High level conclusions

Fuzzer fuzz_command_parser is blocked:

The runtime code coverage of fuzz_command_parser covers 25.33% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_rtp_parser is blocked:

The runtime code coverage of fuzz_rtp_parser covers 21.79% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 17.46% of cyclomatic complexity.

Fuzzers reach 17.30% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

171 / 988

Cyclomatic complexity statically reachable by fuzzers

1060 / 6068

Runtime code coverage of functions

252 / 988

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_rtp_parser

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	98	74.2%
gold	[1:9]	23	17.4%
yellow	[10:29]	5	3.78%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	6	4.54%
All colors	132	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2	2	1 : View List ['fflush']	2	2	rtpp_log_obj_write_early	call site: 00012	/src/rtpproxy/src/rtpp_log_obj.c:163
0	26	1 : View List ['update_jitter_stats']	0	26	update_rtpp_stats	call site: 00000	/src/rtpproxy/src/rtp_analyze.c:373
0	0	None	0	4	rtpp_rzmalloc	call site: 00008	/src/rtpproxy/src/rtpp_mallocs.c:83
0	0	None	0	0	rtpp_stats_init	call site: 00117	/src/rtpproxy/src/rtp_analyze.c:215
0	0	None	0	0	update_rtpp_stats	call site: 00000	/src/rtpproxy/src/rtp_analyze.c:357
0	0	None	0	0	update_rtpp_totals	call site: 00000	/src/rtpproxy/src/rtp_analyze.c:511
0	0	None	0	0	update_rtpp_totals	call site: 00000	/src/rtpproxy/src/rtp_analyze.c:516
0	0	None	0	0	rtp_analyze_jt_ctor	call site: 00118	/src/rtpproxy/src/rtp_analyze.c:249
0	0	1 : View List ['free']	0	0	rtp_analyze_jt_ctor	call site: 00119	/src/rtpproxy/src/rtp_analyze.c:253
0	0	None	0	0	rtp_analyze_jdata_ctor	call site: 00120	/src/rtpproxy/src/rtp_analyze.c:228
0	0	1 : View List ['free']	0	0	rtp_analyze_jdata_ctor	call site: 00121	/src/rtpproxy/src/rtp_analyze.c:232
0	0	None	0	0	jdata_by_ssrc	call site: 00000	/src/rtpproxy/src/rtp_analyze.c:313

Runtime coverage analysis

Covered functions

36

Functions that are reachable but not covered

61

Reachable functions

78

Percentage of reachable functions covered

21.79%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
scripts/fuzz/fuzz_rtp_parser.c	1
src/rtpp_genuid_singlet.c	2
src/rtpp_genuid.c	3
src/rtpp_mallocs.c	2
src/rtpp_log_obj.c	9
src/rtpp_refcnt.c	2
src/rtpp_log_stand.c	10
src/rtpp_syslog_async.c	7
src/rtpp_time.c	2
src/rtpp_util.c	1
src/rtpp_analyzer.c	2
src/rtp_analyze.c	5
src/rtpp_ringbuf.c	2
src/rtp_packet.c	1

Fuzzer: fuzz_rtcp_parser

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	42	100.%
All colors	42	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	0	rtpp_sbuf_write	call site: 00008	/src/rtpproxy/modules/acct_rtcp_hep/rtpp_sbuf.c:52
0	0	None	0	0	rtpp_sbuf_ctor	call site: 00001	/src/rtpproxy/modules/acct_rtcp_hep/rtpp_sbuf.c:68
0	0	None	0	0	rtpp_sbuf_ctor	call site: 00001	/src/rtpproxy/modules/acct_rtcp_hep/rtpp_sbuf.c:72
0	0	None	0	0	rtpp_sbuf_extend	call site: 00000	/src/rtpproxy/modules/acct_rtcp_hep/rtpp_sbuf.c:96

Runtime coverage analysis

Covered functions

8

Functions that are reachable but not covered

4

Reachable functions

10

Percentage of reachable functions covered

60.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
scripts/fuzz/fuzz_rtcp_parser.c	1
modules/acct_rtcp_hep/rtpp_sbuf.c	3
modules/acct_rtcp_hep/rtcp2json.c	1

Fuzzer: fuzz_command_parser

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	321	68.1%
gold	[1:9]	32	6.79%
yellow	[10:29]	36	7.64%
greenyellow	[30:49]	13	2.76%
lawngreen	50+	69	14.6%
All colors	471	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1827	1827	2 : View List ['init_config_bail', 'rtpp_cfile_process']	1855	1875	init_config	call site: 00000	/src/rtpproxy/src/main.c:676
987	1063	11 : View List ['rtp_resizer_new', 'rtpp_session_ctor', 'rtpp_rlim_max', 'rtp_resizer_free', 'rtpp_create_listener', 'rtp_resizer_set_ptime', 'rtpp_timeout_data_ctor', 'handle_copy', 'free', 'ul_reply_port', 'handle_nomem']	987	1167	rtpp_command_ul_handle	call site: 00290	/src/rtpproxy/src/../src/commands/rpcpv1_ul.c:520
129	1181	6 : View List ['rtpp_command_stream_get', 'handle_command', 'free_command', 'flush_cstats', 'pthread_mutex_unlock', 'pthread_mutex_lock']	129	1181	process_commands_stream	call site: 00000	/src/rtpproxy/src/rtpp_command_async.c:230
82	82	3 : View List ['prdic_free', 'free', 'rtpp_queue_destroy']	82	82	rtpp_timed_ctor	call site: 00000	/src/rtpproxy/src/rtpp_timed.c:174
76	83	7 : View List ['_rtpp_log_lock', 'strlvl', 'fflush', '_rtpp_log_unlock', 'ftime', 'vsyslog_async', 'getdtime']	76	83	_rtpp_log_write_va	call site: 00347	/src/rtpproxy/src/rtpp_log_stand.c:256
67	67	3 : View List ['rtpp_netio_async_destroy', 'rtpp_proc_async_thread_destroy', 'free']	67	67	rtpp_proc_async_ctor	call site: 00000	/src/rtpproxy/src/rtpp_proc_async.c:373
55	84	5 : View List ['rtpp_queue_get_item', 'getdtime', 'rtpp_queue_get_item_by', 'run_servers', 'dtime2mtimespec']	61	90	rtpp_proc_servers_run	call site: 00000	/src/rtpproxy/src/rtpp_proc_servers.c:188
50	50	1 : View List ['syslog_async_init']	60	70	_rtpp_log_open	call site: 00310	/src/rtpproxy/src/rtpp_log_stand.c:87
46	46	2 : View List ['rtpp_daemon', 'getcwd']	147	2672	rtpp_main	call site: 00000	/src/rtpproxy/src/main.c:966
38	38	1 : View List ['rtpp_anetio_sendto']	38	38	rtpc_doreply	call site: 00027	/src/rtpproxy/src/rtpp_command.c:199
33	33	2 : View List ['dlclose', 'rtpp_queue_destroy']	33	33	rtpp_mif_load	call site: 00000	/src/rtpproxy/src/rtpp_module_if.c:276
31	31	2 : View List ['free', 'rtpp_queue_destroy']	31	31	rtpp_notify_ctor	call site: 00000	/src/rtpproxy/src/rtpp_notify.c:129

Runtime coverage analysis

Covered functions

225

Functions that are reachable but not covered

168

Reachable functions

225

Percentage of reachable functions covered

25.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
scripts/fuzz/fuzz_command_parser.c	1
src/rtpp_command.c	12
src/rtpp_mallocs.c	3
src/rtpp_util.c	6
src/rtpp_netio_async.c	2
src/rtpp_wi_pkt.c	4
src/rtpp_refcnt.c	2
src/rtpp_queue.c	3
src/rtpp_command_parse.c	2
src/../src/commands/rpcpv1_ver.c	1
src/../src/commands/rpcpv1_play.c	3
src/../src/commands/rpcpv1_delete.c	5
src/../src/commands/rpcpv1_ul.c	6
src/rtpp_network.c	6
src/../src/commands/rpcpv1_stats.c	1
src/../src/commands/rpcpv1_ul_subc.c	1
src/rtpp_session.c	5
src/../src/commands/rpcpv1_record.c	2
src/../src/commands/rpcpv1_copy.c	1
src/rtpp_record.c	4
src/../src/commands/rpcpv1_norecord.c	3
src/../src/commands/rpcpv1_query.c	2
src/rtpp_socket.c	15
src/rtp_packet.c	2
src/rtpp_network_io.c	2
src/rtpp_genuid_singlet.c	1
src/rtpp_log_obj.c	9
src/rtpp_log_stand.c	10
src/rtpp_syslog_async.c	7
src/rtpp_time.c	3
src/rtpp_pipe.c	2
src/rtpp_stream.c	4
src/rtpp_analyzer.c	2
src/rtp_analyze.c	5
src/rtpp_ringbuf.c	2
src/rtp_resizer.c	5
src/rtp.c	4
src/rtpp_pcnt_strm.c	2
src/rtpp_netaddr.c	2
src/rtpp_pcount.c	2
src/rtpp_acct.c	2
src/../src/rtpp_str.h	2
src/rtpp_str.c	1
src/rtpp_ttl.c	2
src/main.c	1
src/rtpp_timeout_data.c	1

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
rtpp_main	/src/rtpproxy/src/main.c	2	['int ', 'char **']	13	0	726	103	15	708	1	4172	3072
rtpp_dtls_gw_ctor	/src/rtpproxy/modules/dtls_gw/rtpp_dtls_gw.c	1	['struct.rtpp_cfg *']	7	0	91	13	5	116	0	338	295
hash_table_transfer	/src/rtpproxy/src/rtpp_hash_table.c	4	['struct.rtpp_hash_table *', 'char *', 'struct.rtpp_hash_table *', 'struct.rtpp_ht_opstats *']	4	0	84	6	3	31	0	248	233
ucl_emitter_common_elt	/src/rtpproxy/libucl/../external/libucl/src/ucl_emitter.c	5	['struct.ucl_emitter_context.2454 *', 'struct.ucl_object_s *', 'N/A', 'N/A', 'N/A']	4	0	603	69	19	43	15	210	107
rtpp_analyzer_update	/src/rtpproxy/src/rtpp_analyzer.c	2	['struct.rtpp_analyzer *', 'struct.rtp_packet *']	5	0	93	9	4	21	0	155	87
rtpp_record_write	/src/rtpproxy/src/rtpp_record.c	2	['struct.rtpp_record *', 'struct.pkt_proc_ctx *']	3	0	33	3	2	23	0	115	75
rtpp_stream_rx	/src/rtpproxy/src/rtpp_stream.c	4	['struct.rtpp_stream *', 'struct.rtpp_weakref *', 'struct.rtpp_timestamp *', 'struct.rtpp_proc_rstats *']	4	0	254	30	11	27	0	141	65
ucl_object_merge	/src/rtpproxy/libucl/../external/libucl/src/ucl_util.c	3	['struct.ucl_object_s *', 'struct.ucl_object_s *', 'N/A']	6	0	357	53	20	57	1	388	57
ucl_emit_msgpack_elt	/src/rtpproxy/libucl/../external/libucl/src/ucl_emitter.c	4	['struct.ucl_emitter_context.2454 *', 'struct.ucl_object_s *', 'N/A', 'N/A']	1	0	270	35	7	20	1	87	55
rtpp_acct_csv_do	/src/rtpproxy/modules/acct_csv/rtpp_acct_csv.c	2	['struct.rtpp_module_priv.35 *', 'struct.rtpp_acct *']	2	0	527	37	15	17	0	72	54

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

685 / 988

Cyclomatic complexity statically reachable by fuzzers

4806 / 6068

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
update_jitter_stats	83	26	31.32%	[]
rtpp_catch_dtmf_worker	75	35	46.66%	[]
rtpp_dtls_ctor	39	17	43.58%	[]
rtpp_dtls_gw_worker	45	11	24.44%	[]
ul_reply_port	43	20	46.51%	['fuzz_command_parser']
rtpp_command_ul_handle	241	35	14.52%	['fuzz_command_parser']
rtpp_main	238	85	35.71%	[]
init_config	439	151	34.39%	[]
rtpc_doreply	32	17	53.12%	['fuzz_command_parser']
rtpp_command_async_ctor	70	25	35.71%	[]
init_accptset	35	11	31.42%	[]
process_commands_stream	37	7	18.91%	[]
rtpp_controlfd_init	47	19	40.42%	[]
rtpp_ctrl_sock_parse	42	17	40.47%	[]
hash_table_foreach_key_raw	33	11	33.33%	[]
_rtpp_log_write_va	35	9	25.71%	['fuzz_rtp_parser', 'fuzz_command_parser']
rtpp_mif_load	102	44	43.13%	[]
rtpp_mif_run_acct	36	17	47.22%	[]
rtpp_netio_async_init	51	21	41.17%	[]
rtpp_anetio_sthread	36	10	27.77%	[]
rtpp_notify_ctor	33	15	45.45%	[]
rtpp_proc_async_thread_init	33	17	51.51%	[]
rtpp_proc_servers_ctor	45	20	44.44%	[]
rtpp_proc_servers_run	47	16	34.04%	[]
rtpp_proc_ttl_ctor	32	17	53.12%	[]
rtpp_proc_wakeup_run	46	20	43.47%	[]
rtpp_queue_init	45	23	51.11%	[]
rtpp_sinfo_sync_polltbl	82	13	15.85%	[]
rtpp_timed_ctor	47	21	44.68%	[]
rtpp_timed_queue_run	33	16	48.48%	[]
rtpp_tnotify_set_append	52	23	44.23%	[]
parse_timeout_sock	58	30	51.72%	[]

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/rtpproxy/src/rtpp_network.c	['fuzz_command_parser']	['fuzz_command_parser']
/src/rtpproxy/src/rtpp_sessinfo.c	[]	[]
/src/rtpproxy/src/../src/advanced/pproc_manager.c	[]	[]
/src/rtpproxy/src/rtpp_proc_servers.c	[]	[]
/src/rtpproxy/libucl/../external/libucl/src/ucl_util.c	[]	[]
/src/rtpproxy/src/../src/commands/rpcpv1_ul_subc.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtp_resizer.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_module_if.c	[]	[]
/src/rtpproxy/src/rtpp_ringbuf.c	['fuzz_rtp_parser', 'fuzz_command_parser']	['fuzz_rtp_parser']
/src/rtpproxy/libucl/../external/libucl/src/ucl_parser.c	[]	[]
/src/rtpproxy/src/rtpp_analyzer.c	['fuzz_rtp_parser', 'fuzz_command_parser']	['fuzz_rtp_parser']
/src/rtpproxy/src/../libxxHash/../external/xxHash/xxhash.h	[]	[]
/src/rtpproxy/libelperiodic/src/prdic_recfilter.c	[]	[]
/src/rtpproxy/src/../src/commands/rpcpv1_ver.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_mallocs.c	['fuzz_rtp_parser', 'fuzz_command_parser']	['fuzz_rtp_parser', 'fuzz_command_parser']
/src/rtpproxy/libucl/../external/libucl/src/ucl_emitter_utils.c	[]	[]
/src/rtpproxy/src/rtpp_log_stand.c	['fuzz_rtp_parser', 'fuzz_command_parser']	['fuzz_command_parser']
/src/rtpproxy/src/rtpp_timeout_data.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_pcnt_strm.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_proc_wakeup.c	[]	[]
/src/rtpproxy/src/rtp.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_command.c	['fuzz_command_parser']	['fuzz_command_parser']
/src/rtpproxy/src/../src/commands/rpcpv1_norecord.c	['fuzz_command_parser']	[]
/src/rtpproxy/libelperiodic/src/prdic_sign.c	[]	[]
/src/rtpproxy/scripts/fuzz/fuzz_command_parser.c	['fuzz_command_parser']	['fuzz_command_parser']
/src/rtpproxy/modules/dtls_gw/rtpp_dtls.c	[]	[]
/src/rtpproxy/modules/acct_rtcp_hep/rtpp_arh_conf.c	[]	[]
/src/rtpproxy/src/rtpp_command_parse.c	['fuzz_command_parser']	['fuzz_command_parser']
/src/rtpproxy/src/rtpp_session.c	['fuzz_command_parser']	['fuzz_command_parser']
/src/rtpproxy/libelperiodic/src/periodic.c	[]	[]
/src/rtpproxy/src/rtpp_server.c	[]	[]
/src/rtpproxy/src/rtpp_wi_data.c	[]	[]
/src/rtpproxy/src/rtpp_wi_apis.c	[]	[]
/src/rtpproxy/libelperiodic/src/prdic_main_pfd.c	[]	[]
/src/rtpproxy/src/rtpp_pearson.c	[]	[]
/src/rtpproxy/src/rtpp_port_table.c	[]	[]
/src/rtpproxy/src/rtpp_network_io.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_stats.c	[]	[]
/src/rtpproxy/src/../src/commands/rpcpv1_query.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_netaddr.c	['fuzz_command_parser']	[]
/src/rtpproxy/libelperiodic/src/prdic_main.c	[]	[]
/src/rtpproxy/modules/dtls_gw/rtpp_dtls_gw.c	[]	[]
/src/rtpproxy/src/rtpp_hash_table.c	[]	[]
/src/rtpproxy/libelperiodic/src/./prdic_time.h	[]	[]
/src/rtpproxy/modules/acct_rtcp_hep/rtpp_acct_rtcp_hep.c	[]	[]
/src/rtpproxy/src/rtpp_notify.c	[]	[]
/src/rtpproxy/src/../src/commands/rpcpv1_ul.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_ttl.c	['fuzz_command_parser']	[]
/src/rtpproxy/libelperiodic/src/prdic_shmtrig.c	[]	[]
/src/rtpproxy/src/rtpp_socket.c	['fuzz_command_parser']	[]
/src/rtpproxy/libelperiodic/src/prdic_main_fd.c	[]	[]
/src/rtpproxy/libucl/../external/libucl/src/ucl_hash.c	[]	[]
/src/rtpproxy/src/rtp_packet.c	['fuzz_rtp_parser', 'fuzz_command_parser']	['fuzz_rtp_parser']
/src/rtpproxy/src/rtpp_module_if_static.c	[]	[]
/src/rtpproxy/src/rtpp_command_rcache.c	[]	[]
/src/rtpproxy/src/rtpp_epoll.c	[]	[]
/src/rtpproxy/src/rtpp_proc_ttl.c	[]	[]
/src/rtpproxy/src/rtpp_nofile.c	[]	[]
/src/rtpproxy/libucl/../external/libucl/src/ucl_emitter.c	[]	[]
/src/rtpproxy/modules/catch_dtmf/rtpp_catch_dtmf.c	[]	[]
/src/rtpproxy/src/rtpp_pcount.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_command_async.c	[]	[]
/src/rtpproxy/modules/acct_rtcp_hep/../../hepconnector/core_hep.c	[]	[]
/src/rtpproxy/libucl/../external/libucl/src/ucl_chartable.h	[]	[]
/src/rtpproxy/src/../src/commands/rpcpv1_copy.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/../src/commands/rpcpv1_stats.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/../src/commands/rpcpv1_delete.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_proc.c	[]	[]
/src/rtpproxy/src/rtpp_pearson_perfect.c	[]	[]
/src/rtpproxy/src/rtpp_genuid_singlet.c	['fuzz_rtp_parser', 'fuzz_command_parser']	['fuzz_rtp_parser', 'fuzz_command_parser']
/src/rtpproxy/modules/acct_rtcp_hep/rtpp_sbuf.c	['fuzz_rtcp_parser']	['fuzz_rtcp_parser']
/src/rtpproxy/src/main.c	['fuzz_command_parser']	['fuzz_command_parser']
/src/rtpproxy/src/rtpp_genuid.c	['fuzz_rtp_parser']	['fuzz_rtp_parser']
/src/rtpproxy/src/rtpp_ucl.c	[]	[]
/src/rtpproxy/src/rtpp_bindaddrs.c	[]	[]
/src/rtpproxy/src/rtpp_syslog_async.c	['fuzz_rtp_parser', 'fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_util.c	['fuzz_rtp_parser', 'fuzz_command_parser']	['fuzz_command_parser']
/src/rtpproxy/src/rtpp_wi_pkt.c	['fuzz_command_parser']	[]
/src/rtpproxy/scripts/fuzz/fuzz_rtp_parser.c	['fuzz_rtp_parser']	['fuzz_rtp_parser']
/src/rtpproxy/src/rtpp_tnotify_set.c	[]	[]
/src/rtpproxy/src/rtpp_weakref.c	[]	[]
/src/rtpproxy/modules/dtls_gw/rtpp_dtls_conn.c	[]	[]
/src/rtpproxy/libelperiodic/src/prdic_fd.c	[]	[]
/src/rtpproxy/libucl/../external/libucl/src/ucl_msgpack.c	[]	[]
/src/rtpproxy/src/rtpp_cfile.c	[]	[]
/src/rtpproxy/libucl/../external/libucl/src/ucl_internal.h	[]	[]
/src/rtpproxy/modules/dtls_gw/rtpp_dtls_util.c	[]	[]
/src/rtpproxy/src/rtpp_str.c	['fuzz_command_parser']	[]
/src/rtpproxy/scripts/fuzz/fuzz_rtcp_parser.c	['fuzz_rtcp_parser']	['fuzz_rtcp_parser']
/src/rtpproxy/src/rtpp_refcnt.c	['fuzz_rtp_parser', 'fuzz_command_parser']	['fuzz_rtp_parser', 'fuzz_command_parser']
/src/rtpproxy/src/../src/commands/rpcpv1_record.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_timed.c	[]	[]
/src/rtpproxy/src/rtpp_acct.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_stream.c	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtp_analyze.c	['fuzz_rtp_parser', 'fuzz_command_parser']	['fuzz_rtp_parser']
/src/rtpproxy/libelperiodic/src/prdic_pfd.c	[]	[]
/src/rtpproxy/src/rtpp_proc_async.c	[]	[]
/src/rtpproxy/modules/acct_rtcp_hep/rtcp2json.c	['fuzz_rtcp_parser']	['fuzz_rtcp_parser']
/src/rtpproxy/src/rtpp_log_obj.c	['fuzz_rtp_parser', 'fuzz_command_parser']	['fuzz_rtp_parser', 'fuzz_command_parser']
/src/rtpproxy/src/rtpp_queue.c	['fuzz_command_parser']	['fuzz_command_parser']
/src/rtpproxy/src/rtpp_command_stream.c	[]	[]
/src/rtpproxy/src/rtpp_time.c	['fuzz_rtp_parser', 'fuzz_command_parser']	['fuzz_command_parser']
/src/rtpproxy/src/../src/rtpp_str.h	['fuzz_command_parser']	[]
/src/rtpproxy/src/rtpp_modman.c	[]	[]
/src/rtpproxy/libelperiodic/src/prdic_math.c	[]	[]
/src/rtpproxy/src/rtpp_controlfd.c	[]	[]
/src/rtpproxy/src/rtpp_netio_async.c	['fuzz_command_parser']	['fuzz_command_parser']
/src/rtpproxy/libucl/../external/libucl/src/ucl_sexp.c	[]	[]
/src/rtpproxy/src/../src/rtpp_list.h	[]	[]
/src/rtpproxy/modules/acct_csv/rtpp_acct_csv.c	[]	[]
/src/rtpproxy/src/../src/commands/rpcpv1_play.c	['fuzz_command_parser']	[]
/src/rtpproxy/libucl/../external/libucl/uthash/utstring.h	[]	[]
/src/rtpproxy/src/rtpp_pipe.c	['fuzz_command_parser']	[]
/src/rtpproxy/libucl/../external/libucl/src/mum.h	[]	[]
/src/rtpproxy/src/rtpp_wi_sgnl.c	[]	[]
/src/rtpproxy/src/rtpp_acct_rtcp.c	[]	[]
/src/rtpproxy/src/rtpp_record.c	['fuzz_command_parser']	[]

Directories in report

Directory
/src/rtpproxy/src/../libxxHash/../external/xxHash/
/src/rtpproxy/libelperiodic/src/./
/src/rtpproxy/scripts/fuzz/
/src/rtpproxy/src/../src/
/src/rtpproxy/libelperiodic/src/
/src/rtpproxy/src/../src/commands/
/src/rtpproxy/modules/acct_rtcp_hep/
/src/rtpproxy/modules/acct_csv/
/src/rtpproxy/modules/acct_rtcp_hep/../../hepconnector/
/src/rtpproxy/libucl/../external/libucl/src/
/src/rtpproxy/src/../src/advanced/
/src/rtpproxy/src/
/src/rtpproxy/modules/dtls_gw/
/src/rtpproxy/modules/catch_dtmf/
/src/rtpproxy/libucl/../external/libucl/uthash/