_rpc_command
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c'
      linkageType:     InternalLinkage
      functionLinenumber: 308
      functionDepth:   0
      returnType:      'struct.qrexec_parsed_command *'
      argCount:        2
      argTypes:
        - 'char *'
        - bool
      constantsTouched: []
      argNames:
        - cmdline
        - strip_username
      BBCount:         39
      ICount:          298
      EdgeCount:       54
      CyclomaticComplexity: 17
      functionsReached:
        - destroy_qrexec_parsed_command
        - memchr
        - strchr
        - strchrnul
        - strncmp
        - strndup
      functionUses:    2
      BranchProfiles:
        - Branch String:   '../libqrexec/exec.c:312,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:314,9'
              BranchSideFuncs:
                - llvm.memset.p0i8.i64
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - destroy_qrexec_parsed_command
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - strchr
                - strndup
            - BranchSide:      '../libqrexec/exec.c:317,12'
              BranchSideFuncs:
                - llvm.memset.p0i8.i64
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - destroy_qrexec_parsed_command
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - strchr
                - strndup
        - Branch String:   '../libqrexec/exec.c:320,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:321,36'
              BranchSideFuncs:
                - strchr
                - destroy_qrexec_parsed_command
                - strndup
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
            - BranchSide:      '../libqrexec/exec.c:333,24'
              BranchSideFuncs:
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - destroy_qrexec_parsed_command
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
        - Branch String:   '../libqrexec/exec.c:322,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:324,13'
              BranchSideFuncs:
                - strndup
                - destroy_qrexec_parsed_command
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
            - BranchSide:      '../libqrexec/exec.c:326,33'
              BranchSideFuncs:
                - strndup
                - destroy_qrexec_parsed_command
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
        - Branch String:   '../libqrexec/exec.c:327,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:329,13'
              BranchSideFuncs:
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - destroy_qrexec_parsed_command
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
            - BranchSide:      '../libqrexec/exec.c:331,24'
              BranchSideFuncs:
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - destroy_qrexec_parsed_command
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
        - Branch String:   '../libqrexec/exec.c:335,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:336,9'
              BranchSideFuncs:
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - destroy_qrexec_parsed_command
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
            - BranchSide:      '../libqrexec/exec.c:339,9'
              BranchSideFuncs:
                - strncmp
                - __sanitizer_cov_trace_const_cmp4
                - strchr
                - destroy_qrexec_parsed_command
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
        - Branch String:   '../libqrexec/exec.c:342,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:348,17'
              BranchSideFuncs:
                - strchr
                - destroy_qrexec_parsed_command
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
            - BranchSide:      '../libqrexec/exec.c:404,12'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/exec.c:350,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:352,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - destroy_qrexec_parsed_command
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
            - BranchSide:      '../libqrexec/exec.c:355,13'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - destroy_qrexec_parsed_command
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
        - Branch String:   '../libqrexec/exec.c:355,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:358,13'
              BranchSideFuncs:
                - destroy_qrexec_parsed_command
            - BranchSide:      '../libqrexec/exec.c:361,43'
              BranchSideFuncs:
                - strndup
                - destroy_qrexec_parsed_command
                - memchr
                - strndup
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
        - Branch String:   '../libqrexec/exec.c:362,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:364,13'
              BranchSideFuncs:
                - memchr
                - strndup
                - destroy_qrexec_parsed_command
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
            - BranchSide:      '../libqrexec/exec.c:369,35'
              BranchSideFuncs:
                - memchr
                - strndup
                - destroy_qrexec_parsed_command
                - strchrnul
                - strndup
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
        - Branch String:   '../libqrexec/exec.c:370,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:371,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - destroy_qrexec_parsed_command
                - strchrnul
                - strndup
            - BranchSide:      '../libqrexec/exec.c:386,41'
              BranchSideFuncs:
                - strndup
                - destroy_qrexec_parsed_command
                - strchrnul
                - strndup
        - Branch String:   '../libqrexec/exec.c:371,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:373,17'
              BranchSideFuncs:
                - destroy_qrexec_parsed_command
            - BranchSide:      '../libqrexec/exec.c:375,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - strndup
                - destroy_qrexec_parsed_command
                - strchrnul
                - strndup
        - Branch String:   '../libqrexec/exec.c:375,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:378,17'
              BranchSideFuncs:
                - destroy_qrexec_parsed_command
            - BranchSide:      '../libqrexec/exec.c:380,41'
              BranchSideFuncs:
                - strndup
                - destroy_qrexec_parsed_command
                - strchrnul
                - strndup
        - Branch String:   '../libqrexec/exec.c:381,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:383,17'
              BranchSideFuncs:
                - strchrnul
                - strndup
                - destroy_qrexec_parsed_command
            - BranchSide:      '../libqrexec/exec.c:385,9'
              BranchSideFuncs:
                - strchrnul
                - strndup
                - destroy_qrexec_parsed_command
        - Branch String:   '../libqrexec/exec.c:387,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:0,0'
              BranchSideFuncs:
                - strchrnul
                - strndup
                - destroy_qrexec_parsed_command
            - BranchSide:      '../libqrexec/exec.c:389,17'
              BranchSideFuncs:
                - destroy_qrexec_parsed_command
        - Branch String:   '../libqrexec/exec.c:398,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:400,13'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/exec.c:402,5'
              BranchSideFuncs: []
      Callsites:
        - Src:             '../libqrexec/exec.c:321,29'
          Dst:             strchr
        - Src:             '../libqrexec/exec.c:326,25'
          Dst:             strndup
        - Src:             '../libqrexec/exec.c:335,9'
          Dst:             strncmp
        - Src:             '../libqrexec/exec.c:342,9'
          Dst:             strncmp
        - Src:             '../libqrexec/exec.c:349,15'
          Dst:             strchr
        - Src:             '../libqrexec/exec.c:361,35'
          Dst:             strndup
        - Src:             '../libqrexec/exec.c:369,28'
          Dst:             memchr
        - Src:             '../libqrexec/exec.c:380,33'
          Dst:             strndup
        - Src:             '../libqrexec/exec.c:386,33'
          Dst:             strndup
        - Src:             '../libqrexec/exec.c:396,15'
          Dst:             strchrnul
        - Src:             '../libqrexec/exec.c:397,30'
          Dst:             strndup
        - Src:             '../libqrexec/exec.c:407,5'
          Dst:             destroy_qrexec_parsed_command
    - functionName:    destroy_qrexec_parsed_command
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c'
      linkageType:     InternalLinkage
      functionLinenumber: 411
      functionDepth:   0
      returnType:      void
      argCount:        1
      argTypes:
        - 'struct.qrexec_parsed_command *'
      constantsTouched: []
      argNames:
        - cmd
      BBCount:         15
      ICount:          85
      EdgeCount:       19
      CyclomaticComplexity: 6
      functionsReached: []
      functionUses:    3
      BranchProfiles:
        - Branch String:   '../libqrexec/exec.c:412,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:413,14'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
                - free
            - BranchSide:      '../libqrexec/exec.c:414,9'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
        - Branch String:   '../libqrexec/exec.c:414,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:415,14'
              BranchSideFuncs:
                - free
                - free
                - free
                - free
            - BranchSide:      '../libqrexec/exec.c:416,9'
              BranchSideFuncs:
                - free
                - free
                - free
        - Branch String:   '../libqrexec/exec.c:416,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:417,14'
              BranchSideFuncs:
                - free
                - free
                - free
            - BranchSide:      '../libqrexec/exec.c:418,9'
              BranchSideFuncs:
                - free
                - free
        - Branch String:   '../libqrexec/exec.c:418,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:418,9'
              BranchSideFuncs:
                - free
                - free
            - BranchSide:      '../libqrexec/exec.c:419,14'
              BranchSideFuncs:
                - free
                - free
      Callsites:       []
    - functionName:    strchr
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - int
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
    - functionName:    strndup
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    5
      BranchProfiles:  []
      Callsites:       []
    - functionName:    strncmp
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    3
      BranchProfiles:  []
      Callsites:       []
    - functionName:    memchr
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - int
        - size_t
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    load_service_config
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c'
      linkageType:     InternalLinkage
      functionLinenumber: 256
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - 'struct.qrexec_parsed_command *'
        - 'int *'
      constantsTouched: []
      argNames:
        - cmd
        - wait_for_session
      BBCount:         27
      ICount:          174
      EdgeCount:       35
      CyclomaticComplexity: 10
      functionsReached:
        - __assert_fail
        - __isoc99_sscanf
        - fclose
        - ferror
        - find_file
        - fopen
        - fread
        - getenv
        - strcmp
        - strsep
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/exec.c:257,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:257,5'
              BranchSideFuncs:
                - getenv
                - find_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - fopen
                - fread
                - ferror
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - fclose
                - __isoc99_sscanf
                - fclose
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - find_file
            - BranchSide:      '../libqrexec/exec.c:259,31'
              BranchSideFuncs:
                - getenv
                - find_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - fopen
                - fread
                - ferror
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - fclose
                - __isoc99_sscanf
                - fclose
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - find_file
        - Branch String:   '../libqrexec/exec.c:260,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:261,21'
              BranchSideFuncs:
                - find_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - fopen
                - fread
                - ferror
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - fclose
                - __isoc99_sscanf
                - fclose
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - find_file
            - BranchSide:      '../libqrexec/exec.c:265,25'
              BranchSideFuncs:
                - find_file
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - fopen
                - fread
                - ferror
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - fclose
                - __isoc99_sscanf
                - fclose
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - find_file
        - Branch String:   '../libqrexec/exec.c:267,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:267,27'
              BranchSideFuncs:
                - strcmp
                - __sanitizer_cov_trace_const_cmp4
                - __sanitizer_cov_trace_const_cmp4
                - fopen
                - fread
                - ferror
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - fclose
                - __isoc99_sscanf
                - fclose
                - find_file
            - BranchSide:      '../libqrexec/exec.c:270,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - fopen
                - fread
                - ferror
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - fclose
                - __isoc99_sscanf
                - fclose
        - Branch String:   '../libqrexec/exec.c:267,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:268,25'
              BranchSideFuncs:
                - find_file
                - __sanitizer_cov_trace_const_cmp4
                - fopen
                - fread
                - ferror
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - fclose
                - __isoc99_sscanf
                - fclose
            - BranchSide:      '../libqrexec/exec.c:270,9'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp4
                - fopen
                - fread
                - ferror
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - fclose
                - __isoc99_sscanf
                - fclose
        - Branch String:   '../libqrexec/exec.c:270,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:271,9'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/exec.c:274,25'
              BranchSideFuncs:
                - fopen
                - fread
                - ferror
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - fclose
                - __isoc99_sscanf
                - fclose
        - Branch String:   '../libqrexec/exec.c:280,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:282,9'
              BranchSideFuncs:
                - fread
                - ferror
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - fclose
                - __isoc99_sscanf
                - fclose
            - BranchSide:      '../libqrexec/exec.c:285,24'
              BranchSideFuncs:
                - fread
                - ferror
                - __sanitizer_cov_trace_const_cmp4
                - strsep
                - fclose
                - __isoc99_sscanf
                - fclose
        - Branch String:   '../libqrexec/exec.c:287,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:288,16'
              BranchSideFuncs:
                - fclose
            - BranchSide:      '../libqrexec/exec.c:294,12'
              BranchSideFuncs:
                - strsep
                - fclose
                - __isoc99_sscanf
        - Branch String:   '../libqrexec/exec.c:296,5'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:298,13'
              BranchSideFuncs:
                - __isoc99_sscanf
                - strsep
                - fclose
            - BranchSide:      '../libqrexec/exec.c:303,12'
              BranchSideFuncs:
                - fclose
        - Branch String:   '../libqrexec/exec.c:298,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:299,13'
              BranchSideFuncs:
                - strsep
                - fclose
                - __isoc99_sscanf
            - BranchSide:      '../libqrexec/exec.c:300,16'
              BranchSideFuncs:
                - __isoc99_sscanf
                - strsep
                - fclose
      Callsites:
        - Src:             '../libqrexec/exec.c:257,5'
          Dst:             __assert_fail
        - Src:             '../libqrexec/exec.c:259,31'
          Dst:             getenv
        - Src:             '../libqrexec/exec.c:265,15'
          Dst:             find_file
        - Src:             '../libqrexec/exec.c:267,20'
          Dst:             strcmp
        - Src:             '../libqrexec/exec.c:268,15'
          Dst:             find_file
        - Src:             '../libqrexec/exec.c:279,19'
          Dst:             fopen
        - Src:             '../libqrexec/exec.c:285,18'
          Dst:             fread
        - Src:             '../libqrexec/exec.c:287,9'
          Dst:             ferror
        - Src:             '../libqrexec/exec.c:288,9'
          Dst:             fclose
        - Src:             '../libqrexec/exec.c:296,28'
          Dst:             strsep
        - Src:             '../libqrexec/exec.c:300,9'
          Dst:             __isoc99_sscanf
        - Src:             '../libqrexec/exec.c:303,5'
          Dst:             fclose
    - functionName:    fopen
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct._IO_FILE *'
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    fread
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      size_t
      argCount:        4
      argTypes:
        - 'char *'
        - size_t
        - size_t
        - 'struct._IO_FILE *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    ferror
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - 'struct._IO_FILE *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    fclose
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - 'struct._IO_FILE *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
    - functionName:    strsep
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        2
      argTypes:
        - 'char **'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    __isoc99_sscanf
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    exec_qubes_rpc_if_requested
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c'
      linkageType:     InternalLinkage
      functionLinenumber: 47
      functionDepth:   0
      returnType:      void
      argCount:        2
      argTypes:
        - 'char *'
        - 'char **'
      constantsTouched: []
      argNames:
        - prog
        - envp
      BBCount:         16
      ICount:          102
      EdgeCount:       18
      CyclomaticComplexity: 4
      functionsReached:
        - _exit
        - execve
        - fuzz_exit
        - getenv
        - strdup
        - strncmp
        - strtok_r
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/exec.c:49,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:53,16'
              BranchSideFuncs:
                - strdup
                - _exit
                - strtok_r
                - __sanitizer_cov_trace_const_cmp8
                - strtok_r
                - getenv
                - execve
                - _exit
                - fuzz_exit
            - BranchSide:      '../libqrexec/exec.c:78,1'
              BranchSideFuncs: []
        - Branch String:   '../libqrexec/exec.c:56,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:58,13'
              BranchSideFuncs:
                - strtok_r
                - __sanitizer_cov_trace_const_cmp8
                - strtok_r
                - getenv
                - execve
                - _exit
                - fuzz_exit
            - BranchSide:      '../libqrexec/exec.c:61,22'
              BranchSideFuncs:
                - strtok_r
                - __sanitizer_cov_trace_const_cmp8
                - strtok_r
                - getenv
                - execve
                - _exit
                - fuzz_exit
        - Branch String:   '../libqrexec/exec.c:63,17'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:65,17'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/exec.c:67,25'
              BranchSideFuncs:
                - strtok_r
                - getenv
                - execve
                - _exit
                - __sanitizer_cov_trace_const_cmp8
                - fuzz_exit
        - Branch String:   '../libqrexec/exec.c:68,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:63,17'
              BranchSideFuncs:
                - __sanitizer_cov_trace_const_cmp8
                - strtok_r
                - getenv
                - execve
                - _exit
                - fuzz_exit
            - BranchSide:      '../libqrexec/exec.c:69,14'
              BranchSideFuncs:
                - getenv
                - execve
                - _exit
        - Branch String:   '../libqrexec/exec.c:72,13'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:73,13'
              BranchSideFuncs:
                - execve
                - _exit
            - BranchSide:      '../libqrexec/exec.c:74,16'
              BranchSideFuncs:
                - execve
                - _exit
      Callsites:
        - Src:             '../libqrexec/exec.c:49,9'
          Dst:             strncmp
        - Src:             '../libqrexec/exec.c:55,21'
          Dst:             strdup
        - Src:             '../libqrexec/exec.c:58,13'
          Dst:             _exit
        - Src:             '../libqrexec/exec.c:61,13'
          Dst:             strtok_r
        - Src:             '../libqrexec/exec.c:65,17'
          Dst:             fuzz_exit
        - Src:             '../libqrexec/exec.c:68,23'
          Dst:             strtok_r
        - Src:             '../libqrexec/exec.c:71,19'
          Dst:             getenv
        - Src:             '../libqrexec/exec.c:74,9'
          Dst:             execve
        - Src:             '../libqrexec/exec.c:76,9'
          Dst:             _exit
    - functionName:    strdup
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    _exit
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      void
      argCount:        1
      argTypes:
        - int
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
    - functionName:    strtok_r
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    2
      BranchProfiles:  []
      Callsites:       []
    - functionName:    execve
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - 'char *'
        - 'char **'
        - 'char **'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    register_exec_func
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/exec.c'
      linkageType:     InternalLinkage
      functionLinenumber: 41
      functionDepth:   0
      returnType:      void
      argCount:        1
      argTypes:
        - 'func_type *'
      constantsTouched: []
      argNames:
        - func
      BBCount:         5
      ICount:          27
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached:
        - abort
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/exec.c:42,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/exec.c:43,9'
              BranchSideFuncs:
                - abort
            - BranchSide:      '../libqrexec/exec.c:44,17'
              BranchSideFuncs: []
      Callsites:
        - Src:             '../libqrexec/exec.c:43,9'
          Dst:             abort
    - functionName:    log_time
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 36
      functionDepth:   0
      returnType:      void
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         12
      ICount:          73
      EdgeCount:       12
      CyclomaticComplexity: 2
      functionsReached:
        - fprintf
        - gettimeofday
        - localtime_r
        - strftime
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/log.c:35,18'
          Branch Sides:
            - BranchSide:      '../libqrexec/log.c:35,18'
              BranchSideFuncs:
                - llvm.stacksave
                - gettimeofday
                - __sanitizer_cov_trace_const_cmp4
                - localtime_r
                - llvm.stackrestore
                - __sanitizer_cov_trace_switch
                - strftime
                - fprintf
            - BranchSide:      '../libqrexec/log.c:35,18'
              BranchSideFuncs:
                - llvm.stacksave
                - gettimeofday
                - __sanitizer_cov_trace_const_cmp4
                - localtime_r
                - llvm.stackrestore
                - __sanitizer_cov_trace_switch
                - strftime
                - fprintf
        - Branch String:   '../libqrexec/log.c:41,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/log.c:0,0'
              BranchSideFuncs:
                - llvm.stackrestore
                - __sanitizer_cov_trace_switch
            - BranchSide:      '../libqrexec/log.c:44,32'
              BranchSideFuncs:
                - localtime_r
                - llvm.stackrestore
                - __sanitizer_cov_trace_switch
                - strftime
                - fprintf
        - Branch String:   '../libqrexec/log.c:44,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/log.c:0,0'
              BranchSideFuncs:
                - strftime
                - fprintf
                - llvm.stackrestore
                - __sanitizer_cov_trace_switch
            - BranchSide:      '../libqrexec/log.c:47,49'
              BranchSideFuncs:
                - strftime
                - fprintf
                - llvm.stackrestore
                - __sanitizer_cov_trace_switch
        - Branch String:   ''
          Branch Sides:
            - BranchSide:      '../libqrexec/log.c:0,0'
              BranchSideFuncs: []
            - BranchSide:      '../libqrexec/log.c:0,0'
              BranchSideFuncs: []
      Callsites:
        - Src:             '../libqrexec/log.c:41,9'
          Dst:             gettimeofday
        - Src:             '../libqrexec/log.c:44,16'
          Dst:             localtime_r
        - Src:             '../libqrexec/log.c:47,5'
          Dst:             strftime
        - Src:             '../libqrexec/log.c:48,5'
          Dst:             fprintf
    - functionName:    gettimeofday
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - 'struct.timespec *'
        - 'char *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    localtime_r
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'struct.tm *'
      argCount:        2
      argTypes:
        - 'size_t *'
        - 'struct.tm *'
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    strftime
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      size_t
      argCount:        4
      argTypes:
        - 'char *'
        - size_t
        - 'char *'
        - 'struct.tm *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    setup_logging
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 78
      functionDepth:   0
      returnType:      void
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - program_name
      BBCount:         1
      ICount:          9
      EdgeCount:       1
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    0
      BranchProfiles:  []
      Callsites:       []
    - functionName:    qrexec_logv
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 55
      functionDepth:   0
      returnType:      void
      argCount:        7
      argTypes:
        - int
        - int
        - 'char *'
        - int
        - 'char *'
        - 'char *'
        - 'struct.__va_list_tag *'
      constantsTouched: []
      argNames:
        - level
        - errnoval
        - file
        - line
        - func
        - fmt
        - ap
      BBCount:         8
      ICount:          94
      EdgeCount:       10
      CyclomaticComplexity: 4
      functionsReached:
        - __errno_location
        - fflush
        - fprintf
        - getpid
        - log_time
        - strerror_r
        - vfprintf
      functionUses:    1
      BranchProfiles:
        - Branch String:   '../libqrexec/log.c:63,23'
          Branch Sides:
            - BranchSide:      '../libqrexec/log.c:63,44'
              BranchSideFuncs:
                - strerror_r
                - fprintf
                - fflush
                - __errno_location
                - llvm.stackrestore
                - fprintf
            - BranchSide:      '../libqrexec/log.c:63,23'
              BranchSideFuncs:
                - fprintf
                - fflush
                - __errno_location
                - llvm.stackrestore
        - Branch String:   '../libqrexec/log.c:63,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/log.c:63,9'
              BranchSideFuncs:
                - fprintf
                - fprintf
                - fflush
                - __errno_location
                - llvm.stackrestore
            - BranchSide:      '../libqrexec/log.c:64,17'
              BranchSideFuncs:
                - fprintf
                - fprintf
                - fflush
                - __errno_location
                - llvm.stackrestore
      Callsites:
        - Src:             '../libqrexec/log.c:57,18'
          Dst:             __errno_location
        - Src:             '../libqrexec/log.c:59,5'
          Dst:             log_time
        - Src:             '../libqrexec/log.c:60,54'
          Dst:             getpid
        - Src:             '../libqrexec/log.c:60,5'
          Dst:             fprintf
        - Src:             '../libqrexec/log.c:61,5'
          Dst:             fprintf
        - Src:             '../libqrexec/log.c:62,5'
          Dst:             vfprintf
        - Src:             '../libqrexec/log.c:63,33'
          Dst:             strerror_r
        - Src:             '../libqrexec/log.c:64,9'
          Dst:             fprintf
        - Src:             '../libqrexec/log.c:65,5'
          Dst:             fprintf
        - Src:             '../libqrexec/log.c:66,5'
          Dst:             fflush
        - Src:             '../libqrexec/log.c:67,5'
          Dst:             __errno_location
    - functionName:    getpid
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        0
      argTypes:        []
      constantsTouched: []
      argNames:        []
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    vfprintf
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - 'struct._IO_FILE *'
        - 'char *'
        - 'struct.__va_list_tag *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    strerror_r
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - int
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    fflush
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - 'struct._IO_FILE *'
      constantsTouched: []
      argNames:
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    qrexec_log
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/log.c'
      linkageType:     InternalLinkage
      functionLinenumber: 71
      functionDepth:   0
      returnType:      void
      argCount:        6
      argTypes:
        - int
        - int
        - 'char *'
        - int
        - 'char *'
        - 'char *'
      constantsTouched: []
      argNames:
        - level
        - errnoval
        - file
        - line
        - func
        - fmt
      BBCount:         3
      ICount:          45
      EdgeCount:       3
      CyclomaticComplexity: 2
      functionsReached:
        - qrexec_logv
      functionUses:    0
      BranchProfiles:  []
      Callsites:
        - Src:             '../libqrexec/log.c:74,5'
          Dst:             qrexec_logv
    - functionName:    do_accept
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/unix-server.c'
      linkageType:     InternalLinkage
      functionLinenumber: 64
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - int
      constantsTouched: []
      argNames:
        - s
      BBCount:         5
      ICount:          43
      EdgeCount:       5
      CyclomaticComplexity: 2
      functionsReached:
        - accept
        - fuzz_exit
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/unix-server.c:70,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/unix-server.c:72,9'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/unix-server.c:74,12'
              BranchSideFuncs: []
      Callsites:
        - Src:             '../libqrexec/unix-server.c:69,10'
          Dst:             accept
        - Src:             '../libqrexec/unix-server.c:72,9'
          Dst:             fuzz_exit
    - functionName:    accept
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - int
        - 'struct.sockaddr *'
        - 'int *'
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    get_server_socket
      functionSourceFile: '/src/qubes-os/qubes-core-qrexec/fuzz/../libqrexec/unix-server.c'
      linkageType:     InternalLinkage
      functionLinenumber: 33
      functionDepth:   0
      returnType:      int
      argCount:        1
      argTypes:
        - 'char *'
      constantsTouched: []
      argNames:
        - socket_address
      BBCount:         9
      ICount:          76
      EdgeCount:       9
      CyclomaticComplexity: 2
      functionsReached:
        - bind
        - close
        - fuzz_exit
        - listen
        - socket
        - strncpy
        - unlink
      functionUses:    0
      BranchProfiles:
        - Branch String:   '../libqrexec/unix-server.c:40,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/unix-server.c:42,9'
              BranchSideFuncs:
                - fuzz_exit
            - BranchSide:      '../libqrexec/unix-server.c:44,5'
              BranchSideFuncs:
                - llvm.memset.p0i8.i64
                - strncpy
                - bind
                - __sanitizer_cov_trace_const_cmp4
                - listen
                - __sanitizer_cov_trace_const_cmp4
                - close
                - fuzz_exit
                - close
                - fuzz_exit
        - Branch String:   '../libqrexec/unix-server.c:49,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/unix-server.c:51,15'
              BranchSideFuncs:
                - close
                - fuzz_exit
            - BranchSide:      '../libqrexec/unix-server.c:55,16'
              BranchSideFuncs:
                - listen
                - __sanitizer_cov_trace_const_cmp4
                - close
                - fuzz_exit
        - Branch String:   '../libqrexec/unix-server.c:55,9'
          Branch Sides:
            - BranchSide:      '../libqrexec/unix-server.c:57,15'
              BranchSideFuncs:
                - close
                - fuzz_exit
            - BranchSide:      '../libqrexec/unix-server.c:60,12'
              BranchSideFuncs: []
      Callsites:
        - Src:             '../libqrexec/unix-server.c:37,5'
          Dst:             unlink
        - Src:             '../libqrexec/unix-server.c:39,9'
          Dst:             socket
        - Src:             '../libqrexec/unix-server.c:42,9'
          Dst:             fuzz_exit
        - Src:             '../libqrexec/unix-server.c:46,5'
          Dst:             strncpy
        - Src:             '../libqrexec/unix-server.c:49,9'
          Dst:             bind
        - Src:             '../libqrexec/unix-server.c:51,9'
          Dst:             close
        - Src:             '../libqrexec/unix-server.c:52,9'
          Dst:             fuzz_exit
        - Src:             '../libqrexec/unix-server.c:55,9'
          Dst:             listen
        - Src:             '../libqrexec/unix-server.c:57,9'
          Dst:             close
        - Src:             '../libqrexec/unix-server.c:58,9'
          Dst:             fuzz_exit
    - functionName:    strncpy
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      'char *'
      argCount:        3
      argTypes:
        - 'char *'
        - 'char *'
        - size_t
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    bind
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        3
      argTypes:
        - int
        - 'struct.sockaddr *'
        - int
      constantsTouched: []
      argNames:
        - ''
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
    - functionName:    listen
      functionSourceFile: ''
      linkageType:     externalLinkage
      functionLinenumber: -1
      functionDepth:   0
      returnType:      int
      argCount:        2
      argTypes:
        - int
        - int
      constantsTouched: []
      argNames:
        - ''
        - ''
      BBCount:         0
      ICount:          0
      EdgeCount:       0
      CyclomaticComplexity: 2
      functionsReached: []
      functionUses:    1
      BranchProfiles:  []
      Callsites:       []
...
