Project overview: solidity

2130

536

925

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

42.05%

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/solidity/test/tools/ossfuzz/strictasm_opt_ossfuzz.cpp	1
/src/solidity/libyul/YulString.h	13
/src/solidity/liblangutil/EVMVersion.h	15
/src/solidity/libsolidity/interface/OptimiserSettings.h	5
/src/solidity/liblangutil/DebugInfoSelection.cpp	1
/src/solidity/liblangutil/DebugInfoSelection.h	2
/src/solidity/build/deps/include/range/v3/view/view.hpp	18
/src/solidity/build/deps/include/range/v3/view/map.hpp	1
/src/solidity/build/deps/include/range/v3/view/all.hpp	7
/src/solidity/build/deps/include/range/v3/range_fwd.hpp	5
/src/solidity/build/deps/include/range/v3/view/ref.hpp	6
/src/solidity/build/deps/include/range/v3/view/transform.hpp	16
/src/solidity/build/deps/include/range/v3/functional/indirect.hpp	2
/src/solidity/build/deps/include/range/v3/view/adaptor.hpp	8
/src/solidity/build/deps/include/range/v3/view/facade.hpp	7
/src/solidity/build/deps/include/range/v3/detail/range_access.hpp	6
/src/solidity/build/deps/include/range/v3/view/interface.hpp	1
/src/solidity/build/deps/include/range/v3/range/access.hpp	9
/src/solidity/build/deps/include/range/v3/utility/compressed_pair.hpp	1
/src/solidity/build/deps/include/range/v3/utility/box.hpp	6
/src/solidity/build/deps/include/range/v3/iterator/basic_iterator.hpp	35
/src/solidity/libyul/YulStack.h	2
/src/solidity/liblangutil/CharStreamProvider.h	2
/src/solidity/liblangutil/ErrorReporter.h	6
/src/solidity/libyul/YulStack.cpp	6
/src/solidity/libyul/backends/evm/EVMDialect.cpp	8
/src/solidity/libyul/backends/wasm/WasmDialect.cpp	1
/src/solidity/libyul/Exceptions.h	4
/usr/local/include/c++/v1/exception	1
/usr/include/boost/exception/exception.hpp	14
/src/solidity/libsolutil/Exceptions.h	4
/src/solidity/libsolutil/Assertions.h	1
/usr/include/boost/exception/detail/error_info_impl.hpp	3
/usr/include/boost/exception/info.hpp	11
/usr/include/boost/smart_ptr/shared_ptr.hpp	6
/usr/include/boost/smart_ptr/detail/shared_count.hpp	4
/usr/include/boost/smart_ptr/detail/sp_counted_impl.hpp	1
/usr/include/boost/smart_ptr/detail/sp_counted_base_clang.hpp	6
/usr/include/boost/core/checked_delete.hpp	1
/usr/include/boost/exception/detail/type_info.hpp	1
/usr/include/boost/throw_exception.hpp	12
/src/solidity/libyul/ObjectParser.h	1
/src/solidity/liblangutil/ParserBase.h	4
/src/solidity/libyul/ObjectParser.cpp	8
/src/solidity/liblangutil/ParserBase.cpp	11
/src/solidity/liblangutil/Scanner.h	21
/src/solidity/liblangutil/Exceptions.h	5
/src/solidity/liblangutil/CharStream.h	8
/src/solidity/liblangutil/Scanner.cpp	29
/src/solidity/liblangutil/Common.h	6
/src/solidity/liblangutil/CharStream.cpp	3
/src/solidity/liblangutil/SourceLocation.h	5
/usr/local/include/c++/v1/optional	14
/src/solidity/liblangutil/Token.cpp	9
/src/solidity/libsolutil/StringUtils.h	3
/src/solidity/liblangutil/Token.h	6
/src/solidity/liblangutil/ErrorReporter.cpp	7
/usr/include/boost/assert/source_location.hpp	4
/src/solidity/libyul/Object.h	1
/src/solidity/libyul/AsmParser.h	13
/src/solidity/libyul/AsmParser.cpp	20
/src/solidity/libsolutil/Common.h	4
/usr/include/boost/algorithm/string/predicate.hpp	6
/usr/include/boost/range/as_literal.hpp	5
/usr/include/boost/range/begin.hpp	3
/usr/include/boost/range/iterator_range_core.hpp	2
/usr/include/boost/range/end.hpp	3
/usr/include/boost/algorithm/string/detail/predicate.hpp	1
/usr/include/boost/algorithm/string/compare.hpp	1
/src/solidity/libyul/AST.h	35
/usr/include/boost/multiprecision/cpp_int.hpp	10
/usr/include/boost/multiprecision/cpp_int/cpp_int_config.hpp	2
/usr/include/boost/multiprecision/cpp_int/multiply.hpp	1
/usr/include/boost/multiprecision/cpp_int/add.hpp	1
/usr/include/boost/multiprecision/detail/constexpr.hpp	2
/src/solidity/libsolutil/CommonData.h	30
/src/solidity/libyul/Object.cpp	1
/src/solidity/libyul/AsmAnalysis.h	2
/src/solidity/libyul/SideEffects.h	1
/src/solidity/libyul/backends/evm/EVMDialect.h	7
/src/solidity/libyul/AsmAnalysis.cpp	4
/src/solidity/libyul/ScopeFiller.cpp	2
/src/solidity/libyul/optimiser/Suite.cpp	10
/usr/include/boost/operators.hpp	1
/src/solidity/libyul/optimiser/Disambiguator.h	1
/src/solidity/libyul/optimiser/ASTCopier.h	5
/src/solidity/libyul/optimiser/NameDispenser.cpp	5
/src/solidity/libyul/optimiser/ASTCopier.cpp	2
/src/solidity/libyul/optimiser/NameCollector.h	4
/src/solidity/libyul/optimiser/ASTWalker.h	8
/src/solidity/libyul/optimiser/Suite.h	1
/src/solidity/libyul/optimiser/Metrics.cpp	1
/src/solidity/libyul/optimiser/Metrics.h	1
/src/solidity/libyul/optimiser/ASTWalker.cpp	4
/src/solidity/libyul/optimiser/NameSimplifier.h	2
/src/solidity/libyul/optimiser/NameSimplifier.cpp	2
/src/solidity/libyul/optimiser/OptimizerUtilities.cpp	2
/src/solidity/libyul/optimiser/NameDispenser.h	2
/src/solidity/libyul/optimiser/StackCompressor.cpp	7
/src/solidity/libyul/optimiser/Semantics.cpp	2
/src/solidity/libyul/optimiser/Semantics.h	3
/src/solidity/libyul/AsmAnalysisInfo.h	3
/src/solidity/libyul/backends/evm/ControlFlowGraphBuilder.cpp	11
/src/solidity/libyul/backends/evm/ControlFlowGraph.h	4
/src/solidity/build/deps/include/range/v3/functional/bind_back.hpp	4
/src/solidity/build/deps/include/range/v3/functional/invoke.hpp	7
/src/solidity/build/deps/include/range/v3/range/conversion.hpp	8
/src/solidity/build/deps/include/range/v3/range/primitives.hpp	3
/src/solidity/build/deps/include/range/v3/utility/semiregular_box.hpp	2
/src/solidity/libsolutil/Algorithms.h	12
/src/solidity/libsolutil/cxx20.h	1
/src/solidity/libyul/backends/evm/StackLayoutGenerator.cpp	29
/src/solidity/libyul/backends/evm/StackLayoutGenerator.h	2
/src/solidity/build/deps/include/range/v3/algorithm/find.hpp	2
/src/solidity/build/deps/include/range/v3/view/enumerate.hpp	1
/src/solidity/build/deps/include/range/v3/view/zip.hpp	4
/src/solidity/build/deps/include/range/v3/view/zip_with.hpp	4
/src/solidity/build/deps/include/range/v3/view/reverse.hpp	5
/src/solidity/build/deps/include/range/v3/utility/optional.hpp	5
/src/solidity/build/deps/include/range/v3/iterator/operations.hpp	3
/src/solidity/build/deps/include/range/v3/utility/tuple_algorithm.hpp	2
/src/solidity/build/deps/include/range/v3/detail/adl_get.hpp	1
/src/solidity/build/deps/include/range/v3/iterator/reverse_iterator.hpp	3
/src/solidity/build/deps/include/range/v3/view/iota.hpp	6
/src/solidity/libyul/backends/evm/StackHelpers.h	4
/src/solidity/build/deps/include/range/v3/algorithm/all_of.hpp	2
/src/solidity/build/deps/include/range/v3/functional/identity.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/any_of.hpp	3
/src/solidity/build/deps/include/range/v3/view/drop.hpp	1
/src/solidity/libyul/optimiser/DataFlowAnalyzer.cpp	4
/src/solidity/libyul/optimiser/DataFlowAnalyzer.h	3
/src/solidity/libyul/optimiser/KnowledgeBase.h	2
/src/solidity/libyul/optimiser/Rematerialiser.cpp	2
/src/solidity/libyul/optimiser/NameCollector.cpp	3
/src/solidity/libyul/optimiser/Rematerialiser.h	1
/src/solidity/libyul/optimiser/UnusedPruner.cpp	5
/src/solidity/build/deps/include/range/v3/action/remove_if.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/remove_if.hpp	2
/src/solidity/build/deps/include/range/v3/functional/reference_wrapper.hpp	5
/src/solidity/build/deps/include/range/v3/algorithm/find_if.hpp	1
/src/solidity/build/deps/include/range/v3/iterator/access.hpp	1
/src/solidity/build/deps/include/range/v3/utility/move.hpp	1
/src/solidity/build/deps/include/range/v3/action/erase.hpp	2
/src/solidity/libyul/optimiser/UnusedPruner.h	2
/src/solidity/libyul/CompilabilityChecker.cpp	1
/src/solidity/libyul/backends/evm/NoOutputAssembly.cpp	2
/src/solidity/libyul/Dialect.h	3
/src/solidity/libevmasm/Instruction.h	6
/src/solidity/liblangutil/EVMVersion.cpp	1
/src/solidity/libevmasm/Instruction.cpp	1
/src/solidity/libyul/ControlFlowSideEffects.h	1
/src/solidity/libevmasm/SemanticInformation.cpp	2
/src/solidity/libyul/backends/evm/NoOutputAssembly.h	1
/src/solidity/libyul/backends/evm/AbstractAssembly.h	2
/src/solidity/libyul/backends/evm/EVMCodeTransform.h	5
/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp	13
/src/solidity/libyul/backends/evm/VariableReferenceCounter.h	3
/src/solidity/libyul/backends/evm/VariableReferenceCounter.cpp	1
/src/solidity/build/deps/include/range/v3/algorithm/none_of.hpp	3
/src/solidity/libevmasm/Exceptions.h	1
/src/solidity/build/deps/include/range/v3/algorithm/max.hpp	1
/src/solidity/libyul/CompilabilityChecker.h	1
/src/solidity/libyul/backends/evm/ConstantOptimiser.h	1
/src/solidity/libyul/optimiser/StackLimitEvader.cpp	6
/src/solidity/build/deps/include/range/v3/view/take.hpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.cpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.h	1
/src/solidity/libyul/Utilities.cpp	4
/src/solidity/libsolutil/CommonData.cpp	4
/src/solidity/libsolutil/FixedHash.h	2
/usr/include/boost/multiprecision/detail/number_base.hpp	1
/usr/local/include/c++/v1/stdexcept	1
/usr/include/boost/multiprecision/cpp_int/bitwise.hpp	9
/usr/include/boost/multiprecision/detail/number_compare.hpp	5
/src/solidity/libyul/optimiser/CallGraphGenerator.cpp	5
/src/solidity/libyul/optimiser/CallGraphGenerator.h	4
/usr/local/include/c++/v1/initializer_list	1
/src/solidity/build/deps/include/range/v3/view/concat.hpp	1
/src/solidity/libyul/optimiser/StackToMemoryMover.cpp	9
/src/solidity/libyul/optimiser/StackToMemoryMover.h	3
/usr/include/boost/multiprecision/detail/precision.hpp	1
/src/solidity/libsolutil/Numeric.h	3
/usr/include/boost/multiprecision/detail/default_ops.hpp	2
/usr/include/boost/multiprecision/number.hpp	4
/usr/include/boost/multiprecision/cpp_int/misc.hpp	2
/src/solidity/libyul/optimiser/VarNameCleaner.h	2
/src/solidity/libyul/optimiser/VarNameCleaner.cpp	1

Fuzzer: strictasm_diff_ossfuzz

Call tree

Min	Max	Color
0	1	red
1	10	gold
10	30	yellow
30	50	greenyellow
50	1000000000000	lawngreen

For further technical details on the call tree overview, please see the Glossary .

The distribution of callsites in terms of coloring is

Color Callsite count Percentage

red 1130 40.2%

gold 79 2.81%

yellow 54 1.92%

greenyellow 27 0.96%

lawngreen 1514 53.9%

All colors 2804 100

Color	Callsite count	Percentage
red	1130	40.2%
gold	79	2.81%
yellow	54	1.92%
greenyellow	27	0.96%
lawngreen	1514	53.9%
All colors	2804	100

Full call tree

The following link provides a visualisation of the full call tree overlaid with coverage information: full call tree

For further technical details on how the call tree is generated, please see the Glossary .

Fuzz blockers

The followings nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
127	1324	solidity::yul::test::yul_fuzzer::yulFuzzerUtil::interpret(std::__1::basic_ostream >&, std::__1::shared_ptr , solidity::yul::Dialect const&, bool, bool, unsigned long, unsigned long, unsigned long)	call site	_ZN5boost14multiprecision11default_ops19eval_divide_defaultINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEExEENS_11enable_if_cIXaasr14is_convertibleIT0_NS0_6numberIT_LNS0_26expression_template_optionE1EEEEE5valuesr14is_convertibleIS9_SB_EE5valueEvE4typeERSB_RKSB_RKS9_
116	2316	solidity::yul::EVMDialect::EVMDialect(solidity::langutil::EVMVersion, bool)	call site
89	546	solidity::yul::Parser::parseInline(std::__1::shared_ptr const&)	call site	__cxa_guard_acquire
78	2442	solidity::evmasm::swapInstruction(unsigned int)	call site
71	71	solidity::yul::YulStringRepository::ResetCallback::ResetCallback(std::__1::function )	call site	__cxa_guard_acquire
47	2034	bool solidity::yul::Shuffler<(anonymous namespace)::createIdealLayout , std::__1::allocator > >, solidity::yul::CFG::Operation const&, bool)::$_2>(std::__1::vector , std::__1::allocator > > const&, std::__1::vector , std::__1::allocator > > const&, solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector , std::__1::allocator > >, solidity::yul::CFG::Operation const&, bool)::$_2)::ShuffleOperations>::shuffleStep , std::__1::allocator > >, solidity::yul::CFG::Operation const&, bool)::$_2>(std::__1::vector , std::__1::allocator > > const&, std::__1::vector , std::__1::allocator > > const&, solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector , std::__1::allocator > >, solidity::yul::CFG::Operation const&, bool)::$_2)::PreviousSlot, std::__1::variant >, std::__1::allocator , std::__1::allocator > >, solidity::yul::CFG::Operation const&, bool)::$_2>(std::__1::vector , std::__1::allocator > > const&, std::__1::vector , std::__1::allocator > > const&, solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector , std::__1::allocator > >, solidity::yul::CFG::Operation const&, bool)::$_2)::PreviousSlot, std::__1::variant > > >&, std::__1::vector , std::__1::allocator > > const&, solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector , std::__1::allocator > >, solidity::yul::CFG::Operation const&, bool)::$_2&>(std::__1::vector , std::__1::allocator > >, solidity::yul::CFG::Operation const&, bool)::$_2>(std::__1::vector , std::__1::allocator > > const&, std::__1::vector , std::__1::allocator > > const&, solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector , std::__1::allocator > >, solidity::yul::CFG::Operation const&, bool)::$_2)::PreviousSlot, std::__1::variant >, std::__1::allocator , std::__1::allocator > >, solidity::yul::CFG::Operation const&, bool)::$_2>(std::__1::vector , std::__1::allocator > > const&, std::__1::vector , std::__1::allocator > > const&, solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector , std::__1::allocator > >, solidity::yul::CFG::Operation const&, bool)::$_2)::PreviousSlot, std::__1::variant > > >&, std::__1::vector , std::__1::allocator > > const&, solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector , std::__1::allocator > >, solidity::yul::CFG::Operation const&, bool)::$_2&)	call site	_ZN6ranges11view_facadeINS_9iota_viewImmEELNS_11cardinalityEn1EE5beginIS2_Lb1ELi0EEENS_14basic_iteratorINSt3__15decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
47	2635	solidity::yul::CallGraph::recursiveFunctions() const	call site	__dynamic_cast
47	2687	std::__1::basic_string , std::__1::allocator > solidity::toCompactHexWithPrefix , (boost::multiprecision::expression_template_option)0> >(boost::multiprecision::number , (boost::multiprecision::expression_template_option)0>)	call site	_ZN6ranges11view_facadeINS_18iter_zip_with_viewINS_6detail16indirect_zip_fn_EJNS_8ref_viewINSt3__16vectorIN8solidity3yul10IdentifierENS5_9allocatorIS9_EEEEEENS4_INS6_INS5_8optionalINS8_9YulStringEEENSA_ISG_EEEEEEEEELNS_11cardinalityEn1EE5beginISK_Lb1ELi0EEENS_14basic_iteratorINS5_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
42	814	solidity::yul::Parser::isValidNumberLiteral(std::__1::basic_string , std::__1::allocator > const&)	call site	_ZN5boost14multiprecision8backends13eval_multiplyILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvLj256ELj256ELS3_0ELS4_0EvEENS_11enable_if_cIXaantsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valuentsr18is_trivial_cpp_intINS6_IXT4_EXT5_EXT6_EXT7_ET8_EEEE5valueEvE4typeERS8_RKSA_RKy
36	1827	solidity::yul::StackLayoutGenerator::propagateStackThroughBlock(std::__1::vector , std::__1::allocator > >, solidity::yul::CFG::BasicBlock const&, bool)	call site
36	2736	solidity::yul::NameDispenser::newName(solidity::yul::YulString)	call site	_ZN5boost14multiprecision6numberINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEELNS0_26expression_template_optionE0EEpLImEENS_11enable_if_cIXsr14is_convertibleIT_S8_EE5valueERS8_E4typeERKSB_
23	29	solidity::langutil::DebugInfoSelection::All(bool)	call site	_ZN6ranges12view_adaptorINS_19iter_transform_viewINS_8ref_viewIKNSt3__13mapINS3_12basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEEMN8solidity8langutil18DebugInfoSelectionEbNS3_4lessISA_EENS8_INS3_4pairIKSA_SE_EEEEEEEENS_10indirectedINS_6detail10get_secondEEEEESN_LNS_11cardinalityEn1EE12begin_cursorISS_Lb1ELi0EEEDTclsr12view_adaptorE13begin_cursor_clsr3stdE7declvalIRT_EEEEv

Branch Blockers [Click to view]

[EXPERIMENTAL] The followings are the branches where fuzzer fails to bypass.

Blocked Complexity	Reachable Complexity	Function Name	Blocked Branch
3420	3797	solidity::yul::StackLimitEvader::run(solidity::yul::OptimiserStepContext&,solidity::yul::Object&,std::__1::map ,std::__1::allocator >,std::__1::less ,std::__1::allocator ,std::__1::allocator >>>>const&)	/src/solidity/libyul/optimiser/StackLimitEvader.cpp:178
1650	3538	solidity::yul::StackLimitEvader::run(solidity::yul::OptimiserStepContext&,solidity::yul::Object&)	/src/solidity/libyul/optimiser/StackLimitEvader.cpp:131
1596	10829	solidity::yul::RepresentationFinder::findRepresentation(boost::multiprecision::number ,(boost::multiprecision::expression_template_option)0>const&)	/src/solidity/libyul/backends/evm/ConstantOptimiser.cpp:155
1240	2160	boolsolidity::yul::Shuffler<(anonymousnamespace)::createIdealLayout ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2>(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2)::ShuffleOperations>::shuffleStep ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2>(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2)::PreviousSlot,std::__1::variant >,std::__1::allocator ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2>(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2)::PreviousSlot,std::__1::variant >>>&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2&>(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2>(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2)::PreviousSlot,std::__1::variant >,std::__1::allocator ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2>(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2)::PreviousSlot,std::__1::variant >>>&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2&)	/src/solidity/libyul/backends/evm/StackHelpers.h:315
959	1310	solidity::yul::OptimiserSuite::runSequence(std::__1::vector ,std::__1::allocator >,std::__1::allocator ,std::__1::allocator >>>const&,solidity::yul::Block&)	/src/solidity/libyul/optimiser/Suite.cpp:429
955	1263	solidity::yul::OptimiserSuite::runSequence(std::__1::vector ,std::__1::allocator >,std::__1::allocator ,std::__1::allocator >>>const&,solidity::yul::Block&)	/src/solidity/libyul/optimiser/Suite.cpp:433
771	2226	solidity::yul::Parser::parseInline(std::__1::shared_ptr const&)	/src/solidity/libyul/AsmParser.cpp:125
485	1953	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:337
480	480	solidity::evmasm::GasMeter::dataGas(std::__1::vector >const&,bool,solidity::langutil::EVMVersion)	/src/solidity/libevmasm/GasMeter.cpp:278
315	317	solidity::yul::AsmAnalyzer::validateInstructions(solidity::evmasm::Instruction,solidity::langutil::SourceLocationconst&)	/src/solidity/libyul/AsmAnalysis.cpp:720
291	529	boolsolidity::yul::Shuffler ,std::__1::allocator >>,std::__1::vector ,std::__1::allocator >>const&)const::{lambda(unsignedint)#1},solidity::yul::StackLayoutGenerator::fillInJunk(solidity::yul::CFG::BasicBlockconst&)::$_16::operator()(std::__1::vector ,std::__1::allocator >>,std::__1::vector ,std::__1::allocator >>const&)const::{lambda(std::__1::variant const&)#1},solidity::yul::StackLayoutGenerator::fillInJunk(solidity::yul::CFG::BasicBlockconst&)::$_16::operator()(std::__1::vector ,std::__1::allocator >>,std::__1::vector ,std::__1::allocator >>const&)const::{lambda()#1}>(std::__1::vector ,std::__1::allocator >>&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::fillInJunk(solidity::yul::CFG::BasicBlockconst&)::$_16::operator()(std::__1::vector ,std::__1::allocator >>,std::__1::vector ,std::__1::allocator >>const&)const::{lambda(unsignedint)#1},solidity::yul::StackLayoutGenerator::fillInJunk(solidity::yul::CFG::BasicBlockconst&)::$_16::operator()(std::__1::vector ,std::__1::allocator >>,std::__1::vector ,std::__1::allocator >>const&)const::{lambda(std::__1::variant const&)#1},solidity::yul::StackLayoutGenerator::fillInJunk(solidity::yul::CFG::BasicBlockconst&)::$_16::operator()(std::__1::vector ,std::__1::allocator >>,std::__1::vector ,std::__1::allocator >>const&)const::{lambda()#1})::ShuffleOperations>::shuffleStep ,std::__1::allocator >>,std::__1::vector ,std::__1::allocator >>const&)const::{lambda(std::__1::variant const&)#1},std::__1::vector ,std::__1::allocator >>const&,{lambda(unsignedint)#1}&,std::__1::variant const&,{lambda(std::__1::variant const&)#1}&>(solidity::yul::StackLayoutGenerator::fillInJunk(solidity::yul::CFG::BasicBlockconst&)::$_16::operator()(std::__1::vector ,std::__1::allocator >>,std::__1::vector ,std::__1::allocator >>const&)const::{lambda(std::__1::variant const&)#1}&&,std::__1::vector ,std::__1::allocator >>const&,{lambda(unsignedint)#1}&,std::__1::variant const&&,{lambda(std::__1::variant const&)#1}&)	/src/solidity/libyul/backends/evm/StackHelpers.h:361
273	273	voidsolidity::yul::createStackLayout ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&)::$_13::operator()(std::__1::vector ,std::__1::allocator >>const&)const::{lambda(unsignedint)#1},solidity::yul::StackLayoutGenerator::combineStack(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&)::$_13::operator()(std::__1::vector ,std::__1::allocator >>const&)const::{lambda(std::__1::variant const&)#1},solidity::yul::StackLayoutGenerator::combineStack(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&)::$_13::operator()(std::__1::vector ,std::__1::allocator >>const&)const::{lambda()#1}>(std::__1::vector ,std::__1::allocator >>&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::combineStack(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&)::$_13::operator()(std::__1::vector ,std::__1::allocator >>const&)const::{lambda(unsignedint)#1},solidity::yul::StackLayoutGenerator::combineStack(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&)::$_13::operator()(std::__1::vector ,std::__1::allocator >>const&)const::{lambda(std::__1::variant const&)#1},solidity::yul::StackLayoutGenerator::combineStack(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&)::$_13::operator()(std::__1::vector ,std::__1::allocator >>const&)const::{lambda()#1})	/src/solidity/libyul/backends/evm/StackHelpers.h:461

Runtime coverage analysis

2205

579

988

For further technical details on the call tree overview, please see the Glossary .

41.4%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/solidity/test/tools/ossfuzz/strictasm_diff_ossfuzz.cpp	1
/src/solidity/libyul/YulString.h	13
/src/solidity/liblangutil/EVMVersion.h	16
/src/solidity/libsolidity/interface/OptimiserSettings.h	5
/src/solidity/liblangutil/DebugInfoSelection.cpp	1
/src/solidity/liblangutil/DebugInfoSelection.h	2
/src/solidity/build/deps/include/range/v3/view/view.hpp	18
/src/solidity/build/deps/include/range/v3/view/map.hpp	1
/src/solidity/build/deps/include/range/v3/view/all.hpp	7
/src/solidity/build/deps/include/range/v3/range_fwd.hpp	5
/src/solidity/build/deps/include/range/v3/view/ref.hpp	6
/src/solidity/build/deps/include/range/v3/view/transform.hpp	16
/src/solidity/build/deps/include/range/v3/functional/indirect.hpp	2
/src/solidity/build/deps/include/range/v3/view/adaptor.hpp	8
/src/solidity/build/deps/include/range/v3/view/facade.hpp	7
/src/solidity/build/deps/include/range/v3/detail/range_access.hpp	6
/src/solidity/build/deps/include/range/v3/view/interface.hpp	1
/src/solidity/build/deps/include/range/v3/range/access.hpp	9
/src/solidity/build/deps/include/range/v3/utility/compressed_pair.hpp	1
/src/solidity/build/deps/include/range/v3/utility/box.hpp	6
/src/solidity/build/deps/include/range/v3/iterator/basic_iterator.hpp	35
/src/solidity/libyul/YulStack.h	2
/src/solidity/liblangutil/CharStreamProvider.h	2
/src/solidity/liblangutil/ErrorReporter.h	6
/src/solidity/libyul/YulStack.cpp	7
/src/solidity/libyul/backends/evm/EVMDialect.cpp	8
/src/solidity/libyul/backends/wasm/WasmDialect.cpp	1
/src/solidity/libyul/Exceptions.h	4
/usr/local/include/c++/v1/exception	1
/usr/include/boost/exception/exception.hpp	14
/src/solidity/libsolutil/Exceptions.h	4
/src/solidity/libsolutil/Assertions.h	1
/usr/include/boost/exception/detail/error_info_impl.hpp	3
/usr/include/boost/exception/info.hpp	11
/usr/include/boost/smart_ptr/shared_ptr.hpp	6
/usr/include/boost/smart_ptr/detail/shared_count.hpp	4
/usr/include/boost/smart_ptr/detail/sp_counted_impl.hpp	1
/usr/include/boost/smart_ptr/detail/sp_counted_base_clang.hpp	6
/usr/include/boost/core/checked_delete.hpp	1
/usr/include/boost/exception/detail/type_info.hpp	1
/usr/include/boost/throw_exception.hpp	14
/src/solidity/libyul/ObjectParser.h	1
/src/solidity/liblangutil/ParserBase.h	4
/src/solidity/libyul/ObjectParser.cpp	8
/src/solidity/liblangutil/ParserBase.cpp	11
/src/solidity/liblangutil/Scanner.h	21
/src/solidity/liblangutil/Exceptions.h	5
/src/solidity/liblangutil/CharStream.h	8
/src/solidity/liblangutil/Scanner.cpp	29
/src/solidity/liblangutil/Common.h	6
/src/solidity/liblangutil/CharStream.cpp	3
/src/solidity/liblangutil/SourceLocation.h	5
/usr/local/include/c++/v1/optional	14
/src/solidity/liblangutil/Token.cpp	9
/src/solidity/libsolutil/StringUtils.h	3
/src/solidity/liblangutil/Token.h	6
/src/solidity/liblangutil/ErrorReporter.cpp	7
/usr/include/boost/assert/source_location.hpp	4
/src/solidity/libyul/Object.h	1
/src/solidity/libyul/AsmParser.h	13
/src/solidity/libyul/AsmParser.cpp	20
/src/solidity/libsolutil/Common.h	4
/usr/include/boost/algorithm/string/predicate.hpp	6
/usr/include/boost/range/as_literal.hpp	5
/usr/include/boost/range/begin.hpp	3
/usr/include/boost/range/iterator_range_core.hpp	2
/usr/include/boost/range/end.hpp	3
/usr/include/boost/algorithm/string/detail/predicate.hpp	1
/usr/include/boost/algorithm/string/compare.hpp	1
/src/solidity/libyul/AST.h	35
/usr/include/boost/multiprecision/cpp_int.hpp	13
/usr/include/boost/multiprecision/cpp_int/cpp_int_config.hpp	2
/usr/include/boost/multiprecision/cpp_int/multiply.hpp	1
/usr/include/boost/multiprecision/cpp_int/add.hpp	5
/usr/include/boost/multiprecision/detail/constexpr.hpp	4
/src/solidity/libsolutil/CommonData.h	30
/src/solidity/libyul/Object.cpp	1
/src/solidity/libyul/AsmAnalysis.h	2
/src/solidity/libyul/SideEffects.h	1
/src/solidity/libyul/backends/evm/EVMDialect.h	7
/src/solidity/libyul/AsmAnalysis.cpp	4
/src/solidity/libyul/ScopeFiller.cpp	2
/src/solidity/test/tools/ossfuzz/yulFuzzerCommon.cpp	2
/src/solidity/test/tools/yulInterpreter/Interpreter.h	7
/src/solidity/libsolutil/FixedHash.h	8
/src/solidity/libsolutil/CommonData.cpp	4
/src/solidity/test/tools/yulInterpreter/Interpreter.cpp	7
/src/solidity/libyul/optimiser/ASTWalker.h	8
/usr/include/boost/multiprecision/detail/precision.hpp	1
/usr/include/boost/multiprecision/detail/number_base.hpp	3
/usr/include/boost/multiprecision/cpp_int/divide.hpp	2
/usr/local/include/c++/v1/stdexcept	2
/usr/include/boost/multiprecision/number.hpp	7
/usr/include/boost/multiprecision/cpp_int/misc.hpp	2
/usr/include/boost/multiprecision/cpp_int/bitwise.hpp	9
/usr/include/boost/multiprecision/detail/default_ops.hpp	4
/usr/include/boost/multiprecision/detail/number_compare.hpp	7
/usr/include/boost/lexical_cast.hpp	1
/usr/include/boost/lexical_cast/try_lexical_convert.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical_streams.hpp	6
/usr/include/boost/lexical_cast/detail/lcast_unsigned_converters.hpp	1
/usr/include/boost/lexical_cast/bad_lexical_cast.hpp	2
/src/solidity/libsolutil/Numeric.h	4
/src/solidity/libyul/optimiser/Suite.cpp	10
/usr/include/boost/operators.hpp	1
/src/solidity/libyul/optimiser/Disambiguator.h	1
/src/solidity/libyul/optimiser/ASTCopier.h	5
/src/solidity/libyul/optimiser/NameDispenser.cpp	5
/src/solidity/libyul/optimiser/ASTCopier.cpp	2
/src/solidity/libyul/optimiser/NameCollector.h	4
/src/solidity/libyul/optimiser/Suite.h	1
/src/solidity/libyul/optimiser/Metrics.cpp	1
/src/solidity/libyul/optimiser/Metrics.h	1
/src/solidity/libyul/optimiser/ASTWalker.cpp	4
/src/solidity/libyul/optimiser/NameSimplifier.h	2
/src/solidity/libyul/optimiser/NameSimplifier.cpp	2
/src/solidity/libyul/optimiser/OptimizerUtilities.cpp	2
/src/solidity/libyul/optimiser/NameDispenser.h	2
/src/solidity/libyul/optimiser/StackCompressor.cpp	7
/src/solidity/libyul/optimiser/Semantics.cpp	2
/src/solidity/libyul/optimiser/Semantics.h	3
/src/solidity/libyul/AsmAnalysisInfo.h	3
/src/solidity/libyul/backends/evm/ControlFlowGraphBuilder.cpp	11
/src/solidity/libyul/backends/evm/ControlFlowGraph.h	4
/src/solidity/build/deps/include/range/v3/functional/bind_back.hpp	4
/src/solidity/build/deps/include/range/v3/functional/invoke.hpp	7
/src/solidity/build/deps/include/range/v3/range/conversion.hpp	8
/src/solidity/build/deps/include/range/v3/range/primitives.hpp	3
/src/solidity/build/deps/include/range/v3/utility/semiregular_box.hpp	2
/src/solidity/libsolutil/Algorithms.h	12
/src/solidity/libsolutil/cxx20.h	1
/src/solidity/libyul/backends/evm/StackLayoutGenerator.cpp	29
/src/solidity/libyul/backends/evm/StackLayoutGenerator.h	2
/src/solidity/build/deps/include/range/v3/algorithm/find.hpp	2
/src/solidity/build/deps/include/range/v3/view/enumerate.hpp	1
/src/solidity/build/deps/include/range/v3/view/zip.hpp	4
/src/solidity/build/deps/include/range/v3/view/zip_with.hpp	4
/src/solidity/build/deps/include/range/v3/view/reverse.hpp	5
/src/solidity/build/deps/include/range/v3/utility/optional.hpp	5
/src/solidity/build/deps/include/range/v3/iterator/operations.hpp	3
/src/solidity/build/deps/include/range/v3/utility/tuple_algorithm.hpp	2
/src/solidity/build/deps/include/range/v3/detail/adl_get.hpp	1
/src/solidity/build/deps/include/range/v3/iterator/reverse_iterator.hpp	3
/src/solidity/build/deps/include/range/v3/view/iota.hpp	6
/src/solidity/libyul/backends/evm/StackHelpers.h	4
/src/solidity/build/deps/include/range/v3/algorithm/all_of.hpp	2
/src/solidity/build/deps/include/range/v3/functional/identity.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/any_of.hpp	3
/src/solidity/build/deps/include/range/v3/view/drop.hpp	1
/src/solidity/libyul/optimiser/DataFlowAnalyzer.cpp	4
/src/solidity/libyul/optimiser/DataFlowAnalyzer.h	3
/src/solidity/libyul/optimiser/KnowledgeBase.h	2
/src/solidity/libyul/optimiser/Rematerialiser.cpp	2
/src/solidity/libyul/optimiser/NameCollector.cpp	3
/src/solidity/libyul/optimiser/Rematerialiser.h	1
/src/solidity/libyul/optimiser/UnusedPruner.cpp	5
/src/solidity/build/deps/include/range/v3/action/remove_if.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/remove_if.hpp	2
/src/solidity/build/deps/include/range/v3/functional/reference_wrapper.hpp	5
/src/solidity/build/deps/include/range/v3/algorithm/find_if.hpp	1
/src/solidity/build/deps/include/range/v3/iterator/access.hpp	1
/src/solidity/build/deps/include/range/v3/utility/move.hpp	1
/src/solidity/build/deps/include/range/v3/action/erase.hpp	2
/src/solidity/libyul/optimiser/UnusedPruner.h	2
/src/solidity/libyul/CompilabilityChecker.cpp	1
/src/solidity/libyul/backends/evm/NoOutputAssembly.cpp	2
/src/solidity/libyul/Dialect.h	3
/src/solidity/libevmasm/Instruction.h	6
/src/solidity/liblangutil/EVMVersion.cpp	1
/src/solidity/libevmasm/Instruction.cpp	1
/src/solidity/libyul/ControlFlowSideEffects.h	1
/src/solidity/libevmasm/SemanticInformation.cpp	2
/src/solidity/libyul/backends/evm/NoOutputAssembly.h	1
/src/solidity/libyul/backends/evm/AbstractAssembly.h	2
/src/solidity/libyul/backends/evm/EVMCodeTransform.h	5
/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp	13
/src/solidity/libyul/backends/evm/VariableReferenceCounter.h	3
/src/solidity/libyul/backends/evm/VariableReferenceCounter.cpp	1
/src/solidity/build/deps/include/range/v3/algorithm/none_of.hpp	3
/src/solidity/libevmasm/Exceptions.h	1
/src/solidity/build/deps/include/range/v3/algorithm/max.hpp	1
/src/solidity/libyul/CompilabilityChecker.h	1
/src/solidity/libyul/backends/evm/ConstantOptimiser.h	1
/src/solidity/libyul/optimiser/StackLimitEvader.cpp	6
/src/solidity/build/deps/include/range/v3/view/take.hpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.cpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.h	1
/src/solidity/libyul/Utilities.cpp	4
/src/solidity/libyul/optimiser/CallGraphGenerator.cpp	5
/src/solidity/libyul/optimiser/CallGraphGenerator.h	4
/usr/local/include/c++/v1/initializer_list	1
/src/solidity/build/deps/include/range/v3/view/concat.hpp	1
/src/solidity/libyul/optimiser/StackToMemoryMover.cpp	9
/src/solidity/libyul/optimiser/StackToMemoryMover.h	3
/src/solidity/libyul/optimiser/VarNameCleaner.h	2
/src/solidity/libyul/optimiser/VarNameCleaner.cpp	1

Fuzzer: yul_proto_diff_ossfuzz

Call tree

Min	Max	Color
0	1	red
1	10	gold
10	30	yellow
30	50	greenyellow
50	1000000000000	lawngreen

The distribution of callsites in terms of coloring is

Color Callsite count Percentage

red 1231 44.4%

gold 8 0.28%

yellow 6 0.21%

greenyellow 1 0.03%

lawngreen 1521 54.9%

All colors 2767 100

Color	Callsite count	Percentage
red	1231	44.4%
gold	8	0.28%
yellow	6	0.21%
greenyellow	1	0.03%
lawngreen	1521	54.9%
All colors	2767	100

Full call tree

The following link provides a visualisation of the full call tree overlaid with coverage information: full call tree

For further technical details on how the call tree is generated, please see the Glossary .

Fuzz blockers

The followings nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
130	2359	solidity::langutil::Error::containsErrors(std::__1::vector , std::__1::allocator > > const&)	call site
125	2533	solidity::yul::test::yul_fuzzer::yulFuzzerUtil::interpret(std::__1::basic_ostream >&, std::__1::shared_ptr , solidity::yul::Dialect const&, bool, bool, unsigned long, unsigned long, unsigned long)	call site	_ZN5boost14multiprecision11default_ops19eval_divide_defaultINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEExEENS_11enable_if_cIXaasr14is_convertibleIT0_NS0_6numberIT_LNS0_26expression_template_optionE1EEEEE5valuesr14is_convertibleIS9_SB_EE5valueEvE4typeERSB_RKSB_RKS9_
92	1449	solidity::langutil::Scanner::scanToken()	call site
91	566	solidity::yul::test::yul_fuzzer::ProtoConverter::createVars(unsigned int, unsigned int)	call site	_ZN5boost9function2INS_14iterator_rangeINSt3__111__wrap_iterIPcEEEES5_S5_EC2INS_9algorithm6detail13token_finderFINSA_10is_any_ofFIcEEEEEET_NS_10enable_if_IXntsr11is_integralISF_EE5valueEiE4typeE
83	1697	solidity::yul::Parser::parseInline(std::__1::shared_ptr const&)	call site	__cxa_guard_acquire
75	1815	solidity::langutil::ParserBase::expectToken(solidity::langutil::Token, bool)	call site
60	895	solidity::yul::test::yul_fuzzer::ProtoConverter::visit(solidity::yul::test::yul_fuzzer::CaseStmt const&)	call site	_ZN5boost14multiprecision8backends13eval_multiplyILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvLj256ELj256ELS3_0ELS4_0EvEENS_11enable_if_cIXaantsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valuentsr18is_trivial_cpp_intINS6_IXT4_EXT5_EXT6_EXT7_ET8_EEEE5valueEvE4typeERS8_RKSA_RKy
36	84	solidity::yul::test::yul_fuzzer::ProtoConverter::openBlockScope()	call site	__cxa_begin_catch
25	1565	solidity::langutil::Scanner::scanNumber(char)	call site
22	1262	solidity::langutil::DebugInfoSelection::All(bool)	call site	_ZN6ranges12view_adaptorINS_19iter_transform_viewINS_8ref_viewIKNSt3__13mapINS3_12basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEEMN8solidity8langutil18DebugInfoSelectionEbNS3_4lessISA_EENS8_INS3_4pairIKSA_SE_EEEEEEEENS_10indirectedINS_6detail10get_secondEEEEESN_LNS_11cardinalityEn1EE12begin_cursorISS_Lb1ELi0EEEDTclsr12view_adaptorE13begin_cursor_clsr3stdE7declvalIRT_EEEEv
21	1402	solidity::langutil::Scanner::scanHexByte(char&)	call site
19	246	solidity::yul::test::yul_fuzzer::ProtoConverter::createHex(std::__1::basic_string , std::__1::allocator > const&)	call site	_ZNK6ranges12remove_if_fnclIRNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEZN8solidity3yul4test10yul_fuzzer14ProtoConverter9createHexERKS8_E3$_0NS_8identityELb1ELi0ELi0ELi0EEEN4meta6detail5_condIXsr6detailE15_borrowed_rangeIT_EEE6invokeIDTclL_ZNS_1_5beginEEclscPDoFRSM_vELDnEEEENS_8danglingEEEOSM_T0_T1_

Branch Blockers [Click to view]

[EXPERIMENTAL] The followings are the branches where fuzzer fails to bypass.

Blocked Complexity	Reachable Complexity	Function Name	Blocked Branch
3420	3797	solidity::yul::StackLimitEvader::run(solidity::yul::OptimiserStepContext&,solidity::yul::Object&,std::__1::map ,std::__1::allocator >,std::__1::less ,std::__1::allocator ,std::__1::allocator >>>>const&)	/src/solidity/libyul/optimiser/StackLimitEvader.cpp:178
1601	1605	solidity::langutil::ParserBase::expectToken(solidity::langutil::Token,bool)	/src/solidity/liblangutil/ParserBase.cpp:77
1468	3117	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:321
1288	7795	TestOneProtoInput(solidity::yul::test::yul_fuzzer::Programconst&)	/src/solidity/test/tools/ossfuzz/yulProto_diff_ossfuzz.cpp:53
1145	1953	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:337
1039	1823	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:376
1039	1823	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:382
1039	1823	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:393
959	1310	solidity::yul::OptimiserSuite::runSequence(std::__1::vector ,std::__1::allocator >,std::__1::allocator ,std::__1::allocator >>>const&,solidity::yul::Block&)	/src/solidity/libyul/optimiser/Suite.cpp:429
955	1263	solidity::yul::OptimiserSuite::runSequence(std::__1::vector ,std::__1::allocator >,std::__1::allocator ,std::__1::allocator >>>const&,solidity::yul::Block&)	/src/solidity/libyul/optimiser/Suite.cpp:433
885	2528	solidity::yul::LoadResolver::tryEvaluateKeccak(std::__1::variant &,std::__1::vector ,std::__1::allocator >>const&)	/src/solidity/libyul/optimiser/LoadResolver.cpp:111
847	3127	solidity::yul::CodeTransform::operator()(solidity::yul::FunctionDefinitionconst&)	/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp:397

Runtime coverage analysis

2943

536

1115

For further technical details on the call tree overview, please see the Glossary .

51.93%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/solidity/test/tools/ossfuzz/yulProto_diff_ossfuzz.cpp	2
/src/solidity/test/tools/ossfuzz/yulProto.pb.h	292
/src/solidity/test/tools/ossfuzz/yulProto.pb.cc	16
/usr/include/google/protobuf/message.h	1
/usr/include/google/protobuf/message_lite.h	4
/usr/include/google/protobuf/metadata_lite.h	7
/usr/include/google/protobuf/generated_message_util.h	1
/src/solidity/test/tools/ossfuzz/protoToYul.h	8
/src/solidity/liblangutil/EVMVersion.h	18
/src/solidity/test/tools/ossfuzz/protoToYul.cpp	64
/usr/include/google/protobuf/wire_format_lite.h	6
/usr/include/google/protobuf/io/coded_stream.h	4
/usr/include/google/protobuf/stubs/port.h	2
/usr/include/google/protobuf/repeated_ptr_field.h	11
/src/solidity/libyul/Exceptions.h	3
/usr/local/include/c++/v1/exception	1
/usr/include/boost/exception/exception.hpp	16
/src/solidity/libsolutil/Exceptions.h	4
/src/solidity/libsolutil/Assertions.h	1
/usr/include/boost/exception/detail/error_info_impl.hpp	4
/usr/include/boost/exception/info.hpp	9
/usr/include/boost/smart_ptr/shared_ptr.hpp	7
/usr/include/boost/smart_ptr/detail/shared_count.hpp	4
/usr/include/boost/smart_ptr/detail/sp_counted_impl.hpp	1
/usr/include/boost/smart_ptr/detail/sp_counted_base_clang.hpp	6
/usr/include/boost/core/checked_delete.hpp	1
/usr/include/boost/exception/detail/type_info.hpp	1
/usr/include/boost/throw_exception.hpp	14
/usr/include/google/protobuf/arenastring.h	2
/usr/include/google/protobuf/explicitly_constructed.h	1
/src/solidity/build/deps/include/range/v3/action/remove_if.hpp	2
/src/solidity/build/deps/include/range/v3/algorithm/remove_if.hpp	2
/src/solidity/build/deps/include/range/v3/range/access.hpp	3
/src/solidity/build/deps/include/range/v3/functional/reference_wrapper.hpp	5
/src/solidity/build/deps/include/range/v3/algorithm/find_if.hpp	1
/src/solidity/build/deps/include/range/v3/functional/invoke.hpp	2
/src/solidity/build/deps/include/range/v3/functional/identity.hpp	1
/src/solidity/build/deps/include/range/v3/iterator/operations.hpp	1
/src/solidity/build/deps/include/range/v3/iterator/access.hpp	1
/src/solidity/build/deps/include/range/v3/utility/move.hpp	1
/src/solidity/build/deps/include/range/v3/action/erase.hpp	2
/usr/include/boost/operators.hpp	1
/usr/local/include/c++/v1/optional	13
/src/solidity/libsolutil/Whiskers.cpp	6
/src/solidity/libsolutil/Whiskers.h	3
/src/solidity/libsolutil/StringUtils.cpp	1
/usr/include/boost/algorithm/string/classification.hpp	2
/usr/include/boost/range/as_literal.hpp	5
/usr/include/boost/algorithm/string/detail/classification.hpp	8
/usr/include/boost/range/distance.hpp	1
/usr/include/boost/range/begin.hpp	8
/usr/include/boost/range/iterator_range_core.hpp	12
/usr/include/boost/range/end.hpp	8
/usr/include/boost/iterator/distance.hpp	2
/usr/include/boost/algorithm/string/split.hpp	1
/usr/include/boost/algorithm/string/finder.hpp	1
/usr/include/boost/algorithm/string/detail/finder.hpp	3
/usr/include/boost/algorithm/string/iter_find.hpp	1
/usr/include/boost/algorithm/string/find_iterator.hpp	4
/usr/include/boost/algorithm/string/detail/find_iterator.hpp	5
/usr/include/boost/function/function_template.hpp	12
/usr/include/boost/function/function_base.hpp	5
/usr/include/boost/core/addressof.hpp	1
/usr/include/boost/iterator/transform_iterator.hpp	3
/usr/include/boost/iterator/iterator_adaptor.hpp	3
/usr/include/boost/multiprecision/cpp_int.hpp	13
/src/solidity/build/deps/include/range/v3/algorithm/all_of.hpp	1
/src/solidity/libsolutil/FixedHash.h	8
/src/solidity/libsolutil/CommonData.cpp	3
/src/solidity/libsolutil/CommonData.h	2
/usr/include/boost/multiprecision/detail/number_compare.hpp	4
/usr/include/boost/multiprecision/detail/constexpr.hpp	4
/usr/include/boost/assert/source_location.hpp	4
/usr/include/boost/multiprecision/cpp_int/cpp_int_config.hpp	2
/usr/include/boost/multiprecision/cpp_int/multiply.hpp	1
/usr/include/boost/multiprecision/cpp_int/add.hpp	5
/usr/local/include/c++/v1/initializer_list	1
/src/solidity/libyul/YulString.h	13
/src/solidity/libsolidity/interface/OptimiserSettings.h	5
/src/solidity/liblangutil/DebugInfoSelection.cpp	1
/src/solidity/liblangutil/DebugInfoSelection.h	2
/src/solidity/build/deps/include/range/v3/view/view.hpp	1
/src/solidity/build/deps/include/range/v3/view/map.hpp	1
/src/solidity/build/deps/include/range/v3/view/all.hpp	3
/src/solidity/build/deps/include/range/v3/range_fwd.hpp	4
/src/solidity/build/deps/include/range/v3/view/ref.hpp	3
/src/solidity/build/deps/include/range/v3/view/transform.hpp	4
/src/solidity/build/deps/include/range/v3/functional/indirect.hpp	2
/src/solidity/build/deps/include/range/v3/view/adaptor.hpp	7
/src/solidity/build/deps/include/range/v3/view/facade.hpp	1
/src/solidity/build/deps/include/range/v3/detail/range_access.hpp	3
/src/solidity/build/deps/include/range/v3/view/interface.hpp	1
/src/solidity/build/deps/include/range/v3/utility/compressed_pair.hpp	1
/src/solidity/build/deps/include/range/v3/utility/box.hpp	4
/src/solidity/build/deps/include/range/v3/iterator/basic_iterator.hpp	7
/src/solidity/libyul/YulStack.h	3
/src/solidity/liblangutil/CharStreamProvider.h	2
/src/solidity/liblangutil/ErrorReporter.h	6
/src/solidity/libyul/YulStack.cpp	5
/src/solidity/libyul/backends/evm/EVMDialect.cpp	2
/src/solidity/libyul/backends/wasm/WasmDialect.cpp	1
/src/solidity/libyul/ObjectParser.h	1
/src/solidity/liblangutil/ParserBase.h	4
/src/solidity/libyul/ObjectParser.cpp	8
/src/solidity/liblangutil/ParserBase.cpp	11
/src/solidity/liblangutil/Scanner.h	21
/src/solidity/liblangutil/Exceptions.h	7
/src/solidity/liblangutil/CharStream.h	9
/src/solidity/liblangutil/Scanner.cpp	29
/src/solidity/liblangutil/Common.h	6
/src/solidity/liblangutil/CharStream.cpp	5
/src/solidity/liblangutil/SourceLocation.h	7
/src/solidity/liblangutil/Token.cpp	8
/src/solidity/libsolutil/StringUtils.h	2
/src/solidity/liblangutil/Token.h	6
/src/solidity/liblangutil/ErrorReporter.cpp	7
/src/solidity/libyul/Object.h	1
/src/solidity/libyul/AsmParser.h	13
/src/solidity/libyul/AsmParser.cpp	20
/src/solidity/libsolutil/Common.h	2
/usr/include/boost/algorithm/string/predicate.hpp	5
/usr/include/boost/algorithm/string/detail/predicate.hpp	1
/usr/include/boost/algorithm/string/compare.hpp	1
/src/solidity/libyul/AST.h	28
/src/solidity/libyul/Object.cpp	1
/src/solidity/libyul/AsmAnalysis.h	2
/src/solidity/libyul/SideEffects.h	1
/src/solidity/libyul/backends/evm/EVMDialect.h	1
/src/solidity/libyul/AsmAnalysis.cpp	3
/src/solidity/libyul/ScopeFiller.cpp	2
/src/solidity/liblangutil/SourceReferenceFormatter.h	1
/src/solidity/liblangutil/SourceReferenceFormatter.cpp	10
/src/solidity/liblangutil/SourceReferenceExtractor.cpp	2
/usr/include/boost/exception/get_error_info.hpp	4
/usr/include/boost/smart_ptr/detail/operator_bool.hpp	1
/src/solidity/liblangutil/SourceReferenceExtractor.h	5
/src/solidity/liblangutil/Exceptions.cpp	1
/usr/include/boost/algorithm/string/case_conv.hpp	1
/usr/include/boost/algorithm/string/detail/case_conv.hpp	2
/usr/include/boost/algorithm/string/trim.hpp	4
/usr/include/boost/algorithm/string/detail/trim.hpp	3
/src/solidity/libsolutil/AnsiColorized.h	11
/src/solidity/test/tools/ossfuzz/yulFuzzerCommon.cpp	2
/src/solidity/test/tools/yulInterpreter/Interpreter.h	7
/src/solidity/test/tools/yulInterpreter/Interpreter.cpp	7
/src/solidity/libyul/optimiser/ASTWalker.h	1
/usr/include/boost/multiprecision/detail/precision.hpp	1
/usr/include/boost/multiprecision/detail/number_base.hpp	3
/usr/include/boost/multiprecision/cpp_int/divide.hpp	2
/usr/local/include/c++/v1/stdexcept	2
/usr/include/boost/multiprecision/number.hpp	6
/usr/include/boost/multiprecision/cpp_int/misc.hpp	2
/usr/include/boost/multiprecision/cpp_int/bitwise.hpp	9
/usr/include/boost/multiprecision/detail/default_ops.hpp	4
/usr/include/boost/lexical_cast.hpp	1
/usr/include/boost/lexical_cast/try_lexical_convert.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical_streams.hpp	6
/usr/include/boost/lexical_cast/detail/lcast_unsigned_converters.hpp	1
/usr/include/boost/lexical_cast/bad_lexical_cast.hpp	2
/src/solidity/libsolutil/Numeric.h	1
/src/solidity/test/libyul/YulOptimizerTestCommon.cpp	5
/src/solidity/test/libyul/YulOptimizerTestCommon.h	1
/usr/include/google/protobuf/arena.h	1

Fuzzer: strictasm_assembly_ossfuzz

Call tree

Min	Max	Color
0	1	red
1	10	gold
10	30	yellow
30	50	greenyellow
50	1000000000000	lawngreen

The distribution of callsites in terms of coloring is

Color Callsite count Percentage

red 1663 36.1%

gold 530 11.5%

yellow 58 1.25%

greenyellow 51 1.10%

lawngreen 2303 50.0%

All colors 4605 100

Color	Callsite count	Percentage
red	1663	36.1%
gold	530	11.5%
yellow	58	1.25%
greenyellow	51	1.10%
lawngreen	2303	50.0%
All colors	4605	100

Full call tree

The following link provides a visualisation of the full call tree overlaid with coverage information: full call tree

For further technical details on how the call tree is generated, please see the Glossary .

Fuzz blockers

The followings nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
322	4272	solidity::yul::YulStack::assemble(solidity::yul::YulStack::Machine) const	call site	_ZN6ranges11view_facadeINS_19iter_transform_viewINS_8ref_viewIKNSt3__13mapINS3_4pairINS3_6vectorIhNS3_9allocatorIhEEEES9_EENS6_INS3_12basic_stringIcNS3_11char_traitsIcEENS7_IcEEEENS7_ISF_EEEENS3_4lessISA_EENS7_INS5_IKSA_SH_EEEEEEEENS_10indirectedINS_6detail10get_secondEEEEELNS_11cardinalityEn1EE5beginISU_Lb1ELi0EEENS_14basic_iteratorINS3_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
162	1932	solidity::yul::EVMObjectCompiler::run(solidity::yul::Object&, bool)	call site
122	2587	solidity::evmasm::CommonSubexpressionEliminator::CommonSubexpressionEliminator(solidity::evmasm::KnownState const&)	call site	__clang_call_terminate
89	546	solidity::yul::Parser::parseInline(std::__1::shared_ptr const&)	call site	__cxa_guard_acquire
73	3793	solidity::evmasm::ComputeMethod::checkRepresentation(boost::multiprecision::number , (boost::multiprecision::expression_template_option)0> const&, std::__1::vector > const&) const	call site	_ZN5boost14multiprecision3powINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEEEENS_11enable_if_cIXeqsr15number_categoryIT_EE5valueLNS0_20number_category_typeE0EENS0_6numberIS8_LNS0_26expression_template_optionE0EEEE4typeERKSC_RKj
71	71	solidity::yul::YulStringRepository::ResetCallback::ResetCallback(std::__1::function )	call site	__cxa_guard_acquire
58	2527	solidity::evmasm::Assembly::optimiseInternal(solidity::evmasm::Assembly::OptimiserSettings const&, std::__1::set , std::__1::allocator >)	call site	_ZN5boost6bimaps17container_adaptor11set_adaptorINS_11multi_index6detail13ordered_indexINS3_6memberINS0_8relation6detail16relation_storageINS0_4tags6taggedIKjNS7_9member_at4leftEEENSB_IKNSt3__13setINS_14multiprecision6numberINSI_8backends15cpp_int_backendILj256ELj256ELNSI_16cpp_integer_typeE0ELNSI_18cpp_int_check_typeE0EvEELNSI_26expression_template_optionE0EEENSG_4lessISQ_EENSG_9allocatorISQ_EEEENSD_5rightEEELb1EEEjXadL_ZNSZ_4leftEEEEENSR_IjEENS4_9nth_layerILi2ENS7_15mutant_relationISF_SY_N4mpl_2naELb1EEENS0_6detail10bimap_coreIjSV_S15_S15_S15_E12core_indicesENST_IS16_EEEENS_3mpl6v_itemISE_NS1D_7vector0IS15_EELi0EEENS4_18ordered_unique_tagENS4_19null_augment_policyEEENS17_17set_view_iteratorINS4_19bidir_node_iteratorINS4_18ordered_index_nodeIS1J_NS4_15index_node_baseIS16_S1B_EEEEEEEENS17_23const_set_view_iteratorIS1R_EENS1L_INS_9iterators16reverse_iteratorIS1R_EEEENS1T_IS1X_EENS1_7support23iterator_facade_to_baseIS1S_S1U_EES15_S15_NS8_28get_mutable_relation_functorIS16_EENS7_7support22get_above_view_functorIS16_EENS17_20set_view_key_to_baseIjS16_S10_EENS1D_6vectorIS15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_EEEC2ERS1K_
42	814	solidity::yul::Parser::isValidNumberLiteral(std::__1::basic_string , std::__1::allocator > const&)	call site	_ZN5boost14multiprecision8backends13eval_multiplyILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvLj256ELj256ELS3_0ELS4_0EvEENS_11enable_if_cIXaantsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valuentsr18is_trivial_cpp_intINS6_IXT4_EXT5_EXT6_EXT7_ET8_EEEE5valueEvE4typeERS8_RKSA_RKy
24	3299	solidity::langutil::EVMVersion::hasBitwiseShifting() const	call site
23	29	solidity::langutil::DebugInfoSelection::All(bool)	call site	_ZN6ranges12view_adaptorINS_19iter_transform_viewINS_8ref_viewIKNSt3__13mapINS3_12basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEEMN8solidity8langutil18DebugInfoSelectionEbNS3_4lessISA_EENS8_INS3_4pairIKSA_SE_EEEEEEEENS_10indirectedINS_6detail10get_secondEEEEESN_LNS_11cardinalityEn1EE12begin_cursorISS_Lb1ELi0EEEDTclsr12view_adaptorE13begin_cursor_clsr3stdE7declvalIRT_EEEEv
22	510	solidity::langutil::ErrorReporter::checkForExcessiveErrors(solidity::langutil::Error::Type)	call site	__cxa_allocate_exception
22	2159	solidity::evmasm::AssemblyItem::setPushTagSubIdAndTag(unsigned long, unsigned long)	call site	_ZN5boost14multiprecision8backends15eval_left_shiftILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEENS_11enable_if_cIXntsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valueEvE4typeERS8_o

Branch Blockers [Click to view]

[EXPERIMENTAL] The followings are the branches where fuzzer fails to bypass.

Blocked Complexity	Reachable Complexity	Function Name	Blocked Branch
3041	16854	solidity::evmasm::Assembly::assemble()const	/src/solidity/libevmasm/Assembly.cpp:501
2839	14788	solidity::evmasm::Assembly::assemble()const	/src/solidity/libevmasm/Assembly.cpp:519
1151	5544	solidity::evmasm::ComputeMethod::findRepresentation(boost::multiprecision::number ,(boost::multiprecision::expression_template_option)0>const&)	/src/solidity/libevmasm/ConstantOptimiser.cpp:226
778	798	(anonymousnamespace)::createBuiltins(solidity::langutil::EVMVersion,bool)::$_10::operator()(solidity::yul::FunctionCallconst&,solidity::yul::AbstractAssembly&,solidity::yul::BuiltinContext&)const	/src/solidity/libyul/backends/evm/EVMDialect.cpp:203
778	798	(anonymousnamespace)::createBuiltins(solidity::langutil::EVMVersion,bool)::$_11::operator()(solidity::yul::FunctionCallconst&,solidity::yul::AbstractAssembly&,solidity::yul::BuiltinContext&)const	/src/solidity/libyul/backends/evm/EVMDialect.cpp:224
768	2226	solidity::yul::Parser::parseInline(std::__1::shared_ptr const&)	/src/solidity/libyul/AsmParser.cpp:125
655	1484	solidity::evmasm::Inliner::shouldInlineFullFunctionBody(unsignedlong,ranges::span ,unsignedlong)const	/src/solidity/libevmasm/Inliner.cpp:187
614	648	solidity::evmasm::Assembly::namedTag(std::__1::basic_string ,std::__1::allocator >const&,unsignedlong,unsignedlong,std::__1::optional )	/src/solidity/libevmasm/Assembly.cpp:304
479	1953	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:337
477	480	solidity::evmasm::GasMeter::dataGas(std::__1::vector >const&,bool,solidity::langutil::EVMVersion)	/src/solidity/libevmasm/GasMeter.cpp:278
352	352	solidity::evmasm::GasMeter::GasConsumption::operator+=(solidity::evmasm::GasMeter::GasConsumptionconst&)	/src/solidity/libevmasm/GasMeter.cpp:30
315	317	solidity::yul::AsmAnalyzer::validateInstructions(solidity::evmasm::Instruction,solidity::langutil::SourceLocationconst&)	/src/solidity/libyul/AsmAnalysis.cpp:720

Runtime coverage analysis

1538

906

1481

For further technical details on the call tree overview, please see the Glossary .

38.83%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/solidity/test/tools/ossfuzz/strictasm_assembly_ossfuzz.cpp	1
/src/solidity/libyul/YulString.h	13
/src/solidity/liblangutil/EVMVersion.h	10
/src/solidity/libsolidity/interface/OptimiserSettings.h	5
/src/solidity/liblangutil/DebugInfoSelection.cpp	1
/src/solidity/liblangutil/DebugInfoSelection.h	2
/src/solidity/build/deps/include/range/v3/view/view.hpp	23
/src/solidity/build/deps/include/range/v3/view/map.hpp	1
/src/solidity/build/deps/include/range/v3/view/all.hpp	8
/src/solidity/build/deps/include/range/v3/range_fwd.hpp	5
/src/solidity/build/deps/include/range/v3/view/ref.hpp	6
/src/solidity/build/deps/include/range/v3/view/transform.hpp	14
/src/solidity/build/deps/include/range/v3/functional/indirect.hpp	2
/src/solidity/build/deps/include/range/v3/view/adaptor.hpp	10
/src/solidity/build/deps/include/range/v3/view/facade.hpp	12
/src/solidity/build/deps/include/range/v3/detail/range_access.hpp	7
/src/solidity/build/deps/include/range/v3/view/interface.hpp	7
/src/solidity/build/deps/include/range/v3/range/access.hpp	8
/src/solidity/build/deps/include/range/v3/utility/compressed_pair.hpp	2
/src/solidity/build/deps/include/range/v3/utility/box.hpp	6
/src/solidity/build/deps/include/range/v3/iterator/basic_iterator.hpp	36
/src/solidity/libyul/YulStack.h	5
/src/solidity/liblangutil/CharStreamProvider.h	2
/src/solidity/liblangutil/ErrorReporter.h	6
/src/solidity/libyul/YulStack.cpp	9
/src/solidity/libyul/backends/evm/EVMDialect.cpp	2
/src/solidity/libyul/backends/wasm/WasmDialect.cpp	1
/src/solidity/libyul/Exceptions.h	8
/usr/local/include/c++/v1/exception	2
/usr/include/boost/exception/exception.hpp	17
/src/solidity/libsolutil/Exceptions.h	4
/src/solidity/libsolutil/Assertions.h	1
/usr/include/boost/exception/detail/error_info_impl.hpp	7
/usr/include/boost/exception/info.hpp	16
/usr/include/boost/smart_ptr/shared_ptr.hpp	7
/usr/include/boost/smart_ptr/detail/shared_count.hpp	4
/usr/include/boost/smart_ptr/detail/sp_counted_impl.hpp	1
/usr/include/boost/smart_ptr/detail/sp_counted_base_clang.hpp	6
/usr/include/boost/core/checked_delete.hpp	1
/usr/include/boost/exception/detail/type_info.hpp	1
/usr/include/boost/throw_exception.hpp	15
/src/solidity/libyul/ObjectParser.h	1
/src/solidity/liblangutil/ParserBase.h	4
/src/solidity/libyul/ObjectParser.cpp	8
/src/solidity/liblangutil/ParserBase.cpp	11
/src/solidity/liblangutil/Scanner.h	21
/src/solidity/liblangutil/Exceptions.h	8
/src/solidity/liblangutil/CharStream.h	8
/src/solidity/liblangutil/Scanner.cpp	29
/src/solidity/liblangutil/Common.h	6
/src/solidity/liblangutil/CharStream.cpp	4
/src/solidity/liblangutil/SourceLocation.h	6
/usr/local/include/c++/v1/optional	18
/src/solidity/liblangutil/Token.cpp	9
/src/solidity/libsolutil/StringUtils.h	7
/src/solidity/liblangutil/Token.h	6
/src/solidity/liblangutil/ErrorReporter.cpp	7
/usr/include/boost/assert/source_location.hpp	4
/src/solidity/libyul/Object.h	2
/src/solidity/libyul/AsmParser.h	13
/src/solidity/libyul/AsmParser.cpp	20
/src/solidity/libsolutil/Common.h	6
/usr/include/boost/algorithm/string/predicate.hpp	6
/usr/include/boost/range/as_literal.hpp	5
/usr/include/boost/range/begin.hpp	3
/usr/include/boost/range/iterator_range_core.hpp	2
/usr/include/boost/range/end.hpp	3
/usr/include/boost/algorithm/string/detail/predicate.hpp	1
/usr/include/boost/algorithm/string/compare.hpp	1
/src/solidity/libyul/AST.h	38
/usr/include/boost/multiprecision/cpp_int.hpp	33
/usr/include/boost/multiprecision/cpp_int/cpp_int_config.hpp	2
/usr/include/boost/multiprecision/cpp_int/multiply.hpp	8
/usr/include/boost/multiprecision/cpp_int/add.hpp	9
/usr/include/boost/multiprecision/detail/constexpr.hpp	4
/src/solidity/libsolutil/CommonData.h	24
/src/solidity/libyul/Object.cpp	1
/src/solidity/libyul/AsmAnalysis.h	2
/src/solidity/libyul/SideEffects.h	1
/src/solidity/libyul/backends/evm/EVMDialect.h	3
/src/solidity/libyul/AsmAnalysis.cpp	3
/src/solidity/libyul/ScopeFiller.cpp	2
/src/solidity/libevmasm/Assembly.h	7
/src/solidity/libevmasm/LinkerObject.h	2
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.cpp	1
/src/solidity/libyul/backends/evm/AbstractAssembly.h	2
/src/solidity/libyul/backends/evm/EVMObjectCompiler.cpp	2
/src/solidity/libyul/backends/evm/EVMObjectCompiler.h	1
/usr/include/boost/operators.hpp	2
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.cpp	12
/src/solidity/libyul/backends/evm/ControlFlowGraphBuilder.cpp	11
/src/solidity/libyul/backends/evm/ControlFlowGraph.h	4
/src/solidity/build/deps/include/range/v3/functional/bind_back.hpp	5
/src/solidity/build/deps/include/range/v3/functional/invoke.hpp	4
/src/solidity/build/deps/include/range/v3/range/conversion.hpp	6
/src/solidity/build/deps/include/range/v3/range/primitives.hpp	4
/src/solidity/build/deps/include/range/v3/utility/semiregular_box.hpp	2
/src/solidity/libsolutil/Algorithms.h	6
/src/solidity/libsolutil/cxx20.h	1
/src/solidity/libyul/backends/evm/StackLayoutGenerator.cpp	2
/src/solidity/libyul/backends/evm/StackLayoutGenerator.h	2
/src/solidity/libyul/backends/evm/StackHelpers.h	19
/src/solidity/build/deps/include/range/v3/view/enumerate.hpp	1
/src/solidity/build/deps/include/range/v3/view/zip.hpp	4
/src/solidity/build/deps/include/range/v3/view/zip_with.hpp	1
/src/solidity/build/deps/include/range/v3/view/iota.hpp	8
/src/solidity/build/deps/include/range/v3/algorithm/all_of.hpp	2
/src/solidity/build/deps/include/range/v3/functional/identity.hpp	1
/src/solidity/build/deps/include/range/v3/view/reverse.hpp	5
/src/solidity/libevmasm/Instruction.h	7
/src/solidity/libevmasm/Exceptions.h	5
/src/solidity/build/deps/include/range/v3/algorithm/any_of.hpp	3
/src/solidity/build/deps/include/range/v3/iterator/reverse_iterator.hpp	3
/src/solidity/build/deps/include/range/v3/view/take_last.hpp	1
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.h	1
/src/solidity/libyul/optimiser/FunctionCallFinder.cpp	2
/src/solidity/libyul/optimiser/ASTWalker.h	6
/src/solidity/libyul/optimiser/ASTWalker.cpp	3
/src/solidity/libyul/optimiser/FunctionCallFinder.h	1
/src/solidity/libsolutil/Exceptions.cpp	1
/usr/include/boost/exception/get_error_info.hpp	2
/usr/include/boost/smart_ptr/detail/operator_bool.hpp	1
/src/solidity/libyul/backends/evm/EVMCodeTransform.h	5
/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp	13
/src/solidity/libyul/backends/evm/VariableReferenceCounter.h	3
/src/solidity/libyul/backends/evm/VariableReferenceCounter.cpp	1
/src/solidity/libyul/optimiser/NameCollector.h	3
/src/solidity/build/deps/include/range/v3/algorithm/none_of.hpp	2
/src/solidity/build/deps/include/range/v3/algorithm/max.hpp	1
/src/solidity/libevmasm/Assembly.cpp	14
/src/solidity/libevmasm/JumpdestRemover.cpp	2
/src/solidity/libevmasm/AssemblyItem.h	21
/src/solidity/libevmasm/AssemblyItem.cpp	8
/usr/include/boost/multiprecision/detail/number_base.hpp	15
/usr/local/include/c++/v1/stdexcept	1
/usr/include/boost/multiprecision/cpp_int/bitwise.hpp	9
/usr/include/boost/multiprecision/detail/precision.hpp	7
/usr/include/boost/multiprecision/number.hpp	23
/usr/include/boost/multiprecision/cpp_int/misc.hpp	2
/usr/include/boost/multiprecision/detail/default_ops.hpp	9
/src/solidity/libevmasm/BlockDeduplicator.cpp	2
/src/solidity/libevmasm/Inliner.h	1
/src/solidity/libevmasm/Inliner.cpp	10
/src/solidity/libevmasm/SemanticInformation.cpp	8
/src/solidity/libevmasm/Instruction.cpp	2
/src/solidity/build/deps/include/range/v3/view/slice.hpp	1
/src/solidity/build/deps/include/range/v3/view/span.hpp	5
/src/solidity/build/deps/include/range/v3/view/subrange.hpp	2
/src/solidity/build/deps/include/range/v3/iterator/operations.hpp	1
/src/solidity/build/deps/include/range/v3/view/drop_last.hpp	4
/src/solidity/build/deps/include/range/v3/utility/optional.hpp	5
/src/solidity/build/deps/include/range/v3/numeric/accumulate.hpp	3
/src/solidity/libevmasm/GasMeter.h	6
/usr/include/boost/core/empty_value.hpp	3
/src/solidity/libevmasm/GasMeter.cpp	3
/usr/include/boost/multiprecision/detail/et_ops.hpp	10
/usr/include/boost/multiprecision/detail/number_compare.hpp	30
/src/solidity/libevmasm/JumpdestRemover.h	1
/src/solidity/libevmasm/PeepholeOptimiser.h	2
/src/solidity/libevmasm/PeepholeOptimiser.cpp	7
/src/solidity/libsolutil/Numeric.h	11
/src/solidity/libevmasm/BlockDeduplicator.h	3
/src/solidity/libevmasm/KnownState.h	12
/usr/include/boost/bimap/bimap.hpp	2
/usr/include/boost/multi_index_container.hpp	11
/usr/include/boost/multi_index/detail/converter.hpp	1
/usr/include/boost/bimap/views/set_view.hpp	1
/usr/include/boost/bimap/container_adaptor/set_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/ordered_associative_container_adaptor.hpp	2
/usr/include/boost/bimap/container_adaptor/associative_container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/detail/functor_bag.hpp	1
/usr/include/boost/utility/base_from_member.hpp	2
/usr/include/boost/multi_index/detail/header_holder.hpp	3
/usr/include/boost/tuple/detail/tuple_basic.hpp	5
/usr/include/boost/multi_index/detail/ord_index_impl.hpp	17
/usr/include/boost/multi_index/detail/index_base.hpp	4
/usr/include/boost/multi_index/detail/ord_index_node.hpp	14
/usr/include/boost/bimap/views/map_view.hpp	2
/usr/include/boost/bimap/container_adaptor/map_adaptor.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.h	4
/usr/include/boost/multi_index/detail/copy_map.hpp	10
/usr/include/boost/multi_index/detail/auto_space.hpp	3
/usr/include/boost/multi_index/detail/bidir_node_iterator.hpp	3
/usr/include/boost/multi_index/ordered_index.hpp	1
/usr/include/boost/multi_index/detail/raw_ptr.hpp	5
/usr/include/boost/type_traits/integral_constant.hpp	1
/usr/include/boost/multi_index/detail/index_node_base.hpp	1
/usr/include/boost/core/addressof.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.cpp	4
/src/solidity/libevmasm/KnownState.cpp	9
/src/solidity/libevmasm/ExpressionClasses.cpp	10
/src/solidity/libevmasm/ExpressionClasses.h	3
/src/solidity/libevmasm/SimplificationRules.cpp	12
/src/solidity/libevmasm/SimplificationRules.h	10
/src/solidity/libevmasm/RuleList.h	58
/src/solidity/libevmasm/SimplificationRule.h	76
/usr/local/include/c++/v1/initializer_list	2
/src/solidity/libsolutil/Keccak256.h	2
/src/solidity/libsolutil/vector_ref.h	7
/src/solidity/libsolutil/Keccak256.cpp	5
/src/solidity/libsolutil/FixedHash.h	4
/src/solidity/libevmasm/ConstantOptimiser.cpp	12
/src/solidity/libevmasm/ConstantOptimiser.h	10
/usr/include/boost/multiprecision/cpp_int/comparison.hpp	2
/usr/include/boost/multiprecision/detail/functions/pow.hpp	2
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.h	1
/src/solidity/liblangutil/Exceptions.cpp	1
/src/solidity/libevmasm/LinkerObject.cpp	1
/src/solidity/libsolutil/CommonData.cpp	2
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.cpp	2
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.h	1
/src/solidity/libyul/backends/wasm/WasmCodeTransform.cpp	7
/src/solidity/libyul/backends/wasm/WasmAST.h	12
/src/solidity/libyul/optimiser/TypeInfo.cpp	3
/src/solidity/libyul/backends/wasm/WasmCodeTransform.h	2
/src/solidity/libyul/optimiser/NameDispenser.cpp	4
/src/solidity/libyul/optimiser/OptimizerUtilities.cpp	1
/src/solidity/libyul/optimiser/NameDispenser.h	1
/src/solidity/libyul/optimiser/TypeInfo.h	1
/src/solidity/libyul/backends/wasm/TextTransform.cpp	5
/src/solidity/libyul/backends/wasm/BinaryTransform.cpp	30
/src/solidity/libsolutil/LEB128.h	2
/src/solidity/libyul/backends/wasm/BinaryTransform.h	2

Fuzzer: solc_mutator_ossfuzz

Call tree

Min	Max	Color
0	1	red
1	10	gold
10	30	yellow
30	50	greenyellow
50	1000000000000	lawngreen

The distribution of callsites in terms of coloring is

Color Callsite count Percentage

red 3722 29.4%

gold 828 6.55%

yellow 427 3.38%

greenyellow 241 1.90%

lawngreen 7412 58.6%

All colors 12630 100

Color	Callsite count	Percentage
red	3722	29.4%
gold	828	6.55%
yellow	427	3.38%
greenyellow	241	1.90%
lawngreen	7412	58.6%
All colors	12630	100

Full call tree

The following link provides a visualisation of the full call tree overlaid with coverage information: full call tree

For further technical details on how the call tree is generated, please see the Glossary .

Fuzz blockers

The followings nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
434	12145	(anonymous namespace)::indent(std::__1::basic_string , std::__1::allocator > const&)	call site	_ZN5boost14multiprecisionltINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEELNS0_26expression_template_optionE0EiEENS_11enable_if_cIXaasr6detail22is_valid_mixed_compareINS0_6numberIT_XT0_EEET1_EE5valuenesr15number_categoryISA_EE5valueLNS0_20number_category_typeE4EEbE4typeERKSB_RKSC_
352	6781	solidity::yul::AsmAnalyzer::analyzeStrictAssertCorrect(solidity::yul::Dialect const&, solidity::yul::Object const&)	call site	_ZNK6ranges6detail12to_container2fnINS0_10from_rangeINSt3__16vectorEEEEclINS_14transform_viewINS_8ref_viewIKNS5_IN8solidity3yul9TypedNameENS4_9allocatorISD_EEEEEEZNSC_23ControlFlowGraphBuilder16registerFunctionERKNSC_18FunctionDefinitionEE3$_6EELb1ELi0ELi0EEEDTclsr10from_rangeE9from_rng_IT_ELi0EEEOSP_
186	7835	solidity::evmasm::Assembly::Assembly(bool, std::__1::basic_string , std::__1::allocator >)	call site	_ZN6ranges11view_facadeINS_18iter_zip_with_viewINS_6detail16indirect_zip_fn_EJNS_8ref_viewINSt3__16vectorINS5_7variantIJN8solidity3yul27FunctionCallReturnLabelSlotENS9_23FunctionReturnLabelSlotENS9_12VariableSlotENS9_11LiteralSlotENS9_13TemporarySlotENS9_8JunkSlotEEEENS5_9allocatorISG_EEEEEENS4_IKSJ_EEEEELNS_11cardinalityEn1EE5beginISN_Lb1ELi0EEENS_14basic_iteratorINS5_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
121	8389	solidity::evmasm::CommonSubexpressionEliminator::CommonSubexpressionEliminator(solidity::evmasm::KnownState const&)	call site	__clang_call_terminate
108	5131	solidity::frontend::CHC::checkAndReportTarget(solidity::frontend::CHC::CHCVerificationTarget const&, std::__1::vector > const&, solidity::langutil::ErrorId, std::__1::basic_string , std::__1::allocator >, std::__1::basic_string , std::__1::allocator >)	call site	_ZN6ranges11view_facadeINS_19iter_transform_viewINS_8ref_viewINSt3__13mapIPKN8solidity8frontend18ContractDefinitionEPKNS6_9PredicateENS3_4lessIS9_EENS3_9allocatorINS3_4pairIKS9_SC_EEEEEEEENS_10indirectedINS_6detail10get_secondEEEEELNS_11cardinalityEn1EE5beginISQ_Lb1ELi0EEENS_14basic_iteratorINS3_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
106	4950	solidity::frontend::IntegerType::minValue() const	call site	_ZN5boost14multiprecision8backends16eval_right_shiftILj0ELj0ELNS0_18cpp_int_check_typeE0ENSt3__19allocatorIyEEEENS_11enable_if_cIXntsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_ELNS0_16cpp_integer_typeE1EXT1_ET2_EEEE5valueEvE4typeERSB_o
101	6483	solidity::yul::YulStack::analyzeParsed(solidity::yul::Object&)	call site
87	7623	solidity::yul::CallGraph::recursiveFunctions() const	call site	_ZN6ranges11view_facadeINS_18iter_zip_with_viewINS_6detail16indirect_zip_fn_EJNS_8ref_viewINSt3__16vectorIN8solidity3yul10IdentifierENS5_9allocatorIS9_EEEEEENS4_INS6_INS5_8optionalINS8_9YulStringEEENSA_ISG_EEEEEEEEELNS_11cardinalityEn1EE5beginISK_Lb1ELi0EEENS_14basic_iteratorINS5_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
83	6215	solidity::yul::reindent(std::__1::basic_string , std::__1::allocator > const&)	call site	_ZN5boost9function2INS_14iterator_rangeINSt3__111__wrap_iterIPKcEEEES6_S6_EC2INS_9algorithm6detail13token_finderFINSB_10is_any_ofFIcEEEEEET_NS_10enable_if_IXntsr11is_integralISG_EE5valueEiE4typeE
73	4044	solidity::frontend::ControlFlowAnalyzer::checkUninitializedAccess(solidity::frontend::CFGNode const, solidity::frontend::CFGNode const, bool, std::__1::optional , std::__1::allocator > >)	call site	_ZNK6ranges11_iter_swap_2fnclIRNSt3__111__wrap_iterIPPKN8solidity8frontend18VariableOccurrenceEEESC_EENS_6detail9enable_ifIXaant29is_adl_indirectly_swappable_vIT_T0_Esr17is_swappable_withIDTdeclsr3stdE7declvalIRSF_EEEDTdeclsr3stdE7declvalIRSG_EEEEE5valueEE6invokeIvEEOSF_OSG_
62	5789	solidity::yul::AsmPrinter::formatSourceLocation(solidity::langutil::SourceLocation const&, std::__1::map , std::__1::allocator >, unsigned int, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > const, unsigned int> > > const&, solidity::langutil::DebugInfoSelection const&, solidity::langutil::CharStreamProvider const*)	call site
60	12005	solidity::frontend::CompilerStack::compileContract(solidity::frontend::ContractDefinition const&, std::__1::map , std::__1::less , std::__1::allocator > > >&)	call site

Branch Blockers [Click to view]

[EXPERIMENTAL] The followings are the branches where fuzzer fails to bypass.

Blocked Complexity	Reachable Complexity	Function Name	Blocked Branch
36564	76838	solidity::frontend::CompilerStack::compile(solidity::frontend::CompilerStack::State)	/src/solidity/libsolidity/interface/CompilerStack.cpp:667
9361	29279	solidity::frontend::ArrayUtils::copyArrayToMemory(solidity::frontend::ArrayTypeconst&,bool)const	/src/solidity/libsolidity/codegen/ArrayUtils.cpp:366
6722	7247	solidity::yul::YulStack::optimize()	/src/solidity/libyul/YulStack.cpp:115
6532	212368	solidity::frontend::ExpressionCompiler::visit(solidity::frontend::MemberAccessconst&)	/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp:1615
4680	9185	solidity::yul::OptimiserSuite::run(solidity::yul::Dialectconst&,solidity::yul::GasMeterconst*,solidity::yul::Object&,bool,std::__1::basic_string_view >,std::__1::optional ,std::__1::set ,std::__1::allocator >const&)	/src/solidity/libyul/optimiser/Suite.cpp:148
4680	5530	solidity::yul::OptimiserSuite::run(solidity::yul::Dialectconst&,solidity::yul::GasMeterconst*,solidity::yul::Object&,bool,std::__1::basic_string_view >,std::__1::optional ,std::__1::set ,std::__1::allocator >const&)	/src/solidity/libyul/optimiser/Suite.cpp:159
3556	6740	solidity::frontend::CHC::checkVerificationTargets()	/src/solidity/libsolidity/formal/CHC.cpp:1665
3166	3373	solidity::frontend::CHC::checkAndReportTarget(solidity::frontend::CHC::CHCVerificationTargetconst&,std::__1::vector >const&,solidity::langutil::ErrorId,std::__1::basic_string ,std::__1::allocator >,std::__1::basic_string ,std::__1::allocator >)	/src/solidity/libsolidity/formal/CHC.cpp:1822
2727	8616	solidity::frontend::YulUtilFunctions::overflowCheckedIntLiteralExpFunction(solidity::frontend::RationalNumberTypeconst&,solidity::frontend::IntegerTypeconst&,solidity::frontend::IntegerTypeconst&)::$_33::operator()()const	/src/solidity/libsolidity/codegen/YulUtilFunctions.cpp:970
2252	14065	solidity::frontend::CompilerContext::appendInlineAssembly(std::__1::basic_string ,std::__1::allocator >const&,std::__1::vector ,std::__1::allocator >,std::__1::allocator ,std::__1::allocator >>>const&,std::__1::set ,std::__1::allocator >,std::__1::less ,std::__1::allocator >>,std::__1::allocator ,std::__1::allocator >>>const&,bool,solidity::frontend::OptimiserSettingsconst&,std::__1::basic_string ,std::__1::allocator >)	/src/solidity/libsolidity/codegen/CompilerContext.cpp:477
1982	129530	solidity::frontend::CompilerUtils::encodeToMemory(std::__1::vector >const&,std::__1::vector >const&,bool,bool,bool)	/src/solidity/libsolidity/codegen/CompilerUtils.cpp:511
1393	1396	solidity::frontend::test::TestCaseReader::parseSourcesAndSettingsWithLineNumber(std::__1::basic_istream >&)	/src/solidity/test/TestCaseReader.cpp:168

Runtime coverage analysis

6360

1675

3452

For further technical details on the call tree overview, please see the Glossary .

51.48%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/solidity/test/tools/ossfuzz/solc_ossfuzz.cpp	1
/src/solidity/test/TestCaseReader.cpp	2
/usr/include/boost/filesystem/path.hpp	20
/src/solidity/test/TestCaseReader.h	4
/usr/include/boost/algorithm/string/predicate.hpp	13
/usr/include/boost/range/as_literal.hpp	7
/usr/include/boost/range/end.hpp	9
/usr/include/boost/range/iterator_range_core.hpp	24
/usr/include/boost/range/begin.hpp	10
/usr/include/boost/algorithm/string/compare.hpp	1
/usr/local/include/c++/v1/initializer_list	4
/usr/include/boost/algorithm/string/trim.hpp	6
/usr/include/boost/algorithm/string/classification.hpp	2
/usr/include/boost/algorithm/string/detail/classification.hpp	8
/usr/include/boost/algorithm/string/detail/trim.hpp	5
/usr/include/boost/assert/source_location.hpp	3
/usr/include/boost/throw_exception.hpp	31
/usr/include/boost/exception/exception.hpp	16
/usr/include/boost/exception/info.hpp	25
/src/solidity/test/libsolidity/util/SoltestErrors.h	3
/usr/local/include/c++/v1/exception	2
/src/solidity/libsolutil/Exceptions.h	8
/src/solidity/libsolutil/Assertions.h	1
/usr/include/boost/exception/detail/error_info_impl.hpp	2
/usr/include/boost/filesystem/operations.hpp	2
/usr/include/boost/filesystem/file_status.hpp	3
/src/solidity/libsolutil/CommonIO.cpp	4
/src/solidity/test/tools/fuzzer_common.cpp	2
/src/solidity/libsolidity/interface/CompilerStack.cpp	37
/src/solidity/liblangutil/CharStreamProvider.h	3
/src/solidity/libsolidity/interface/OptimiserSettings.h	7
/src/solidity/liblangutil/EVMVersion.h	17
/src/solidity/libsolidity/formal/ModelCheckerSettings.h	19
/src/solidity/libsolidity/formal/ModelCheckerSettings.cpp	2
/src/solidity/build/deps/include/range/v3/view/view.hpp	48
/src/solidity/build/deps/include/range/v3/view/map.hpp	1
/src/solidity/build/deps/include/range/v3/view/all.hpp	9
/src/solidity/build/deps/include/range/v3/range_fwd.hpp	5
/src/solidity/build/deps/include/range/v3/view/ref.hpp	7
/src/solidity/build/deps/include/range/v3/view/transform.hpp	27
/src/solidity/build/deps/include/range/v3/functional/indirect.hpp	4
/src/solidity/build/deps/include/range/v3/view/adaptor.hpp	10
/src/solidity/build/deps/include/range/v3/view/facade.hpp	23
/src/solidity/build/deps/include/range/v3/detail/range_access.hpp	6
/src/solidity/build/deps/include/range/v3/view/interface.hpp	7
/src/solidity/build/deps/include/range/v3/range/access.hpp	12
/src/solidity/build/deps/include/range/v3/utility/compressed_pair.hpp	3
/src/solidity/build/deps/include/range/v3/utility/box.hpp	7
/src/solidity/build/deps/include/range/v3/iterator/basic_iterator.hpp	52
/src/solidity/build/deps/include/range/v3/view/split.hpp	3
/src/solidity/build/deps/include/range/v3/functional/bind_back.hpp	9
/src/solidity/build/deps/include/range/v3/functional/invoke.hpp	14
/src/solidity/build/deps/include/range/v3/view/single.hpp	2
/src/solidity/build/deps/include/range/v3/range/conversion.hpp	12
/usr/local/include/c++/v1/optional	40
/src/solidity/libsmtutil/SolverInterface.h	13
/src/solidity/libsolidity/interface/ImportRemapper.h	2
/src/solidity/liblangutil/ErrorReporter.h	7
/src/solidity/liblangutil/DebugInfoSelection.h	4
/src/solidity/liblangutil/DebugInfoSelection.cpp	2
/src/solidity/liblangutil/Exceptions.h	16
/src/solidity/libsolidity/interface/CompilerStack.h	1
/src/solidity/liblangutil/ErrorReporter.cpp	22
/src/solidity/liblangutil/SemVerHandler.cpp	11
/src/solidity/liblangutil/SemVerHandler.h	10
/src/solidity/liblangutil/SourceLocation.h	12
/src/solidity/libsolidity/parsing/Parser.h	11
/src/solidity/liblangutil/ParserBase.h	4
/src/solidity/libsolidity/parsing/Parser.cpp	132
/src/solidity/liblangutil/Scanner.h	25
/src/solidity/liblangutil/ParserBase.cpp	14
/src/solidity/liblangutil/Token.h	17
/src/solidity/liblangutil/Token.cpp	9
/src/solidity/libsolidity/ast/AST.h	67
/src/solidity/libsolidity/ast/ASTEnums.h	1
/src/solidity/liblangutil/Scanner.cpp	30
/src/solidity/liblangutil/CharStream.cpp	7
/src/solidity/liblangutil/CharStream.h	11
/src/solidity/liblangutil/Common.h	6
/src/solidity/libsolutil/StringUtils.h	12
/src/solidity/libyul/backends/evm/EVMDialect.cpp	9
/src/solidity/libyul/YulString.h	12
/src/solidity/libyul/AsmParser.h	14
/src/solidity/libyul/AsmParser.cpp	21
/src/solidity/libsolutil/Common.h	6
/usr/include/boost/algorithm/string/detail/predicate.hpp	1
/src/solidity/libyul/AST.h	41
/usr/include/boost/multiprecision/cpp_int.hpp	37
/usr/include/boost/multiprecision/cpp_int/cpp_int_config.hpp	2
/usr/include/boost/multiprecision/cpp_int/multiply.hpp	7
/usr/include/boost/multiprecision/cpp_int/add.hpp	9
/usr/include/boost/multiprecision/detail/constexpr.hpp	4
/src/solidity/libyul/Exceptions.h	5
/src/solidity/libsolutil/SetOnce.h	13
/usr/include/boost/iterator/iterator_facade.hpp	5
/usr/include/boost/type_traits/integral_constant.hpp	2
/src/solidity/libsolidity/interface/ImportRemapper.cpp	2
/src/solidity/libsolidity/interface/ReadFile.h	2
/src/solidity/libsolidity/analysis/SyntaxChecker.h	1
/src/solidity/libsolidity/ast/ASTVisitor.h	6
/src/solidity/libsolidity/analysis/Scoper.cpp	1
/src/solidity/libsolidity/analysis/Scoper.h	2
/src/solidity/libsolidity/analysis/SyntaxChecker.cpp	1
/src/solidity/libsolidity/analysis/NameAndTypeResolver.cpp	17
/src/solidity/libsolidity/analysis/GlobalContext.cpp	5
/src/solidity/libsolidity/analysis/DeclarationContainer.cpp	5
/src/solidity/libsolutil/CommonData.h	86
/src/solidity/libsolidity/ast/AST.cpp	20
/src/solidity/libsolidity/analysis/DeclarationContainer.h	2
/src/solidity/build/deps/include/range/v3/view/filter.hpp	1
/src/solidity/libsolidity/analysis/DocStringTagParser.h	1
/src/solidity/libsolidity/analysis/DocStringTagParser.cpp	2
/src/solidity/libsolidity/ast/TypeProvider.h	10
/src/solidity/libsolidity/ast/TypeProvider.cpp	19
/src/solidity/libsolidity/analysis/GlobalContext.h	1
/src/solidity/libsolidity/analysis/ReferencesResolver.h	1
/src/solidity/libyul/optimiser/ASTWalker.h	8
/src/solidity/libsolidity/analysis/ReferencesResolver.cpp	1
/src/solidity/libsolidity/analysis/DeclarationTypeChecker.h	2
/src/solidity/libsolidity/analysis/DeclarationTypeChecker.cpp	1
/src/solidity/libsolidity/analysis/ContractLevelChecker.h	2
/src/solidity/libsolidity/analysis/OverrideChecker.h	8
/src/solidity/libsolidity/analysis/TypeChecker.h	1
/src/solidity/libsolidity/analysis/ContractLevelChecker.cpp	20
/src/solidity/libsolidity/ast/Types.cpp	32
/src/solidity/libsolidity/ast/Types.h	44
/src/solidity/libsolidity/analysis/OverrideChecker.cpp	39
/src/solidity/build/deps/include/range/v3/view/reverse.hpp	9
/src/solidity/build/deps/include/range/v3/iterator/reverse_iterator.hpp	3
/src/solidity/libsolutil/Result.h	10
/usr/include/boost/algorithm/string/join.hpp	4
/src/solidity/build/deps/include/range/v3/functional/reference_wrapper.hpp	8
/src/solidity/build/deps/include/range/v3/utility/semiregular_box.hpp	3
/usr/include/boost/algorithm/string/detail/sequence.hpp	5
/src/solidity/libsolutil/LazyInit.h	3
/src/solidity/libsolutil/Keccak256.h	2
/src/solidity/libsolutil/vector_ref.h	13
/src/solidity/libsolutil/Keccak256.cpp	5
/src/solidity/libsolutil/FixedHash.h	15
/src/solidity/libsolidity/analysis/TypeChecker.cpp	2
/usr/include/boost/core/empty_value.hpp	3
/usr/include/boost/multiprecision/detail/number_base.hpp	21
/usr/include/boost/multiprecision/number.hpp	33
/usr/include/boost/multiprecision/detail/precision.hpp	8
/usr/include/boost/multiprecision/detail/et_ops.hpp	16
/usr/local/include/c++/v1/stdexcept	2
/usr/include/boost/multiprecision/detail/default_ops.hpp	10
/usr/include/boost/multiprecision/cpp_int/bitwise.hpp	14
/usr/include/boost/multiprecision/detail/number_compare.hpp	40
/src/solidity/libsolidity/analysis/DocStringAnalyser.h	1
/src/solidity/libsolidity/analysis/DocStringAnalyser.cpp	1
/src/solidity/libsolidity/analysis/PostTypeChecker.cpp	3
/src/solidity/libsolidity/analysis/PostTypeChecker.h	1
/src/solidity/libsolidity/analysis/FunctionCallGraph.cpp	6
/src/solidity/libsolidity/analysis/FunctionCallGraph.h	2
/src/solidity/libsolidity/ast/CallGraph.h	3
/src/solidity/libsolutil/Algorithms.h	23
/src/solidity/libsolidity/analysis/PostTypeContractLevelChecker.h	1
/src/solidity/libsolidity/analysis/PostTypeContractLevelChecker.cpp	2
/src/solidity/libsolutil/FunctionSelector.h	2
/usr/include/boost/multiprecision/cpp_int/misc.hpp	2
/src/solidity/libsolidity/analysis/ImmutableValidator.h	1
/src/solidity/libsolidity/analysis/ImmutableValidator.cpp	3
/src/solidity/libsolidity/analysis/ControlFlowGraph.h	8
/src/solidity/libsolidity/analysis/ControlFlowGraph.cpp	2
/src/solidity/libsolidity/analysis/ControlFlowRevertPruner.h	2
/src/solidity/libsolidity/analysis/ControlFlowRevertPruner.cpp	5
/src/solidity/libsolidity/analysis/ControlFlowAnalyzer.h	2
/src/solidity/libsolidity/analysis/ControlFlowAnalyzer.cpp	7
/src/solidity/build/deps/include/range/v3/algorithm/sort.hpp	11
/src/solidity/build/deps/include/range/v3/iterator/operations.hpp	8
/src/solidity/build/deps/include/range/v3/algorithm/partial_sort.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/heap_algorithm.hpp	4
/src/solidity/build/deps/include/range/v3/iterator/access.hpp	4
/src/solidity/build/deps/include/range/v3/utility/move.hpp	1
/src/solidity/build/deps/include/concepts/swap.hpp	2
/src/solidity/build/deps/include/range/v3/functional/identity.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/move_backward.hpp	1
/src/solidity/libsolidity/analysis/StaticAnalyzer.cpp	3
/src/solidity/libsolidity/analysis/ViewPureChecker.h	1
/src/solidity/libsolidity/analysis/ViewPureChecker.cpp	1
/src/solidity/libsolidity/formal/ModelChecker.cpp	5
/src/solidity/liblangutil/UniqueErrorReporter.h	8
/src/solidity/libsolidity/formal/EncodingContext.cpp	9
/src/solidity/libsolidity/formal/SymbolicState.h	12
/src/solidity/libsolidity/formal/SymbolicVariables.cpp	11
/src/solidity/libsolidity/formal/SymbolicTypes.cpp	24
/src/solidity/libsmtutil/Sorts.cpp	1
/src/solidity/libsolidity/formal/SymbolicVariables.h	3
/src/solidity/libsolidity/formal/SymbolicState.cpp	7
/src/solidity/libsolidity/formal/BMC.cpp	3
/src/solidity/libsolidity/formal/SMTEncoder.cpp	24
/src/solidity/libsolidity/formal/VariableUsage.h	3
/src/solidity/libsolidity/formal/SMTEncoder.h	2
/src/solidity/libsolidity/formal/CHC.cpp	19
/src/solidity/libsolidity/formal/BMC.h	2
/src/solidity/libsolidity/formal/EncodingContext.h	5
/src/solidity/build/deps/include/range/v3/algorithm/any_of.hpp	5
/src/solidity/libsmtutil/CHCSmtLib2Interface.h	2
/src/solidity/libsolidity/formal/Predicate.cpp	9
/src/solidity/libsolidity/formal/ArraySlicePredicate.h	1
/src/solidity/libsmtutil/CHCSmtLib2Interface.cpp	1
/src/solidity/libsolidity/formal/SSAVariable.cpp	1
/usr/include/boost/rational.hpp	2
/src/solidity/libsolidity/formal/PredicateSort.cpp	6
/src/solidity/libsolidity/formal/SSAVariable.h	1
/src/solidity/libsmtutil/Exceptions.h	1
/src/solidity/libsolidity/formal/PredicateInstance.cpp	2
/usr/include/boost/multiprecision/cpp_int/comparison.hpp	2
/usr/include/boost/lexical_cast.hpp	1
/usr/include/boost/lexical_cast/try_lexical_convert.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical_streams.hpp	6
/usr/include/boost/lexical_cast/detail/lcast_unsigned_converters.hpp	1
/usr/include/boost/lexical_cast/bad_lexical_cast.hpp	2
/usr/include/boost/multiprecision/cpp_int/divide.hpp	2
/src/solidity/libsolutil/Numeric.h	17
/src/solidity/libsolutil/CommonData.cpp	6
/src/solidity/libsolidity/formal/Invariants.cpp	2
/src/solidity/libsolidity/formal/ExpressionFormatter.cpp	7
/src/solidity/libsolidity/formal/CHC.h	4
/src/solidity/libsolidity/formal/Predicate.h	1
/src/solidity/libsolidity/formal/ModelChecker.h	1
/src/solidity/libsolidity/analysis/NameAndTypeResolver.h	1
/src/solidity/libsolidity/codegen/CompilerContext.h	33
/src/solidity/libsolidity/codegen/ir/IRGenerator.h	2
/src/solidity/libsolidity/codegen/ir/IRGenerationContext.h	15
/src/solidity/libsolidity/codegen/MultiUseYulFunctionCollector.h	3
/src/solidity/libsolidity/codegen/YulUtilFunctions.h	1
/src/solidity/libsolutil/IpfsHash.cpp	10
/src/solidity/libsolutil/picosha2.h	19
/src/solidity/libsolutil/SwarmHash.h	1
/src/solidity/libsolutil/SwarmHash.cpp	3
/src/solidity/libsolidity/codegen/ir/IRGenerator.cpp	18
/src/solidity/libsolutil/Whiskers.cpp	12
/src/solidity/libsolidity/codegen/MultiUseYulFunctionCollector.cpp	3
/src/solidity/libsolidity/codegen/ir/IRGenerationContext.cpp	11
/src/solidity/libsolidity/codegen/ir/Common.cpp	9
/src/solidity/libsolutil/CommonIO.h	2
/src/solidity/libsolutil/Whiskers.h	4
/src/solidity/libyul/AsmPrinter.cpp	3
/usr/include/boost/algorithm/string/replace.hpp	5
/usr/include/boost/algorithm/string/finder.hpp	3
/usr/include/boost/algorithm/string/detail/finder.hpp	6
/usr/include/boost/algorithm/string/formatter.hpp	2
/usr/include/boost/algorithm/string/detail/formatter.hpp	3
/usr/include/boost/algorithm/string/find_format.hpp	2
/usr/include/boost/range/empty.hpp	1
/usr/include/boost/algorithm/string/detail/find_format_all.hpp	4
/usr/include/boost/algorithm/string/detail/find_format_store.hpp	8
/usr/include/boost/range/detail/safe_bool.hpp	1
/usr/include/boost/algorithm/string/detail/replace_storage.hpp	4
/src/solidity/libsolidity/codegen/YulUtilFunctions.cpp	11
/src/solidity/libsolidity/codegen/CompilerUtils.h	3
/src/solidity/libyul/Object.h	6
/src/solidity/libyul/Utilities.cpp	6
/usr/include/boost/range/distance.hpp	1
/usr/include/boost/iterator/distance.hpp	2
/usr/include/boost/algorithm/string/split.hpp	1
/usr/include/boost/algorithm/string/iter_find.hpp	1
/usr/include/boost/algorithm/string/find_iterator.hpp	4
/usr/include/boost/algorithm/string/detail/find_iterator.hpp	5
/usr/include/boost/function/function_template.hpp	12
/usr/include/boost/function/function_base.hpp	5
/usr/include/boost/core/addressof.hpp	2
/usr/include/boost/iterator/transform_iterator.hpp	3
/usr/include/boost/iterator/iterator_adaptor.hpp	3
/src/solidity/libyul/YulStack.h	6
/src/solidity/libyul/YulStack.cpp	14
/src/solidity/libyul/ObjectParser.h	1
/src/solidity/libyul/ObjectParser.cpp	8
/src/solidity/libyul/backends/wasm/WasmDialect.cpp	1
/src/solidity/libyul/Object.cpp	3
/src/solidity/libyul/AsmAnalysis.h	2
/src/solidity/libyul/SideEffects.h	1
/src/solidity/libyul/backends/evm/EVMDialect.h	7
/src/solidity/libyul/AsmAnalysis.cpp	4
/src/solidity/libyul/ScopeFiller.cpp	2
/src/solidity/liblangutil/SourceReferenceFormatter.cpp	11
/src/solidity/liblangutil/SourceReferenceFormatter.h	3
/src/solidity/liblangutil/SourceReferenceExtractor.cpp	2
/usr/include/boost/exception/get_error_info.hpp	6
/usr/include/boost/exception/detail/type_info.hpp	1
/usr/include/boost/smart_ptr/detail/operator_bool.hpp	1
/usr/include/boost/smart_ptr/shared_ptr.hpp	1
/src/solidity/liblangutil/SourceReferenceExtractor.h	5
/src/solidity/liblangutil/Exceptions.cpp	2
/usr/include/boost/algorithm/string/case_conv.hpp	1
/usr/include/boost/algorithm/string/detail/case_conv.hpp	2
/src/solidity/libsolutil/AnsiColorized.h	11
/src/solidity/libyul/optimiser/Suite.cpp	10
/usr/include/boost/operators.hpp	2
/src/solidity/libyul/optimiser/Disambiguator.h	1
/src/solidity/libyul/optimiser/ASTCopier.h	5
/src/solidity/libyul/optimiser/NameDispenser.cpp	5
/src/solidity/libyul/optimiser/ASTCopier.cpp	3
/src/solidity/libyul/optimiser/NameCollector.h	4
/src/solidity/libyul/optimiser/Suite.h	1
/src/solidity/libyul/optimiser/Metrics.cpp	1
/src/solidity/libyul/optimiser/Metrics.h	1
/src/solidity/libyul/optimiser/ASTWalker.cpp	4
/src/solidity/libyul/optimiser/NameSimplifier.h	2
/src/solidity/libyul/optimiser/NameSimplifier.cpp	2
/src/solidity/libyul/optimiser/OptimizerUtilities.cpp	2
/src/solidity/libyul/optimiser/NameDispenser.h	2
/src/solidity/libyul/optimiser/StackCompressor.cpp	7
/src/solidity/libyul/optimiser/Semantics.cpp	2
/src/solidity/libyul/optimiser/Semantics.h	3
/src/solidity/libyul/AsmAnalysisInfo.h	3
/src/solidity/libyul/backends/evm/ControlFlowGraphBuilder.cpp	11
/src/solidity/libyul/backends/evm/ControlFlowGraph.h	4
/src/solidity/libsolutil/cxx20.h	1
/src/solidity/libyul/backends/evm/StackLayoutGenerator.cpp	29
/src/solidity/libyul/backends/evm/StackLayoutGenerator.h	2
/src/solidity/build/deps/include/range/v3/algorithm/find.hpp	2
/src/solidity/build/deps/include/range/v3/view/enumerate.hpp	1
/src/solidity/build/deps/include/range/v3/view/zip.hpp	6
/src/solidity/build/deps/include/range/v3/view/zip_with.hpp	1
/src/solidity/build/deps/include/range/v3/view/iota.hpp	5
/src/solidity/libyul/backends/evm/StackHelpers.h	6
/src/solidity/build/deps/include/range/v3/algorithm/all_of.hpp	2
/src/solidity/build/deps/include/range/v3/view/drop.hpp	1
/src/solidity/libyul/optimiser/DataFlowAnalyzer.cpp	4
/src/solidity/libyul/optimiser/DataFlowAnalyzer.h	3
/src/solidity/libyul/optimiser/KnowledgeBase.h	2
/src/solidity/libyul/optimiser/Rematerialiser.cpp	2
/src/solidity/libyul/optimiser/NameCollector.cpp	3
/src/solidity/libyul/optimiser/Rematerialiser.h	1
/src/solidity/libyul/optimiser/UnusedPruner.cpp	5
/src/solidity/build/deps/include/range/v3/action/remove_if.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/remove_if.hpp	2
/src/solidity/build/deps/include/range/v3/algorithm/find_if.hpp	1
/src/solidity/build/deps/include/range/v3/action/erase.hpp	2
/src/solidity/libyul/optimiser/UnusedPruner.h	2
/src/solidity/libyul/CompilabilityChecker.cpp	1
/src/solidity/libyul/backends/evm/NoOutputAssembly.cpp	2
/src/solidity/libyul/Dialect.h	3
/src/solidity/libevmasm/Instruction.h	8
/src/solidity/liblangutil/EVMVersion.cpp	1
/src/solidity/libevmasm/Instruction.cpp	2
/src/solidity/libyul/ControlFlowSideEffects.h	1
/src/solidity/libevmasm/SemanticInformation.cpp	9
/src/solidity/libyul/backends/evm/NoOutputAssembly.h	1
/src/solidity/libyul/backends/evm/AbstractAssembly.h	4
/src/solidity/libyul/backends/evm/EVMCodeTransform.h	5
/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp	13
/src/solidity/libyul/backends/evm/VariableReferenceCounter.h	3
/src/solidity/libyul/backends/evm/VariableReferenceCounter.cpp	1
/src/solidity/build/deps/include/range/v3/algorithm/none_of.hpp	3
/src/solidity/libevmasm/Exceptions.h	5
/src/solidity/build/deps/include/range/v3/algorithm/max.hpp	1
/src/solidity/libyul/CompilabilityChecker.h	1
/src/solidity/libyul/backends/evm/ConstantOptimiser.h	1
/src/solidity/libyul/optimiser/StackLimitEvader.cpp	6
/src/solidity/build/deps/include/range/v3/view/take.hpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.cpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.h	1
/src/solidity/libyul/optimiser/CallGraphGenerator.cpp	5
/src/solidity/libyul/optimiser/CallGraphGenerator.h	4
/src/solidity/build/deps/include/range/v3/view/concat.hpp	1
/src/solidity/libyul/optimiser/StackToMemoryMover.cpp	9
/src/solidity/libyul/optimiser/StackToMemoryMover.h	3
/src/solidity/libyul/optimiser/VarNameCleaner.h	2
/src/solidity/libyul/optimiser/VarNameCleaner.cpp	1
/src/solidity/libsolutil/Exceptions.cpp	2
/src/solidity/libevmasm/Assembly.h	22
/src/solidity/libevmasm/LinkerObject.h	4
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.cpp	1
/src/solidity/libyul/backends/evm/EVMObjectCompiler.cpp	2
/src/solidity/libyul/backends/evm/EVMObjectCompiler.h	1
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.cpp	8
/src/solidity/build/deps/include/range/v3/view/take_last.hpp	1
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.h	1
/src/solidity/libevmasm/Assembly.cpp	17
/src/solidity/libevmasm/JumpdestRemover.cpp	2
/src/solidity/libevmasm/AssemblyItem.h	21
/src/solidity/libevmasm/AssemblyItem.cpp	8
/src/solidity/libevmasm/BlockDeduplicator.cpp	2
/src/solidity/libevmasm/Inliner.h	1
/src/solidity/libevmasm/Inliner.cpp	10
/src/solidity/build/deps/include/range/v3/view/slice.hpp	1
/src/solidity/build/deps/include/range/v3/view/span.hpp	5
/src/solidity/build/deps/include/range/v3/range/primitives.hpp	1
/src/solidity/build/deps/include/range/v3/view/subrange.hpp	2
/src/solidity/build/deps/include/range/v3/view/drop_last.hpp	3
/src/solidity/build/deps/include/range/v3/utility/optional.hpp	5
/src/solidity/build/deps/include/range/v3/numeric/accumulate.hpp	3
/src/solidity/libevmasm/GasMeter.h	6
/src/solidity/libevmasm/GasMeter.cpp	3
/src/solidity/libevmasm/JumpdestRemover.h	1
/src/solidity/libevmasm/PeepholeOptimiser.h	2
/src/solidity/libevmasm/PeepholeOptimiser.cpp	7
/src/solidity/libevmasm/BlockDeduplicator.h	3
/src/solidity/libevmasm/KnownState.h	12
/usr/include/boost/bimap/bimap.hpp	2
/usr/include/boost/multi_index_container.hpp	11
/usr/include/boost/multi_index/detail/converter.hpp	1
/usr/include/boost/bimap/views/set_view.hpp	1
/usr/include/boost/bimap/container_adaptor/set_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/ordered_associative_container_adaptor.hpp	2
/usr/include/boost/bimap/container_adaptor/associative_container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/detail/functor_bag.hpp	1
/usr/include/boost/utility/base_from_member.hpp	2
/usr/include/boost/multi_index/detail/header_holder.hpp	3
/usr/include/boost/tuple/detail/tuple_basic.hpp	5
/usr/include/boost/multi_index/detail/ord_index_impl.hpp	17
/usr/include/boost/multi_index/detail/index_base.hpp	4
/usr/include/boost/multi_index/detail/ord_index_node.hpp	14
/usr/include/boost/bimap/views/map_view.hpp	2
/usr/include/boost/bimap/container_adaptor/map_adaptor.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.h	4
/usr/include/boost/multi_index/detail/copy_map.hpp	10
/usr/include/boost/multi_index/detail/auto_space.hpp	3
/usr/include/boost/multi_index/detail/bidir_node_iterator.hpp	3
/usr/include/boost/multi_index/ordered_index.hpp	1
/usr/include/boost/multi_index/detail/raw_ptr.hpp	5
/usr/include/boost/multi_index/detail/index_node_base.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.cpp	4
/src/solidity/libevmasm/KnownState.cpp	9
/src/solidity/libevmasm/ExpressionClasses.cpp	10
/src/solidity/libevmasm/ExpressionClasses.h	3
/src/solidity/libevmasm/SimplificationRules.cpp	12
/src/solidity/libevmasm/SimplificationRules.h	10
/src/solidity/libevmasm/RuleList.h	58
/src/solidity/libevmasm/SimplificationRule.h	76
/src/solidity/libevmasm/ConstantOptimiser.cpp	12
/src/solidity/libevmasm/ConstantOptimiser.h	10
/usr/include/boost/multiprecision/detail/functions/pow.hpp	2
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.h	1
/src/solidity/libevmasm/LinkerObject.cpp	3
/src/solidity/libsolidity/codegen/Compiler.cpp	2
/src/solidity/libsolidity/codegen/ContractCompiler.h	2
/src/solidity/libsolidity/codegen/ContractCompiler.cpp	19
/src/solidity/libsolidity/codegen/CompilerContext.cpp	29
/src/solidity/libsolidity/codegen/CompilerUtils.cpp	34
/src/solidity/libyul/backends/evm/EVMMetrics.h	2
/src/solidity/libyul/AsmPrinter.h	3
/src/solidity/libyul/backends/evm/AsmCodeGen.cpp	1
/src/solidity/libsolidity/codegen/ArrayUtils.h	1
/src/solidity/libsolidity/codegen/ArrayUtils.cpp	5
/src/solidity/libsolidity/codegen/LValue.cpp	4
/src/solidity/libsolidity/codegen/LValue.h	2
/src/solidity/libsolidity/codegen/ABIFunctions.cpp	5
/src/solidity/libsolidity/codegen/ABIFunctions.h	3
/src/solidity/libsolidity/codegen/ExpressionCompiler.h	2
/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp	3
/src/solidity/libsolidity/codegen/Compiler.h	1
/src/solidity/libyul/backends/wasm/EVMToEwasmTranslator.h	1
/src/solidity/libyul/backends/wasm/EVMToEwasmTranslator.cpp	2
/src/solidity/libyul/optimiser/FunctionHoister.h	2
/src/solidity/libyul/optimiser/FunctionHoister.cpp	1
/src/solidity/libyul/optimiser/FunctionGrouper.h	1
/src/solidity/libyul/optimiser/FunctionGrouper.cpp	2
/src/solidity/libyul/optimiser/MainFunction.h	1
/src/solidity/libyul/optimiser/MainFunction.cpp	1
/src/solidity/libyul/optimiser/ForLoopConditionIntoBody.cpp	1
/src/solidity/libyul/optimiser/ForLoopConditionIntoBody.h	1
/src/solidity/libyul/optimiser/ExpressionSplitter.cpp	2
/src/solidity/libyul/optimiser/TypeInfo.cpp	3
/src/solidity/libyul/optimiser/ExpressionSplitter.h	1
/src/solidity/libyul/optimiser/TypeInfo.h	1
/src/solidity/libyul/backends/wasm/WordSizeTransform.cpp	2
/src/solidity/libyul/optimiser/NameDisplacer.h	1
/src/solidity/libyul/optimiser/NameDisplacer.cpp	2
/src/solidity/libyul/backends/wasm/WordSizeTransform.h	1
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.cpp	2
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.h	1
/src/solidity/libyul/backends/wasm/WasmCodeTransform.cpp	7
/src/solidity/libyul/backends/wasm/WasmAST.h	12
/src/solidity/libyul/backends/wasm/WasmCodeTransform.h	2
/src/solidity/libyul/backends/wasm/TextTransform.cpp	5
/src/solidity/libyul/backends/wasm/BinaryTransform.cpp	30
/src/solidity/libsolutil/LEB128.h	2
/src/solidity/libyul/backends/wasm/BinaryTransform.h	2

Fuzzer: stack_reuse_codegen_ossfuzz

Call tree

Min	Max	Color
0	1	red
1	10	gold
10	30	yellow
30	50	greenyellow
50	1000000000000	lawngreen

The distribution of callsites in terms of coloring is

Color Callsite count Percentage

red 2821 42.0%

gold 490 7.30%

yellow 41 0.61%

greenyellow 68 1.01%

lawngreen 3292 49.0%

All colors 6712 100

Color	Callsite count	Percentage
red	2821	42.0%
gold	490	7.30%
yellow	41	0.61%
greenyellow	68	1.01%
lawngreen	3292	49.0%
All colors	6712	100

Full call tree

The following link provides a visualisation of the full call tree overlaid with coverage information: full call tree

For further technical details on how the call tree is generated, please see the Glossary .

Fuzz blockers

The followings nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
138	6079	solidity::yul::TypeInfo::TypeInfo(solidity::yul::Dialect const&, solidity::yul::Block const&)	call site	_ZN6ranges11view_facadeINS_19iter_transform_viewINS_8ref_viewIKNSt3__13mapINS3_4pairINS3_6vectorIhNS3_9allocatorIhEEEES9_EENS6_INS3_12basic_stringIcNS3_11char_traitsIcEENS7_IcEEEENS7_ISF_EEEENS3_4lessISA_EENS7_INS5_IKSA_SH_EEEEEEEENS_10indirectedINS_6detail10get_secondEEEEELNS_11cardinalityEn1EE5beginISU_Lb1ELi0EEENS_14basic_iteratorINS3_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
129	6218	std::__1::vector > operator+ (std::__1::vector > const&, std::__1::vector > const&)	call site
122	4401	solidity::evmasm::CommonSubexpressionEliminator::CommonSubexpressionEliminator(solidity::evmasm::KnownState const&)	call site	__clang_call_terminate
92	1513	solidity::langutil::Scanner::scanToken()	call site
91	569	solidity::yul::test::yul_fuzzer::ProtoConverter::createVars(unsigned int, unsigned int)	call site	_ZN5boost9function2INS_14iterator_rangeINSt3__111__wrap_iterIPcEEEES5_S5_EC2INS_9algorithm6detail13token_finderFINSA_10is_any_ofFIcEEEEEET_NS_10enable_if_IXntsr11is_integralISF_EE5valueEiE4typeE
83	1761	solidity::yul::Parser::parseInline(std::__1::shared_ptr const&)	call site	__cxa_guard_acquire
81	5577	solidity::evmasm::ComputeMethod::checkRepresentation(boost::multiprecision::number , (boost::multiprecision::expression_template_option)0> const&, std::__1::vector > const&) const	call site	_ZN5boost14multiprecision3powINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEEEENS_11enable_if_cIXeqsr15number_categoryIT_EE5valueLNS0_20number_category_typeE0EENS0_6numberIS8_LNS0_26expression_template_optionE0EEEE4typeERKSC_RKj
75	1879	solidity::langutil::ParserBase::expectToken(solidity::langutil::Token, bool)	call site
73	425	solidity::yul::test::yul_fuzzer::ProtoConverter::visit(solidity::yul::test::yul_fuzzer::Expression const&)	call site	__cxa_guard_acquire
60	898	solidity::yul::test::yul_fuzzer::ProtoConverter::visit(solidity::yul::test::yul_fuzzer::CaseStmt const&)	call site	_ZN5boost14multiprecision8backends13eval_multiplyILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvLj256ELj256ELS3_0ELS4_0EvEENS_11enable_if_cIXaantsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valuentsr18is_trivial_cpp_intINS6_IXT4_EXT5_EXT6_EXT7_ET8_EEEE5valueEvE4typeERS8_RKSA_RKy
59	5796	solidity::util::FixedHash<32u>::FixedHash(boost::multiprecision::number , (boost::multiprecision::expression_template_option)0> const&)	call site	_ZN5boost14multiprecisionleINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEELNS0_26expression_template_optionE0EmEENS_11enable_if_cIXaasr6detail22is_valid_mixed_compareINS0_6numberIT_XT0_EEET1_EE5valuenesr15number_categoryISA_EE5valueLNS0_20number_category_typeE4EEbE4typeERKSB_RKSC_
58	4341	solidity::evmasm::Assembly::optimiseInternal(solidity::evmasm::Assembly::OptimiserSettings const&, std::__1::set , std::__1::allocator >)	call site	_ZN5boost6bimaps17container_adaptor11set_adaptorINS_11multi_index6detail13ordered_indexINS3_6memberINS0_8relation6detail16relation_storageINS0_4tags6taggedIKjNS7_9member_at4leftEEENSB_IKNSt3__13setINS_14multiprecision6numberINSI_8backends15cpp_int_backendILj256ELj256ELNSI_16cpp_integer_typeE0ELNSI_18cpp_int_check_typeE0EvEELNSI_26expression_template_optionE0EEENSG_4lessISQ_EENSG_9allocatorISQ_EEEENSD_5rightEEELb1EEEjXadL_ZNSZ_4leftEEEEENSR_IjEENS4_9nth_layerILi2ENS7_15mutant_relationISF_SY_N4mpl_2naELb1EEENS0_6detail10bimap_coreIjSV_S15_S15_S15_E12core_indicesENST_IS16_EEEENS_3mpl6v_itemISE_NS1D_7vector0IS15_EELi0EEENS4_18ordered_unique_tagENS4_19null_augment_policyEEENS17_17set_view_iteratorINS4_19bidir_node_iteratorINS4_18ordered_index_nodeIS1J_NS4_15index_node_baseIS16_S1B_EEEEEEEENS17_23const_set_view_iteratorIS1R_EENS1L_INS_9iterators16reverse_iteratorIS1R_EEEENS1T_IS1X_EENS1_7support23iterator_facade_to_baseIS1S_S1U_EES15_S15_NS8_28get_mutable_relation_functorIS16_EENS7_7support22get_above_view_functorIS16_EENS17_20set_view_key_to_baseIjS16_S10_EENS1D_6vectorIS15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_EEEC2ERS1K_

Branch Blockers [Click to view]

[EXPERIMENTAL] The followings are the branches where fuzzer fails to bypass.

Blocked Complexity	Reachable Complexity	Function Name	Blocked Branch
3411	3797	solidity::yul::StackLimitEvader::run(solidity::yul::OptimiserStepContext&,solidity::yul::Object&,std::__1::map ,std::__1::allocator >,std::__1::less ,std::__1::allocator ,std::__1::allocator >>>>const&)	/src/solidity/libyul/optimiser/StackLimitEvader.cpp:178
3279	14788	solidity::evmasm::Assembly::assemble()const	/src/solidity/libevmasm/Assembly.cpp:519
2758	3258	solidity::yul::ObjectParser::parse(std::__1::shared_ptr const&,bool)	/src/solidity/libyul/ObjectParser.cpp:49
1748	1748	solidity::yul::test::yul_fuzzer::ProtoConverter::visit(solidity::yul::test::yul_fuzzer::Expressionconst&)	/src/solidity/test/tools/ossfuzz/protoToYul.cpp:245
1650	3538	solidity::yul::StackLimitEvader::run(solidity::yul::OptimiserStepContext&,solidity::yul::Object&)	/src/solidity/libyul/optimiser/StackLimitEvader.cpp:131
1640	3117	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:321
1601	1605	solidity::langutil::ParserBase::expectToken(solidity::langutil::Token,bool)	/src/solidity/liblangutil/ParserBase.cpp:77
1593	10829	solidity::yul::RepresentationFinder::findRepresentation(boost::multiprecision::number ,(boost::multiprecision::expression_template_option)0>const&)	/src/solidity/libyul/backends/evm/ConstantOptimiser.cpp:155
1320	1953	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:337
1214	1823	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:371
1151	5544	solidity::evmasm::ComputeMethod::findRepresentation(boost::multiprecision::number ,(boost::multiprecision::expression_template_option)0>const&)	/src/solidity/libevmasm/ConstantOptimiser.cpp:226
982	3403	solidity::yul::CodeTransform::operator()(solidity::yul::FunctionDefinitionconst&)	/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp:397

Runtime coverage analysis

3444

1285

2346

For further technical details on the call tree overview, please see the Glossary .

45.23%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/solidity/test/tools/ossfuzz/StackReuseCodegenFuzzer.cpp	2
/src/solidity/test/tools/ossfuzz/yulProto.pb.h	292
/src/solidity/test/tools/ossfuzz/yulProto.pb.cc	16
/usr/include/google/protobuf/message.h	1
/usr/include/google/protobuf/message_lite.h	4
/usr/include/google/protobuf/metadata_lite.h	7
/usr/include/google/protobuf/generated_message_util.h	1
/src/solidity/test/tools/ossfuzz/protoToYul.h	7
/src/solidity/liblangutil/EVMVersion.h	20
/src/solidity/test/tools/ossfuzz/protoToYul.cpp	64
/usr/include/google/protobuf/wire_format_lite.h	6
/usr/include/google/protobuf/io/coded_stream.h	4
/usr/include/google/protobuf/stubs/port.h	2
/usr/include/google/protobuf/repeated_ptr_field.h	11
/src/solidity/libyul/Exceptions.h	6
/usr/local/include/c++/v1/exception	2
/usr/include/boost/exception/exception.hpp	17
/src/solidity/libsolutil/Exceptions.h	5
/src/solidity/libsolutil/Assertions.h	1
/usr/include/boost/exception/detail/error_info_impl.hpp	6
/usr/include/boost/exception/info.hpp	17
/usr/include/boost/smart_ptr/shared_ptr.hpp	7
/usr/include/boost/smart_ptr/detail/shared_count.hpp	4
/usr/include/boost/smart_ptr/detail/sp_counted_impl.hpp	1
/usr/include/boost/smart_ptr/detail/sp_counted_base_clang.hpp	6
/usr/include/boost/core/checked_delete.hpp	1
/usr/include/boost/exception/detail/type_info.hpp	1
/usr/include/boost/throw_exception.hpp	20
/usr/include/google/protobuf/arenastring.h	2
/usr/include/google/protobuf/explicitly_constructed.h	1
/src/solidity/build/deps/include/range/v3/action/remove_if.hpp	3
/src/solidity/build/deps/include/range/v3/algorithm/remove_if.hpp	2
/src/solidity/build/deps/include/range/v3/range/access.hpp	11
/src/solidity/build/deps/include/range/v3/functional/reference_wrapper.hpp	5
/src/solidity/build/deps/include/range/v3/algorithm/find_if.hpp	1
/src/solidity/build/deps/include/range/v3/functional/invoke.hpp	6
/src/solidity/build/deps/include/range/v3/functional/identity.hpp	1
/src/solidity/build/deps/include/range/v3/iterator/operations.hpp	4
/src/solidity/build/deps/include/range/v3/iterator/access.hpp	1
/src/solidity/build/deps/include/range/v3/utility/move.hpp	1
/src/solidity/build/deps/include/range/v3/action/erase.hpp	2
/usr/include/boost/operators.hpp	2
/usr/local/include/c++/v1/optional	23
/src/solidity/libsolutil/Whiskers.cpp	6
/src/solidity/libsolutil/Whiskers.h	3
/src/solidity/libsolutil/StringUtils.cpp	1
/usr/include/boost/algorithm/string/classification.hpp	1
/usr/include/boost/range/as_literal.hpp	5
/usr/include/boost/algorithm/string/detail/classification.hpp	4
/usr/include/boost/range/distance.hpp	1
/usr/include/boost/range/begin.hpp	6
/usr/include/boost/range/iterator_range_core.hpp	12
/usr/include/boost/range/end.hpp	6
/usr/include/boost/iterator/distance.hpp	2
/usr/include/boost/algorithm/string/split.hpp	1
/usr/include/boost/algorithm/string/finder.hpp	1
/usr/include/boost/algorithm/string/detail/finder.hpp	3
/usr/include/boost/algorithm/string/iter_find.hpp	1
/usr/include/boost/algorithm/string/find_iterator.hpp	4
/usr/include/boost/algorithm/string/detail/find_iterator.hpp	5
/usr/include/boost/function/function_template.hpp	12
/usr/include/boost/function/function_base.hpp	5
/usr/include/boost/core/addressof.hpp	2
/usr/include/boost/iterator/transform_iterator.hpp	3
/usr/include/boost/iterator/iterator_adaptor.hpp	3
/usr/include/boost/multiprecision/cpp_int.hpp	33
/src/solidity/build/deps/include/range/v3/algorithm/all_of.hpp	3
/src/solidity/libsolutil/FixedHash.h	14
/src/solidity/libsolutil/CommonData.cpp	5
/src/solidity/libsolutil/CommonData.h	46
/usr/include/boost/multiprecision/detail/number_compare.hpp	36
/usr/include/boost/multiprecision/detail/constexpr.hpp	4
/usr/include/boost/assert/source_location.hpp	4
/usr/include/boost/multiprecision/cpp_int/cpp_int_config.hpp	2
/usr/include/boost/multiprecision/cpp_int/multiply.hpp	8
/usr/include/boost/multiprecision/cpp_int/add.hpp	7
/usr/local/include/c++/v1/initializer_list	4
/src/solidity/test/EVMHost.cpp	26
/src/solidity/test/evmc/mocked_host.hpp	4
/src/solidity/test/evmc/evmc.hpp	22
/src/solidity/libyul/YulString.h	13
/src/solidity/libsolidity/interface/OptimiserSettings.h	6
/src/solidity/test/tools/ossfuzz/YulEvmoneInterface.h	1
/src/solidity/liblangutil/DebugInfoSelection.cpp	1
/src/solidity/liblangutil/DebugInfoSelection.h	2
/src/solidity/build/deps/include/range/v3/view/view.hpp	31
/src/solidity/build/deps/include/range/v3/view/map.hpp	1
/src/solidity/build/deps/include/range/v3/view/all.hpp	8
/src/solidity/build/deps/include/range/v3/range_fwd.hpp	5
/src/solidity/build/deps/include/range/v3/view/ref.hpp	7
/src/solidity/build/deps/include/range/v3/view/transform.hpp	19
/src/solidity/build/deps/include/range/v3/functional/indirect.hpp	2
/src/solidity/build/deps/include/range/v3/view/adaptor.hpp	8
/src/solidity/build/deps/include/range/v3/view/facade.hpp	12
/src/solidity/build/deps/include/range/v3/detail/range_access.hpp	6
/src/solidity/build/deps/include/range/v3/view/interface.hpp	7
/src/solidity/build/deps/include/range/v3/utility/compressed_pair.hpp	1
/src/solidity/build/deps/include/range/v3/utility/box.hpp	6
/src/solidity/build/deps/include/range/v3/iterator/basic_iterator.hpp	44
/src/solidity/libyul/YulStack.h	6
/src/solidity/liblangutil/CharStreamProvider.h	2
/src/solidity/liblangutil/ErrorReporter.h	6
/src/solidity/test/tools/ossfuzz/YulEvmoneInterface.cpp	4
/src/solidity/libyul/YulStack.cpp	12
/src/solidity/libyul/backends/evm/EVMDialect.cpp	8
/src/solidity/libyul/backends/wasm/WasmDialect.cpp	1
/src/solidity/libyul/ObjectParser.h	1
/src/solidity/liblangutil/ParserBase.h	4
/src/solidity/libyul/ObjectParser.cpp	8
/src/solidity/liblangutil/ParserBase.cpp	11
/src/solidity/liblangutil/Scanner.h	21
/src/solidity/liblangutil/Exceptions.h	8
/src/solidity/liblangutil/CharStream.h	8
/src/solidity/liblangutil/Scanner.cpp	29
/src/solidity/liblangutil/Common.h	6
/src/solidity/liblangutil/CharStream.cpp	4
/src/solidity/liblangutil/SourceLocation.h	6
/src/solidity/liblangutil/Token.cpp	9
/src/solidity/libsolutil/StringUtils.h	7
/src/solidity/liblangutil/Token.h	6
/src/solidity/liblangutil/ErrorReporter.cpp	7
/src/solidity/libyul/Object.h	2
/src/solidity/libyul/AsmParser.h	13
/src/solidity/libyul/AsmParser.cpp	20
/src/solidity/libsolutil/Common.h	6
/usr/include/boost/algorithm/string/predicate.hpp	6
/usr/include/boost/algorithm/string/detail/predicate.hpp	1
/usr/include/boost/algorithm/string/compare.hpp	1
/src/solidity/libyul/AST.h	40
/src/solidity/libyul/Object.cpp	1
/src/solidity/libyul/AsmAnalysis.h	2
/src/solidity/libyul/SideEffects.h	1
/src/solidity/libyul/backends/evm/EVMDialect.h	7
/src/solidity/libyul/AsmAnalysis.cpp	4
/src/solidity/libyul/ScopeFiller.cpp	2
/src/solidity/libyul/optimiser/Suite.cpp	10
/src/solidity/libyul/optimiser/Disambiguator.h	1
/src/solidity/libyul/optimiser/ASTCopier.h	5
/src/solidity/libyul/optimiser/NameDispenser.cpp	5
/src/solidity/libyul/optimiser/ASTCopier.cpp	2
/src/solidity/libyul/optimiser/NameCollector.h	4
/src/solidity/libyul/optimiser/ASTWalker.h	8
/src/solidity/libyul/optimiser/Suite.h	1
/src/solidity/libyul/optimiser/Metrics.cpp	1
/src/solidity/libyul/optimiser/Metrics.h	1
/src/solidity/libyul/optimiser/ASTWalker.cpp	4
/src/solidity/libyul/optimiser/NameSimplifier.h	2
/src/solidity/libyul/optimiser/NameSimplifier.cpp	2
/src/solidity/libyul/optimiser/OptimizerUtilities.cpp	2
/src/solidity/libyul/optimiser/NameDispenser.h	2
/src/solidity/libyul/optimiser/StackCompressor.cpp	7
/src/solidity/libyul/optimiser/Semantics.cpp	2
/src/solidity/libyul/optimiser/Semantics.h	3
/src/solidity/libyul/AsmAnalysisInfo.h	3
/src/solidity/libyul/backends/evm/ControlFlowGraphBuilder.cpp	11
/src/solidity/libyul/backends/evm/ControlFlowGraph.h	4
/src/solidity/build/deps/include/range/v3/functional/bind_back.hpp	7
/src/solidity/build/deps/include/range/v3/range/conversion.hpp	10
/src/solidity/build/deps/include/range/v3/range/primitives.hpp	4
/src/solidity/build/deps/include/range/v3/utility/semiregular_box.hpp	2
/src/solidity/libsolutil/Algorithms.h	12
/src/solidity/libsolutil/cxx20.h	1
/src/solidity/libyul/backends/evm/StackLayoutGenerator.cpp	30
/src/solidity/libyul/backends/evm/StackLayoutGenerator.h	2
/src/solidity/build/deps/include/range/v3/algorithm/find.hpp	2
/src/solidity/build/deps/include/range/v3/view/enumerate.hpp	1
/src/solidity/build/deps/include/range/v3/view/zip.hpp	6
/src/solidity/build/deps/include/range/v3/view/zip_with.hpp	4
/src/solidity/build/deps/include/range/v3/view/reverse.hpp	6
/src/solidity/build/deps/include/range/v3/utility/optional.hpp	10
/src/solidity/build/deps/include/range/v3/utility/tuple_algorithm.hpp	2
/src/solidity/build/deps/include/range/v3/detail/adl_get.hpp	1
/src/solidity/build/deps/include/range/v3/iterator/reverse_iterator.hpp	3
/src/solidity/build/deps/include/range/v3/view/iota.hpp	6
/src/solidity/libyul/backends/evm/StackHelpers.h	6
/src/solidity/build/deps/include/range/v3/algorithm/any_of.hpp	4
/src/solidity/build/deps/include/range/v3/view/drop.hpp	1
/src/solidity/libyul/optimiser/DataFlowAnalyzer.cpp	4
/src/solidity/libyul/optimiser/DataFlowAnalyzer.h	3
/src/solidity/libyul/optimiser/KnowledgeBase.h	2
/src/solidity/libyul/optimiser/Rematerialiser.cpp	2
/src/solidity/libyul/optimiser/NameCollector.cpp	3
/src/solidity/libyul/optimiser/Rematerialiser.h	1
/src/solidity/libyul/optimiser/UnusedPruner.cpp	5
/src/solidity/libyul/optimiser/UnusedPruner.h	2
/src/solidity/libyul/CompilabilityChecker.cpp	1
/src/solidity/libyul/backends/evm/NoOutputAssembly.cpp	2
/src/solidity/libyul/Dialect.h	3
/src/solidity/libevmasm/Instruction.h	7
/src/solidity/liblangutil/EVMVersion.cpp	1
/src/solidity/libevmasm/Instruction.cpp	2
/src/solidity/libyul/ControlFlowSideEffects.h	1
/src/solidity/libevmasm/SemanticInformation.cpp	9
/src/solidity/libyul/backends/evm/NoOutputAssembly.h	1
/src/solidity/libyul/backends/evm/AbstractAssembly.h	2
/src/solidity/libyul/backends/evm/EVMCodeTransform.h	5
/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp	13
/src/solidity/libyul/backends/evm/VariableReferenceCounter.h	3
/src/solidity/libyul/backends/evm/VariableReferenceCounter.cpp	1
/src/solidity/build/deps/include/range/v3/algorithm/none_of.hpp	3
/src/solidity/libevmasm/Exceptions.h	5
/src/solidity/build/deps/include/range/v3/algorithm/max.hpp	1
/src/solidity/libyul/CompilabilityChecker.h	1
/src/solidity/libyul/backends/evm/ConstantOptimiser.h	1
/src/solidity/libyul/optimiser/StackLimitEvader.cpp	6
/src/solidity/build/deps/include/range/v3/view/take.hpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.cpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.h	1
/src/solidity/libyul/Utilities.cpp	4
/usr/include/boost/multiprecision/detail/number_base.hpp	15
/usr/local/include/c++/v1/stdexcept	1
/usr/include/boost/multiprecision/cpp_int/bitwise.hpp	10
/src/solidity/libyul/optimiser/CallGraphGenerator.cpp	5
/src/solidity/libyul/optimiser/CallGraphGenerator.h	4
/src/solidity/build/deps/include/range/v3/view/concat.hpp	1
/src/solidity/libyul/optimiser/StackToMemoryMover.cpp	9
/src/solidity/libyul/optimiser/StackToMemoryMover.h	3
/usr/include/boost/multiprecision/detail/precision.hpp	7
/src/solidity/libsolutil/Numeric.h	12
/usr/include/boost/multiprecision/detail/default_ops.hpp	9
/usr/include/boost/multiprecision/number.hpp	24
/usr/include/boost/multiprecision/cpp_int/misc.hpp	2
/src/solidity/libyul/optimiser/VarNameCleaner.h	2
/src/solidity/libyul/optimiser/VarNameCleaner.cpp	1
/src/solidity/libevmasm/Assembly.h	7
/src/solidity/libevmasm/LinkerObject.h	2
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.cpp	1
/src/solidity/libyul/backends/evm/EVMObjectCompiler.cpp	2
/src/solidity/libyul/backends/evm/EVMObjectCompiler.h	1
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.cpp	8
/src/solidity/build/deps/include/range/v3/view/take_last.hpp	1
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.h	1
/src/solidity/libsolutil/Exceptions.cpp	1
/usr/include/boost/exception/get_error_info.hpp	2
/usr/include/boost/smart_ptr/detail/operator_bool.hpp	1
/src/solidity/libevmasm/Assembly.cpp	14
/src/solidity/libevmasm/JumpdestRemover.cpp	2
/src/solidity/libevmasm/AssemblyItem.h	21
/src/solidity/libevmasm/AssemblyItem.cpp	8
/src/solidity/libevmasm/BlockDeduplicator.cpp	2
/src/solidity/libevmasm/Inliner.h	1
/src/solidity/libevmasm/Inliner.cpp	10
/src/solidity/build/deps/include/range/v3/view/slice.hpp	1
/src/solidity/build/deps/include/range/v3/view/span.hpp	5
/src/solidity/build/deps/include/range/v3/view/subrange.hpp	2
/src/solidity/build/deps/include/range/v3/view/drop_last.hpp	4
/src/solidity/build/deps/include/range/v3/numeric/accumulate.hpp	3
/src/solidity/libevmasm/GasMeter.h	6
/usr/include/boost/core/empty_value.hpp	3
/src/solidity/libevmasm/GasMeter.cpp	3
/usr/include/boost/multiprecision/detail/et_ops.hpp	10
/src/solidity/libevmasm/JumpdestRemover.h	1
/src/solidity/libevmasm/PeepholeOptimiser.h	2
/src/solidity/libevmasm/PeepholeOptimiser.cpp	7
/src/solidity/libevmasm/BlockDeduplicator.h	3
/src/solidity/libevmasm/KnownState.h	12
/usr/include/boost/bimap/bimap.hpp	2
/usr/include/boost/multi_index_container.hpp	11
/usr/include/boost/multi_index/detail/converter.hpp	1
/usr/include/boost/bimap/views/set_view.hpp	1
/usr/include/boost/bimap/container_adaptor/set_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/ordered_associative_container_adaptor.hpp	2
/usr/include/boost/bimap/container_adaptor/associative_container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/detail/functor_bag.hpp	1
/usr/include/boost/utility/base_from_member.hpp	2
/usr/include/boost/multi_index/detail/header_holder.hpp	3
/usr/include/boost/tuple/detail/tuple_basic.hpp	5
/usr/include/boost/multi_index/detail/ord_index_impl.hpp	17
/usr/include/boost/multi_index/detail/index_base.hpp	4
/usr/include/boost/multi_index/detail/ord_index_node.hpp	14
/usr/include/boost/bimap/views/map_view.hpp	2
/usr/include/boost/bimap/container_adaptor/map_adaptor.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.h	4
/usr/include/boost/multi_index/detail/copy_map.hpp	10
/usr/include/boost/multi_index/detail/auto_space.hpp	3
/usr/include/boost/multi_index/detail/bidir_node_iterator.hpp	3
/usr/include/boost/multi_index/ordered_index.hpp	1
/usr/include/boost/multi_index/detail/raw_ptr.hpp	5
/usr/include/boost/type_traits/integral_constant.hpp	1
/usr/include/boost/multi_index/detail/index_node_base.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.cpp	4
/src/solidity/libevmasm/KnownState.cpp	9
/src/solidity/libevmasm/ExpressionClasses.cpp	10
/src/solidity/libevmasm/ExpressionClasses.h	3
/src/solidity/libevmasm/SimplificationRules.cpp	12
/src/solidity/libevmasm/SimplificationRules.h	10
/src/solidity/libevmasm/RuleList.h	58
/src/solidity/libevmasm/SimplificationRule.h	76
/src/solidity/libsolutil/Keccak256.h	2
/src/solidity/libsolutil/vector_ref.h	8
/src/solidity/libsolutil/Keccak256.cpp	5
/src/solidity/libevmasm/ConstantOptimiser.cpp	12
/src/solidity/libevmasm/ConstantOptimiser.h	10
/usr/include/boost/multiprecision/cpp_int/comparison.hpp	2
/usr/include/boost/multiprecision/detail/functions/pow.hpp	2
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.h	1
/src/solidity/liblangutil/Exceptions.cpp	1
/src/solidity/libevmasm/LinkerObject.cpp	1
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.cpp	2
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.h	1
/src/solidity/libyul/backends/wasm/WasmCodeTransform.cpp	7
/src/solidity/libyul/backends/wasm/WasmAST.h	12
/src/solidity/libyul/optimiser/TypeInfo.cpp	3
/src/solidity/libyul/backends/wasm/WasmCodeTransform.h	2
/src/solidity/libyul/optimiser/TypeInfo.h	1
/src/solidity/libyul/backends/wasm/TextTransform.cpp	5
/src/solidity/libyul/backends/wasm/BinaryTransform.cpp	30
/src/solidity/libsolutil/LEB128.h	2
/src/solidity/libyul/backends/wasm/BinaryTransform.h	2
/src/solidity/libsolutil/picosha2.h	19
/src/solidity/test/EVMHost.h	2
/usr/include/boost/io/ios_state.hpp	3
/usr/include/google/protobuf/arena.h	1

Fuzzer: yul_proto_diff_custom_mutate_ossfuzz

Call tree

Min	Max	Color
0	1	red
1	10	gold
10	30	yellow
30	50	greenyellow
50	1000000000000	lawngreen

The distribution of callsites in terms of coloring is

Color Callsite count Percentage

red 1231 44.4%

gold 54 1.95%

yellow 3 0.10%

greenyellow 16 0.57%

lawngreen 1463 52.8%

All colors 2767 100

Color	Callsite count	Percentage
red	1231	44.4%
gold	54	1.95%
yellow	3	0.10%
greenyellow	16	0.57%
lawngreen	1463	52.8%
All colors	2767	100

Full call tree

The following link provides a visualisation of the full call tree overlaid with coverage information: full call tree

For further technical details on how the call tree is generated, please see the Glossary .

Fuzz blockers

The followings nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
130	2359	solidity::langutil::Error::containsErrors(std::__1::vector , std::__1::allocator > > const&)	call site
125	2533	solidity::yul::test::yul_fuzzer::yulFuzzerUtil::interpret(std::__1::basic_ostream >&, std::__1::shared_ptr , solidity::yul::Dialect const&, bool, bool, unsigned long, unsigned long, unsigned long)	call site	_ZN5boost14multiprecision11default_ops19eval_divide_defaultINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEExEENS_11enable_if_cIXaasr14is_convertibleIT0_NS0_6numberIT_LNS0_26expression_template_optionE1EEEEE5valuesr14is_convertibleIS9_SB_EE5valueEvE4typeERSB_RKSB_RKS9_
92	1449	solidity::langutil::Scanner::scanToken()	call site
91	566	solidity::yul::test::yul_fuzzer::ProtoConverter::createVars(unsigned int, unsigned int)	call site	_ZN5boost9function2INS_14iterator_rangeINSt3__111__wrap_iterIPcEEEES5_S5_EC2INS_9algorithm6detail13token_finderFINSA_10is_any_ofFIcEEEEEET_NS_10enable_if_IXntsr11is_integralISF_EE5valueEiE4typeE
83	1697	solidity::yul::Parser::parseInline(std::__1::shared_ptr const&)	call site	__cxa_guard_acquire
75	1815	solidity::langutil::ParserBase::expectToken(solidity::langutil::Token, bool)	call site
60	895	solidity::yul::test::yul_fuzzer::ProtoConverter::visit(solidity::yul::test::yul_fuzzer::CaseStmt const&)	call site	_ZN5boost14multiprecision8backends13eval_multiplyILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvLj256ELj256ELS3_0ELS4_0EvEENS_11enable_if_cIXaantsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valuentsr18is_trivial_cpp_intINS6_IXT4_EXT5_EXT6_EXT7_ET8_EEEE5valueEvE4typeERS8_RKSA_RKy
36	84	solidity::yul::test::yul_fuzzer::ProtoConverter::openBlockScope()	call site	__cxa_begin_catch
25	1565	solidity::langutil::Scanner::scanNumber(char)	call site
22	1262	solidity::langutil::DebugInfoSelection::All(bool)	call site	_ZN6ranges12view_adaptorINS_19iter_transform_viewINS_8ref_viewIKNSt3__13mapINS3_12basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEEMN8solidity8langutil18DebugInfoSelectionEbNS3_4lessISA_EENS8_INS3_4pairIKSA_SE_EEEEEEEENS_10indirectedINS_6detail10get_secondEEEEESN_LNS_11cardinalityEn1EE12begin_cursorISS_Lb1ELi0EEEDTclsr12view_adaptorE13begin_cursor_clsr3stdE7declvalIRT_EEEEv
21	1402	solidity::langutil::Scanner::scanHexByte(char&)	call site
19	246	solidity::yul::test::yul_fuzzer::ProtoConverter::createHex(std::__1::basic_string , std::__1::allocator > const&)	call site	_ZNK6ranges12remove_if_fnclIRNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEZN8solidity3yul4test10yul_fuzzer14ProtoConverter9createHexERKS8_E3$_0NS_8identityELb1ELi0ELi0ELi0EEEN4meta6detail5_condIXsr6detailE15_borrowed_rangeIT_EEE6invokeIDTclL_ZNS_1_5beginEEclscPDoFRSM_vELDnEEEENS_8danglingEEEOSM_T0_T1_

Branch Blockers [Click to view]

[EXPERIMENTAL] The followings are the branches where fuzzer fails to bypass.

Blocked Complexity	Reachable Complexity	Function Name	Blocked Branch
3420	3797	solidity::yul::StackLimitEvader::run(solidity::yul::OptimiserStepContext&,solidity::yul::Object&,std::__1::map ,std::__1::allocator >,std::__1::less ,std::__1::allocator ,std::__1::allocator >>>>const&)	/src/solidity/libyul/optimiser/StackLimitEvader.cpp:178
1601	1605	solidity::langutil::ParserBase::expectToken(solidity::langutil::Token,bool)	/src/solidity/liblangutil/ParserBase.cpp:77
1468	3117	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:321
1288	7795	TestOneProtoInput(solidity::yul::test::yul_fuzzer::Programconst&)	/src/solidity/test/tools/ossfuzz/yulProto_diff_ossfuzz.cpp:53
1145	1953	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:337
1039	1823	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:376
1039	1823	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:382
1039	1823	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:393
959	1310	solidity::yul::OptimiserSuite::runSequence(std::__1::vector ,std::__1::allocator >,std::__1::allocator ,std::__1::allocator >>>const&,solidity::yul::Block&)	/src/solidity/libyul/optimiser/Suite.cpp:429
955	1263	solidity::yul::OptimiserSuite::runSequence(std::__1::vector ,std::__1::allocator >,std::__1::allocator ,std::__1::allocator >>>const&,solidity::yul::Block&)	/src/solidity/libyul/optimiser/Suite.cpp:433
885	2528	solidity::yul::LoadResolver::tryEvaluateKeccak(std::__1::variant &,std::__1::vector ,std::__1::allocator >>const&)	/src/solidity/libyul/optimiser/LoadResolver.cpp:111
847	3127	solidity::yul::CodeTransform::operator()(solidity::yul::FunctionDefinitionconst&)	/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp:397

Runtime coverage analysis

2999

536

1115

For further technical details on the call tree overview, please see the Glossary .

51.93%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/solidity/test/tools/ossfuzz/yulProto_diff_ossfuzz.cpp	2
/src/solidity/test/tools/ossfuzz/yulProto.pb.h	292
/src/solidity/test/tools/ossfuzz/yulProto.pb.cc	16
/usr/include/google/protobuf/message.h	1
/usr/include/google/protobuf/message_lite.h	4
/usr/include/google/protobuf/metadata_lite.h	7
/usr/include/google/protobuf/generated_message_util.h	1
/src/solidity/test/tools/ossfuzz/protoToYul.h	8
/src/solidity/liblangutil/EVMVersion.h	18
/src/solidity/test/tools/ossfuzz/protoToYul.cpp	64
/usr/include/google/protobuf/wire_format_lite.h	6
/usr/include/google/protobuf/io/coded_stream.h	4
/usr/include/google/protobuf/stubs/port.h	2
/usr/include/google/protobuf/repeated_ptr_field.h	11
/src/solidity/libyul/Exceptions.h	3
/usr/local/include/c++/v1/exception	1
/usr/include/boost/exception/exception.hpp	16
/src/solidity/libsolutil/Exceptions.h	4
/src/solidity/libsolutil/Assertions.h	1
/usr/include/boost/exception/detail/error_info_impl.hpp	4
/usr/include/boost/exception/info.hpp	9
/usr/include/boost/smart_ptr/shared_ptr.hpp	7
/usr/include/boost/smart_ptr/detail/shared_count.hpp	4
/usr/include/boost/smart_ptr/detail/sp_counted_impl.hpp	1
/usr/include/boost/smart_ptr/detail/sp_counted_base_clang.hpp	6
/usr/include/boost/core/checked_delete.hpp	1
/usr/include/boost/exception/detail/type_info.hpp	1
/usr/include/boost/throw_exception.hpp	14
/usr/include/google/protobuf/arenastring.h	2
/usr/include/google/protobuf/explicitly_constructed.h	1
/src/solidity/build/deps/include/range/v3/action/remove_if.hpp	2
/src/solidity/build/deps/include/range/v3/algorithm/remove_if.hpp	2
/src/solidity/build/deps/include/range/v3/range/access.hpp	3
/src/solidity/build/deps/include/range/v3/functional/reference_wrapper.hpp	5
/src/solidity/build/deps/include/range/v3/algorithm/find_if.hpp	1
/src/solidity/build/deps/include/range/v3/functional/invoke.hpp	2
/src/solidity/build/deps/include/range/v3/functional/identity.hpp	1
/src/solidity/build/deps/include/range/v3/iterator/operations.hpp	1
/src/solidity/build/deps/include/range/v3/iterator/access.hpp	1
/src/solidity/build/deps/include/range/v3/utility/move.hpp	1
/src/solidity/build/deps/include/range/v3/action/erase.hpp	2
/usr/include/boost/operators.hpp	1
/usr/local/include/c++/v1/optional	13
/src/solidity/libsolutil/Whiskers.cpp	6
/src/solidity/libsolutil/Whiskers.h	3
/src/solidity/libsolutil/StringUtils.cpp	1
/usr/include/boost/algorithm/string/classification.hpp	2
/usr/include/boost/range/as_literal.hpp	5
/usr/include/boost/algorithm/string/detail/classification.hpp	8
/usr/include/boost/range/distance.hpp	1
/usr/include/boost/range/begin.hpp	8
/usr/include/boost/range/iterator_range_core.hpp	12
/usr/include/boost/range/end.hpp	8
/usr/include/boost/iterator/distance.hpp	2
/usr/include/boost/algorithm/string/split.hpp	1
/usr/include/boost/algorithm/string/finder.hpp	1
/usr/include/boost/algorithm/string/detail/finder.hpp	3
/usr/include/boost/algorithm/string/iter_find.hpp	1
/usr/include/boost/algorithm/string/find_iterator.hpp	4
/usr/include/boost/algorithm/string/detail/find_iterator.hpp	5
/usr/include/boost/function/function_template.hpp	12
/usr/include/boost/function/function_base.hpp	5
/usr/include/boost/core/addressof.hpp	1
/usr/include/boost/iterator/transform_iterator.hpp	3
/usr/include/boost/iterator/iterator_adaptor.hpp	3
/usr/include/boost/multiprecision/cpp_int.hpp	13
/src/solidity/build/deps/include/range/v3/algorithm/all_of.hpp	1
/src/solidity/libsolutil/FixedHash.h	8
/src/solidity/libsolutil/CommonData.cpp	3
/src/solidity/libsolutil/CommonData.h	2
/usr/include/boost/multiprecision/detail/number_compare.hpp	4
/usr/include/boost/multiprecision/detail/constexpr.hpp	4
/usr/include/boost/assert/source_location.hpp	4
/usr/include/boost/multiprecision/cpp_int/cpp_int_config.hpp	2
/usr/include/boost/multiprecision/cpp_int/multiply.hpp	1
/usr/include/boost/multiprecision/cpp_int/add.hpp	5
/usr/local/include/c++/v1/initializer_list	1
/src/solidity/libyul/YulString.h	13
/src/solidity/libsolidity/interface/OptimiserSettings.h	5
/src/solidity/liblangutil/DebugInfoSelection.cpp	1
/src/solidity/liblangutil/DebugInfoSelection.h	2
/src/solidity/build/deps/include/range/v3/view/view.hpp	1
/src/solidity/build/deps/include/range/v3/view/map.hpp	1
/src/solidity/build/deps/include/range/v3/view/all.hpp	3
/src/solidity/build/deps/include/range/v3/range_fwd.hpp	4
/src/solidity/build/deps/include/range/v3/view/ref.hpp	3
/src/solidity/build/deps/include/range/v3/view/transform.hpp	4
/src/solidity/build/deps/include/range/v3/functional/indirect.hpp	2
/src/solidity/build/deps/include/range/v3/view/adaptor.hpp	7
/src/solidity/build/deps/include/range/v3/view/facade.hpp	1
/src/solidity/build/deps/include/range/v3/detail/range_access.hpp	3
/src/solidity/build/deps/include/range/v3/view/interface.hpp	1
/src/solidity/build/deps/include/range/v3/utility/compressed_pair.hpp	1
/src/solidity/build/deps/include/range/v3/utility/box.hpp	4
/src/solidity/build/deps/include/range/v3/iterator/basic_iterator.hpp	7
/src/solidity/libyul/YulStack.h	3
/src/solidity/liblangutil/CharStreamProvider.h	2
/src/solidity/liblangutil/ErrorReporter.h	6
/src/solidity/libyul/YulStack.cpp	5
/src/solidity/libyul/backends/evm/EVMDialect.cpp	2
/src/solidity/libyul/backends/wasm/WasmDialect.cpp	1
/src/solidity/libyul/ObjectParser.h	1
/src/solidity/liblangutil/ParserBase.h	4
/src/solidity/libyul/ObjectParser.cpp	8
/src/solidity/liblangutil/ParserBase.cpp	11
/src/solidity/liblangutil/Scanner.h	21
/src/solidity/liblangutil/Exceptions.h	7
/src/solidity/liblangutil/CharStream.h	9
/src/solidity/liblangutil/Scanner.cpp	29
/src/solidity/liblangutil/Common.h	6
/src/solidity/liblangutil/CharStream.cpp	5
/src/solidity/liblangutil/SourceLocation.h	7
/src/solidity/liblangutil/Token.cpp	8
/src/solidity/libsolutil/StringUtils.h	2
/src/solidity/liblangutil/Token.h	6
/src/solidity/liblangutil/ErrorReporter.cpp	7
/src/solidity/libyul/Object.h	1
/src/solidity/libyul/AsmParser.h	13
/src/solidity/libyul/AsmParser.cpp	20
/src/solidity/libsolutil/Common.h	2
/usr/include/boost/algorithm/string/predicate.hpp	5
/usr/include/boost/algorithm/string/detail/predicate.hpp	1
/usr/include/boost/algorithm/string/compare.hpp	1
/src/solidity/libyul/AST.h	28
/src/solidity/libyul/Object.cpp	1
/src/solidity/libyul/AsmAnalysis.h	2
/src/solidity/libyul/SideEffects.h	1
/src/solidity/libyul/backends/evm/EVMDialect.h	1
/src/solidity/libyul/AsmAnalysis.cpp	3
/src/solidity/libyul/ScopeFiller.cpp	2
/src/solidity/liblangutil/SourceReferenceFormatter.h	1
/src/solidity/liblangutil/SourceReferenceFormatter.cpp	10
/src/solidity/liblangutil/SourceReferenceExtractor.cpp	2
/usr/include/boost/exception/get_error_info.hpp	4
/usr/include/boost/smart_ptr/detail/operator_bool.hpp	1
/src/solidity/liblangutil/SourceReferenceExtractor.h	5
/src/solidity/liblangutil/Exceptions.cpp	1
/usr/include/boost/algorithm/string/case_conv.hpp	1
/usr/include/boost/algorithm/string/detail/case_conv.hpp	2
/usr/include/boost/algorithm/string/trim.hpp	4
/usr/include/boost/algorithm/string/detail/trim.hpp	3
/src/solidity/libsolutil/AnsiColorized.h	11
/src/solidity/test/tools/ossfuzz/yulFuzzerCommon.cpp	2
/src/solidity/test/tools/yulInterpreter/Interpreter.h	7
/src/solidity/test/tools/yulInterpreter/Interpreter.cpp	7
/src/solidity/libyul/optimiser/ASTWalker.h	1
/usr/include/boost/multiprecision/detail/precision.hpp	1
/usr/include/boost/multiprecision/detail/number_base.hpp	3
/usr/include/boost/multiprecision/cpp_int/divide.hpp	2
/usr/local/include/c++/v1/stdexcept	2
/usr/include/boost/multiprecision/number.hpp	6
/usr/include/boost/multiprecision/cpp_int/misc.hpp	2
/usr/include/boost/multiprecision/cpp_int/bitwise.hpp	9
/usr/include/boost/multiprecision/detail/default_ops.hpp	4
/usr/include/boost/lexical_cast.hpp	1
/usr/include/boost/lexical_cast/try_lexical_convert.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical_streams.hpp	6
/usr/include/boost/lexical_cast/detail/lcast_unsigned_converters.hpp	1
/usr/include/boost/lexical_cast/bad_lexical_cast.hpp	2
/src/solidity/libsolutil/Numeric.h	1
/src/solidity/test/libyul/YulOptimizerTestCommon.cpp	5
/src/solidity/test/libyul/YulOptimizerTestCommon.h	1
/usr/include/google/protobuf/arena.h	1

Fuzzer: abiv2_isabelle_ossfuzz

Call tree

Min	Max	Color
0	1	red
1	10	gold
10	30	yellow
30	50	greenyellow
50	1000000000000	lawngreen

The distribution of callsites in terms of coloring is

Color Callsite count Percentage

red 9101 68.5%

gold 25 0.18%

yellow 10 0.07%

greenyellow 0 0.0%

lawngreen 4146 31.2%

All colors 13282 100

Color	Callsite count	Percentage
red	9101	68.5%
gold	25	0.18%
yellow	10	0.07%
greenyellow	0	0.0%
lawngreen	4146	31.2%
All colors	13282	100

Full call tree

The following link provides a visualisation of the full call tree overlaid with coverage information: full call tree

For further technical details on how the call tree is generated, please see the Glossary .

Fuzz blockers

The followings nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
617	6872	solidity::langutil::EVMVersion::canOverchargeGasForCall() const	call site	_ZN12_GLOBAL__N_123optimiserStepCollectionIJN8solidity3yul14BlockFlattenerENS2_24CircularReferencesPrunerENS2_29CommonSubexpressionEliminatorENS2_21ConditionalSimplifierENS2_23ConditionalUnsimplifierENS2_21ControlFlowSimplifierENS2_18DeadCodeEliminatorENS2_20EqualStoreEliminatorENS2_26EquivalentFunctionCombinerENS2_17ExpressionInlinerENS2_16ExpressionJoinerENS2_20ExpressionSimplifierENS2_18ExpressionSplitterENS2_24ForLoopConditionIntoBodyENS2_25ForLoopConditionOutOfBodyENS2_19ForLoopInitRewriterENS2_11FullInlinerENS2_15FunctionGrouperENS2_15FunctionHoisterENS2_19FunctionSpecializerENS2_21LiteralRematerialiserENS2_12LoadResolverENS2_23LoopInvariantCodeMotionENS2_22UnusedAssignEliminatorENS2_21UnusedStoreEliminatorENS2_24ReasoningBasedSimplifierENS2_14RematerialiserENS2_11SSAReverserENS2_12SSATransformENS2_20StructuralSimplifierENS2_29UnusedFunctionParameterPrunerENS2_12UnusedPrunerENS2_18VarDeclInitializerEEEENSt3__13mapINS10_12basic_stringIcNS10_11char_traitsIcEENS10_9allocatorIcEEEENS10_10unique_ptrINS2_13OptimiserStepENS10_14default_deleteIS19_EEEENS10_4lessIS17_EENS15_INS10_4pairIKS17_S1C_EEEEEEv
504	8801	solidity::evmasm::SemanticInformation::isCommutativeOperation(solidity::evmasm::AssemblyItem const&)	call site	_ZN5boost14multiprecision8backends15eval_left_shiftILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEENS_11enable_if_cIXntsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valueEvE4typeERS8_o
388	9476	boost::multiprecision::number , (boost::multiprecision::expression_template_option)0> solidity::fromBigEndian , (boost::multiprecision::expression_template_option)0>, std::__1::array >(std::__1::array const&)	call site	_ZN5boost14multiprecision3powINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEEEENS_11enable_if_cIXeqsr15number_categoryIT_EE5valueLNS0_20number_category_typeE0EENS0_6numberIS8_LNS0_26expression_template_optionE0EEEE4typeERKSC_RKj
321	12500	solidity::toHex(boost::multiprecision::number , (boost::multiprecision::expression_template_option)0>)	call site	_ZN6ranges11view_facadeINS_19iter_transform_viewINS_8ref_viewIKNSt3__13mapINS3_4pairINS3_6vectorIhNS3_9allocatorIhEEEES9_EENS6_INS3_12basic_stringIcNS3_11char_traitsIcEENS7_IcEEEENS7_ISF_EEEENS3_4lessISA_EENS7_INS5_IKSA_SH_EEEEEEEENS_10indirectedINS_6detail10get_secondEEEEELNS_11cardinalityEn1EE5beginISU_Lb1ELi0EEENS_14basic_iteratorINS3_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
258	12240	solidity::frontend::CompilerStack::compileContract(solidity::frontend::ContractDefinition const&, std::__1::map , std::__1::less , std::__1::allocator > > >&)	call site	_ZN5boost14multiprecisionltINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEELNS0_26expression_template_optionE0EiEENS_11enable_if_cIXaasr6detail22is_valid_mixed_compareINS0_6numberIT_XT0_EEET1_EE5valuenesr15number_categoryISA_EE5valueLNS0_20number_category_typeE4EEbE4typeERKSB_RKSC_
220	8543	solidity::evmasm::AssemblyItem::pushTag() const	call site	_ZN5boost6bimaps17container_adaptor11set_adaptorINS_11multi_index6detail13ordered_indexINS3_6memberINS0_8relation6detail16relation_storageINS0_4tags6taggedIKjNS7_9member_at4leftEEENSB_IKNSt3__13setINS_14multiprecision6numberINSI_8backends15cpp_int_backendILj256ELj256ELNSI_16cpp_integer_typeE0ELNSI_18cpp_int_check_typeE0EvEELNSI_26expression_template_optionE0EEENSG_4lessISQ_EENSG_9allocatorISQ_EEEENSD_5rightEEELb1EEEjXadL_ZNSZ_4leftEEEEENSR_IjEENS4_9nth_layerILi2ENS7_15mutant_relationISF_SY_N4mpl_2naELb1EEENS0_6detail10bimap_coreIjSV_S15_S15_S15_E12core_indicesENST_IS16_EEEENS_3mpl6v_itemISE_NS1D_7vector0IS15_EELi0EEENS4_18ordered_unique_tagENS4_19null_augment_policyEEENS17_17set_view_iteratorINS4_19bidir_node_iteratorINS4_18ordered_index_nodeIS1J_NS4_15index_node_baseIS16_S1B_EEEEEEEENS17_23const_set_view_iteratorIS1R_EENS1L_INS_9iterators16reverse_iteratorIS1R_EEEENS1T_IS1X_EENS1_7support23iterator_facade_to_baseIS1S_S1U_EES15_S15_NS8_28get_mutable_relation_functorIS16_EENS7_7support22get_above_view_functorIS16_EENS17_20set_view_key_to_baseIjS16_S10_EENS1D_6vectorIS15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_EEEC2ERS1K_
186	7827	solidity::util::fromHex(std::__1::basic_string , std::__1::allocator > const&, solidity::util::WhenError)	call site	_ZN5boost14multiprecision8backends15eval_left_shiftILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEENS_11enable_if_cIXntsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valueEvE4typeERS8_o
186	8071	solidity::evmasm::Assembly::Assembly(bool, std::__1::basic_string , std::__1::allocator >)	call site	_ZN6ranges11view_facadeINS_18iter_zip_with_viewINS_6detail16indirect_zip_fn_EJNS_8ref_viewINSt3__16vectorINS5_7variantIJN8solidity3yul27FunctionCallReturnLabelSlotENS9_23FunctionReturnLabelSlotENS9_12VariableSlotENS9_11LiteralSlotENS9_13TemporarySlotENS9_8JunkSlotEEEENS5_9allocatorISG_EEEEEENS4_IKSJ_EEEEELNS_11cardinalityEn1EE5beginISN_Lb1ELi0EEENS_14basic_iteratorINS5_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
169	5083	solidity::frontend::smt::SymbolicVariable::SymbolicVariable(std::__1::shared_ptr , std::__1::basic_string , std::__1::allocator >, solidity::frontend::smt::EncodingContext&)	call site	__dynamic_cast
152	9307	solidity::langutil::EVMVersion::hasSelfBalance() const	call site	_ZN5boost14multiprecisiongtINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEELNS0_26expression_template_optionE0EiEENS_11enable_if_cIXaasr6detail22is_valid_mixed_compareINS0_6numberIT_XT0_EEET1_EE5valuenesr15number_categoryISA_EE5valueLNS0_20number_category_typeE4EEbE4typeERKSB_RKSC_
147	5406	solidity::frontend::IntegerType::maxValue() const	call site	_ZN6ranges11view_facadeINS_19iter_transform_viewINS_8ref_viewINSt3__13mapIPKN8solidity8frontend18ContractDefinitionEPKNS6_9PredicateENS3_4lessIS9_EENS3_9allocatorINS3_4pairIKS9_SC_EEEEEEEENS_10indirectedINS_6detail10get_secondEEEEELNS_11cardinalityEn1EE5beginISQ_Lb1ELi0EEENS_14basic_iteratorINS3_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
135	6735	solidity::yul::AsmAnalyzer::analyze(solidity::yul::Block const&)	call site	__dynamic_cast

Branch Blockers [Click to view]

[EXPERIMENTAL] The followings are the branches where fuzzer fails to bypass.

Blocked Complexity	Reachable Complexity	Function Name	Blocked Branch
154586	735335	solidity::frontend::ExpressionCompiler::visit(solidity::frontend::FunctionCallconst&)	/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp:584
50273	76838	solidity::frontend::CompilerStack::compile(solidity::frontend::CompilerStack::State)	/src/solidity/libsolidity/interface/CompilerStack.cpp:663
50273	76838	solidity::frontend::CompilerStack::compile(solidity::frontend::CompilerStack::State)	/src/solidity/libsolidity/interface/CompilerStack.cpp:667
33725	89533	solidity::frontend::ExpressionCompiler::visit(solidity::frontend::FunctionCallconst&)	/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp:1266
32835	72094	solidity::frontend::ExpressionCompiler::visit(solidity::frontend::FunctionCallconst&)	/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp:1297
26324	52067	solidity::frontend::Parser::parseStatement(bool)	/src/solidity/libsolidity/parsing/Parser.cpp:1263
20152	164436	solidity::frontend::ArrayUtils::copyArrayToMemory(solidity::frontend::ArrayTypeconst&,bool)const	/src/solidity/libsolidity/codegen/ArrayUtils.cpp:310
17254	29247	solidity::frontend::Parser::parseContractDefinition()	/src/solidity/libsolidity/parsing/Parser.cpp:373
17254	29247	solidity::frontend::Parser::parseContractDefinition()	/src/solidity/libsolidity/parsing/Parser.cpp:375
17254	29247	solidity::frontend::Parser::parseContractDefinition()	/src/solidity/libsolidity/parsing/Parser.cpp:379
17254	29247	solidity::frontend::Parser::parseContractDefinition()	/src/solidity/libsolidity/parsing/Parser.cpp:385
17193	46334	solidity::frontend::ExpressionCompiler::visit(solidity::frontend::FunctionCallconst&)	/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp:1318

Runtime coverage analysis

3080

2475

3740

For further technical details on the call tree overview, please see the Glossary .

33.82%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/solidity/test/tools/ossfuzz/AbiV2IsabelleFuzzer.cpp	2
/src/solidity/test/tools/ossfuzz/abiV2Proto.pb.h	52
/src/solidity/test/tools/ossfuzz/abiV2Proto.pb.cc	26
/usr/include/google/protobuf/message.h	2
/usr/include/google/protobuf/message_lite.h	4
/usr/include/google/protobuf/metadata_lite.h	8
/usr/include/google/protobuf/generated_message_util.h	1
/src/solidity/test/tools/ossfuzz/protoToAbiV2.h	28
/src/solidity/test/tools/ossfuzz/protoToAbiV2.cpp	47
/usr/include/google/protobuf/generated_message_bases.h	1
/src/solidity/libsolutil/Whiskers.cpp	12
/src/solidity/libsolutil/Whiskers.h	6
/usr/local/include/c++/v1/exception	2
/usr/include/boost/exception/exception.hpp	15
/src/solidity/libsolutil/Exceptions.h	6
/src/solidity/libsolutil/Assertions.h	1
/usr/include/boost/exception/detail/error_info_impl.hpp	3
/usr/include/boost/exception/info.hpp	23
/usr/include/boost/smart_ptr/shared_ptr.hpp	7
/usr/include/boost/smart_ptr/detail/shared_count.hpp	4
/usr/include/boost/smart_ptr/detail/sp_counted_impl.hpp	1
/usr/include/boost/smart_ptr/detail/sp_counted_base_clang.hpp	6
/usr/include/boost/core/checked_delete.hpp	1
/usr/include/boost/exception/detail/type_info.hpp	1
/usr/include/boost/throw_exception.hpp	27
/src/solidity/liblangutil/Exceptions.h	16
/src/solidity/liblangutil/EVMVersion.h	19
/src/solidity/test/EVMHost.cpp	19
/src/solidity/test/evmc/mocked_host.hpp	2
/src/solidity/test/evmc/evmc.hpp	20
/usr/include/boost/operators.hpp	2
/src/solidity/libsolidity/interface/OptimiserSettings.h	8
/src/solidity/test/tools/ossfuzz/SolidityEvmoneInterface.h	10
/src/solidity/libsolidity/interface/CompilerStack.cpp	42
/src/solidity/libsolidity/ast/TypeProvider.cpp	19
/src/solidity/libsolidity/ast/TypeProvider.h	10
/src/solidity/libsolidity/interface/ImportRemapper.h	1
/src/solidity/libsolidity/formal/ModelCheckerSettings.h	10
/src/solidity/liblangutil/CharStreamProvider.h	3
/src/solidity/test/tools/ossfuzz/SolidityEvmoneInterface.cpp	7
/src/solidity/liblangutil/ErrorReporter.cpp	22
/src/solidity/liblangutil/SemVerHandler.cpp	11
/src/solidity/liblangutil/SemVerHandler.h	12
/usr/include/boost/assert/source_location.hpp	4
/src/solidity/liblangutil/SourceLocation.h	12
/src/solidity/libsolidity/parsing/Parser.h	11
/src/solidity/liblangutil/ParserBase.h	4
/src/solidity/libsolidity/parsing/Parser.cpp	132
/src/solidity/liblangutil/Scanner.h	25
/src/solidity/liblangutil/ParserBase.cpp	14
/src/solidity/liblangutil/Token.h	17
/src/solidity/liblangutil/Token.cpp	9
/src/solidity/libsolidity/ast/AST.h	69
/src/solidity/libsolidity/ast/ASTEnums.h	1
/src/solidity/liblangutil/Scanner.cpp	30
/usr/local/include/c++/v1/optional	39
/src/solidity/liblangutil/ErrorReporter.h	7
/src/solidity/liblangutil/CharStream.cpp	7
/src/solidity/liblangutil/CharStream.h	11
/src/solidity/liblangutil/Common.h	6
/src/solidity/libsolutil/StringUtils.h	12
/src/solidity/libyul/backends/evm/EVMDialect.cpp	9
/src/solidity/libyul/YulString.h	12
/src/solidity/libyul/AsmParser.h	14
/src/solidity/libyul/AsmParser.cpp	21
/src/solidity/libsolutil/Common.h	6
/usr/include/boost/algorithm/string/predicate.hpp	13
/usr/include/boost/range/as_literal.hpp	7
/usr/include/boost/range/begin.hpp	10
/usr/include/boost/range/iterator_range_core.hpp	24
/usr/include/boost/range/end.hpp	9
/usr/include/boost/algorithm/string/detail/predicate.hpp	1
/usr/include/boost/algorithm/string/compare.hpp	1
/src/solidity/libyul/AST.h	41
/usr/include/boost/multiprecision/cpp_int.hpp	37
/usr/include/boost/multiprecision/cpp_int/cpp_int_config.hpp	2
/usr/include/boost/multiprecision/cpp_int/multiply.hpp	7
/usr/include/boost/multiprecision/cpp_int/add.hpp	9
/usr/include/boost/multiprecision/detail/constexpr.hpp	4
/src/solidity/libyul/Exceptions.h	5
/usr/include/boost/algorithm/string/trim.hpp	6
/usr/include/boost/algorithm/string/classification.hpp	2
/usr/include/boost/algorithm/string/detail/classification.hpp	8
/usr/include/boost/algorithm/string/detail/trim.hpp	5
/src/solidity/libsolutil/SetOnce.h	13
/src/solidity/libsolutil/CommonIO.cpp	2
/usr/include/boost/filesystem/path.hpp	10
/usr/include/boost/iterator/iterator_facade.hpp	5
/usr/include/boost/type_traits/integral_constant.hpp	2
/src/solidity/libsolidity/interface/ImportRemapper.cpp	2
/src/solidity/libsolidity/interface/ReadFile.h	2
/src/solidity/libsolidity/analysis/SyntaxChecker.h	1
/src/solidity/libsolidity/ast/ASTVisitor.h	6
/src/solidity/libsolidity/analysis/Scoper.cpp	1
/src/solidity/libsolidity/analysis/Scoper.h	2
/src/solidity/libsolidity/analysis/SyntaxChecker.cpp	1
/src/solidity/libsolidity/analysis/NameAndTypeResolver.cpp	17
/src/solidity/libsolidity/analysis/GlobalContext.cpp	5
/src/solidity/libsolidity/analysis/DeclarationContainer.cpp	5
/src/solidity/libsolutil/CommonData.h	90
/src/solidity/libsolidity/ast/AST.cpp	23
/src/solidity/libsolidity/analysis/DeclarationContainer.h	2
/src/solidity/build/deps/include/range/v3/view/filter.hpp	3
/src/solidity/build/deps/include/range/v3/functional/bind_back.hpp	8
/src/solidity/build/deps/include/range/v3/view/view.hpp	45
/src/solidity/build/deps/include/range/v3/functional/invoke.hpp	17
/src/solidity/build/deps/include/range/v3/view/all.hpp	9
/src/solidity/build/deps/include/range/v3/range_fwd.hpp	7
/src/solidity/build/deps/include/range/v3/view/ref.hpp	7
/src/solidity/build/deps/include/range/v3/functional/not_fn.hpp	3
/src/solidity/build/deps/include/range/v3/view/remove_if.hpp	6
/src/solidity/build/deps/include/range/v3/view/adaptor.hpp	10
/src/solidity/build/deps/include/range/v3/utility/box.hpp	9
/src/solidity/build/deps/include/range/v3/utility/optional.hpp	12
/src/solidity/build/deps/include/range/v3/range/conversion.hpp	11
/src/solidity/build/deps/include/range/v3/range/access.hpp	13
/src/solidity/build/deps/include/range/v3/view/facade.hpp	22
/src/solidity/build/deps/include/range/v3/detail/range_access.hpp	6
/src/solidity/build/deps/include/range/v3/view/interface.hpp	7
/src/solidity/build/deps/include/range/v3/utility/compressed_pair.hpp	3
/src/solidity/build/deps/include/range/v3/iterator/basic_iterator.hpp	51
/src/solidity/libsolidity/analysis/DocStringTagParser.h	1
/src/solidity/libsolidity/analysis/DocStringTagParser.cpp	2
/src/solidity/libsolidity/analysis/GlobalContext.h	1
/src/solidity/libsolidity/analysis/ReferencesResolver.h	1
/src/solidity/libyul/optimiser/ASTWalker.h	8
/src/solidity/libsolidity/analysis/ReferencesResolver.cpp	1
/src/solidity/libsolidity/analysis/DeclarationTypeChecker.h	2
/src/solidity/libsolidity/analysis/DeclarationTypeChecker.cpp	1
/src/solidity/libsolidity/analysis/ContractLevelChecker.h	2
/src/solidity/libsolidity/analysis/OverrideChecker.h	8
/src/solidity/libsolidity/analysis/TypeChecker.h	1
/src/solidity/libsolidity/analysis/ContractLevelChecker.cpp	20
/src/solidity/libsolidity/ast/Types.cpp	32
/src/solidity/libsolidity/ast/Types.h	44
/src/solidity/libsolidity/analysis/OverrideChecker.cpp	39
/src/solidity/build/deps/include/range/v3/view/reverse.hpp	9
/src/solidity/build/deps/include/range/v3/iterator/reverse_iterator.hpp	3
/src/solidity/libsolutil/Result.h	10
/src/solidity/build/deps/include/range/v3/view/transform.hpp	25
/usr/include/boost/algorithm/string/join.hpp	4
/src/solidity/build/deps/include/range/v3/functional/reference_wrapper.hpp	8
/src/solidity/build/deps/include/range/v3/utility/semiregular_box.hpp	3
/src/solidity/build/deps/include/range/v3/functional/indirect.hpp	4
/usr/include/boost/algorithm/string/detail/sequence.hpp	5
/src/solidity/libsolutil/LazyInit.h	4
/src/solidity/libsolutil/Keccak256.h	2
/src/solidity/libsolutil/vector_ref.h	13
/src/solidity/libsolutil/Keccak256.cpp	5
/src/solidity/libsolutil/FixedHash.h	18
/src/solidity/libsolidity/analysis/TypeChecker.cpp	2
/usr/include/boost/core/empty_value.hpp	3
/usr/include/boost/multiprecision/detail/number_base.hpp	21
/usr/include/boost/multiprecision/number.hpp	33
/usr/include/boost/multiprecision/detail/precision.hpp	8
/usr/include/boost/multiprecision/detail/et_ops.hpp	16
/usr/local/include/c++/v1/stdexcept	2
/usr/include/boost/multiprecision/detail/default_ops.hpp	10
/usr/include/boost/multiprecision/cpp_int/bitwise.hpp	14
/usr/include/boost/multiprecision/detail/number_compare.hpp	43
/src/solidity/libsolidity/analysis/DocStringAnalyser.h	1
/src/solidity/libsolidity/analysis/DocStringAnalyser.cpp	1
/src/solidity/libsolidity/analysis/PostTypeChecker.cpp	3
/src/solidity/libsolidity/analysis/PostTypeChecker.h	1
/src/solidity/libsolidity/analysis/FunctionCallGraph.cpp	6
/src/solidity/libsolidity/analysis/FunctionCallGraph.h	2
/src/solidity/libsolidity/ast/CallGraph.h	3
/src/solidity/libsolutil/Algorithms.h	23
/src/solidity/libsolidity/analysis/PostTypeContractLevelChecker.h	1
/src/solidity/libsolidity/analysis/PostTypeContractLevelChecker.cpp	2
/src/solidity/libsolutil/FunctionSelector.h	2
/usr/include/boost/multiprecision/cpp_int/misc.hpp	2
/src/solidity/libsolidity/analysis/ImmutableValidator.h	1
/src/solidity/libsolidity/analysis/ImmutableValidator.cpp	3
/src/solidity/libsolidity/analysis/ControlFlowGraph.h	8
/src/solidity/libsolidity/analysis/ControlFlowGraph.cpp	2
/src/solidity/libsolidity/analysis/ControlFlowRevertPruner.h	2
/src/solidity/libsolidity/analysis/ControlFlowRevertPruner.cpp	5
/src/solidity/libsolidity/analysis/ControlFlowAnalyzer.h	2
/src/solidity/libsolidity/analysis/ControlFlowAnalyzer.cpp	7
/src/solidity/build/deps/include/range/v3/algorithm/sort.hpp	11
/src/solidity/build/deps/include/range/v3/iterator/operations.hpp	8
/src/solidity/build/deps/include/range/v3/algorithm/partial_sort.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/heap_algorithm.hpp	4
/src/solidity/build/deps/include/range/v3/iterator/access.hpp	4
/src/solidity/build/deps/include/range/v3/utility/move.hpp	1
/src/solidity/build/deps/include/concepts/swap.hpp	2
/src/solidity/build/deps/include/range/v3/functional/identity.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/move_backward.hpp	1
/src/solidity/libsolidity/analysis/StaticAnalyzer.cpp	3
/src/solidity/libsolidity/analysis/ViewPureChecker.h	1
/src/solidity/libsolidity/analysis/ViewPureChecker.cpp	1
/src/solidity/libsolidity/formal/ModelChecker.cpp	5
/src/solidity/liblangutil/UniqueErrorReporter.h	8
/src/solidity/libsolidity/formal/EncodingContext.cpp	9
/src/solidity/libsolidity/formal/SymbolicState.h	12
/src/solidity/libsolidity/formal/SymbolicVariables.cpp	11
/src/solidity/libsolidity/formal/SymbolicTypes.cpp	24
/src/solidity/libsmtutil/Sorts.cpp	1
/src/solidity/libsolidity/formal/SymbolicVariables.h	3
/src/solidity/libsolidity/formal/SymbolicState.cpp	7
/src/solidity/libsolidity/formal/BMC.cpp	3
/src/solidity/libsolidity/formal/SMTEncoder.cpp	24
/src/solidity/libsolidity/formal/VariableUsage.h	3
/src/solidity/libsolidity/formal/SMTEncoder.h	2
/src/solidity/libsolidity/formal/CHC.cpp	19
/src/solidity/libsmtutil/SolverInterface.h	12
/src/solidity/libsolidity/formal/BMC.h	2
/src/solidity/libsolidity/formal/EncodingContext.h	5
/src/solidity/build/deps/include/range/v3/algorithm/any_of.hpp	5
/src/solidity/build/deps/include/range/v3/view/map.hpp	1
/src/solidity/libsmtutil/CHCSmtLib2Interface.h	2
/src/solidity/libsolidity/formal/Predicate.cpp	9
/src/solidity/libsolidity/formal/ArraySlicePredicate.h	1
/src/solidity/libsmtutil/CHCSmtLib2Interface.cpp	1
/src/solidity/libsolidity/formal/SSAVariable.cpp	1
/usr/include/boost/rational.hpp	2
/src/solidity/libsolidity/formal/PredicateSort.cpp	6
/src/solidity/libsolidity/formal/SSAVariable.h	1
/src/solidity/libsmtutil/Exceptions.h	1
/src/solidity/libsolidity/formal/PredicateInstance.cpp	2
/usr/include/boost/multiprecision/cpp_int/comparison.hpp	2
/usr/include/boost/lexical_cast.hpp	1
/usr/include/boost/lexical_cast/try_lexical_convert.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical_streams.hpp	6
/usr/include/boost/lexical_cast/detail/lcast_unsigned_converters.hpp	1
/usr/include/boost/lexical_cast/bad_lexical_cast.hpp	2
/usr/include/boost/multiprecision/cpp_int/divide.hpp	2
/src/solidity/libsolutil/Numeric.h	18
/src/solidity/libsolutil/CommonData.cpp	6
/src/solidity/libsolidity/formal/Invariants.cpp	2
/src/solidity/libsolidity/formal/ExpressionFormatter.cpp	7
/src/solidity/libsolidity/formal/CHC.h	4
/src/solidity/libsolidity/formal/Predicate.h	1
/src/solidity/libsolidity/formal/ModelChecker.h	1
/src/solidity/libsolidity/analysis/NameAndTypeResolver.h	1
/src/solidity/libsolidity/codegen/CompilerContext.h	33
/src/solidity/libsolidity/codegen/ir/IRGenerator.h	2
/src/solidity/libsolidity/codegen/ir/IRGenerationContext.h	15
/src/solidity/libsolidity/codegen/MultiUseYulFunctionCollector.h	3
/src/solidity/libsolidity/codegen/YulUtilFunctions.h	1
/src/solidity/libsolutil/IpfsHash.cpp	10
/src/solidity/libsolutil/picosha2.h	19
/usr/local/include/c++/v1/initializer_list	4
/src/solidity/libsolutil/SwarmHash.h	1
/src/solidity/libsolutil/SwarmHash.cpp	3
/src/solidity/libsolidity/codegen/ir/IRGenerator.cpp	18
/src/solidity/libsolidity/codegen/MultiUseYulFunctionCollector.cpp	3
/src/solidity/libsolidity/codegen/ir/IRGenerationContext.cpp	11
/src/solidity/libsolidity/codegen/ir/Common.cpp	9
/src/solidity/libsolutil/CommonIO.h	2
/src/solidity/libyul/AsmPrinter.cpp	3
/src/solidity/liblangutil/DebugInfoSelection.h	4
/src/solidity/liblangutil/DebugInfoSelection.cpp	2
/usr/include/boost/algorithm/string/replace.hpp	5
/usr/include/boost/algorithm/string/finder.hpp	3
/usr/include/boost/algorithm/string/detail/finder.hpp	6
/usr/include/boost/algorithm/string/formatter.hpp	2
/usr/include/boost/algorithm/string/detail/formatter.hpp	3
/usr/include/boost/algorithm/string/find_format.hpp	2
/usr/include/boost/range/empty.hpp	1
/usr/include/boost/algorithm/string/detail/find_format_all.hpp	4
/usr/include/boost/algorithm/string/detail/find_format_store.hpp	8
/usr/include/boost/range/detail/safe_bool.hpp	1
/usr/include/boost/algorithm/string/detail/replace_storage.hpp	4
/src/solidity/libsolidity/codegen/YulUtilFunctions.cpp	11
/src/solidity/libsolidity/codegen/CompilerUtils.h	3
/src/solidity/libyul/Object.h	6
/src/solidity/libyul/Utilities.cpp	6
/usr/include/boost/range/distance.hpp	1
/usr/include/boost/iterator/distance.hpp	2
/usr/include/boost/algorithm/string/split.hpp	1
/usr/include/boost/algorithm/string/iter_find.hpp	1
/usr/include/boost/algorithm/string/find_iterator.hpp	4
/usr/include/boost/algorithm/string/detail/find_iterator.hpp	5
/usr/include/boost/function/function_template.hpp	12
/usr/include/boost/function/function_base.hpp	5
/usr/include/boost/core/addressof.hpp	2
/usr/include/boost/iterator/transform_iterator.hpp	3
/usr/include/boost/iterator/iterator_adaptor.hpp	3
/src/solidity/libyul/YulStack.h	6
/src/solidity/libyul/YulStack.cpp	14
/src/solidity/libyul/ObjectParser.h	1
/src/solidity/libyul/ObjectParser.cpp	8
/src/solidity/libyul/backends/wasm/WasmDialect.cpp	1
/src/solidity/libyul/Object.cpp	3
/src/solidity/libyul/AsmAnalysis.h	2
/src/solidity/libyul/SideEffects.h	1
/src/solidity/libyul/backends/evm/EVMDialect.h	7
/src/solidity/libyul/AsmAnalysis.cpp	4
/src/solidity/libyul/ScopeFiller.cpp	2
/src/solidity/liblangutil/SourceReferenceFormatter.cpp	11
/src/solidity/liblangutil/SourceReferenceFormatter.h	3
/src/solidity/liblangutil/SourceReferenceExtractor.cpp	2
/usr/include/boost/exception/get_error_info.hpp	6
/usr/include/boost/smart_ptr/detail/operator_bool.hpp	1
/src/solidity/liblangutil/SourceReferenceExtractor.h	5
/src/solidity/liblangutil/Exceptions.cpp	2
/usr/include/boost/algorithm/string/case_conv.hpp	1
/usr/include/boost/algorithm/string/detail/case_conv.hpp	2
/src/solidity/libsolutil/AnsiColorized.h	11
/src/solidity/libyul/optimiser/Suite.cpp	10
/src/solidity/libyul/optimiser/Disambiguator.h	1
/src/solidity/libyul/optimiser/ASTCopier.h	5
/src/solidity/libyul/optimiser/NameDispenser.cpp	5
/src/solidity/libyul/optimiser/ASTCopier.cpp	3
/src/solidity/libyul/optimiser/NameCollector.h	4
/src/solidity/libyul/optimiser/Suite.h	1
/src/solidity/libyul/optimiser/Metrics.cpp	1
/src/solidity/libyul/optimiser/Metrics.h	1
/src/solidity/libyul/optimiser/ASTWalker.cpp	4
/src/solidity/libyul/optimiser/NameSimplifier.h	2
/src/solidity/libyul/optimiser/NameSimplifier.cpp	2
/src/solidity/libyul/optimiser/OptimizerUtilities.cpp	2
/src/solidity/libyul/optimiser/NameDispenser.h	2
/src/solidity/libyul/optimiser/StackCompressor.cpp	7
/src/solidity/libyul/optimiser/Semantics.cpp	2
/src/solidity/libyul/optimiser/Semantics.h	3
/src/solidity/libyul/AsmAnalysisInfo.h	3
/src/solidity/libyul/backends/evm/ControlFlowGraphBuilder.cpp	11
/src/solidity/libyul/backends/evm/ControlFlowGraph.h	4
/src/solidity/libsolutil/cxx20.h	1
/src/solidity/libyul/backends/evm/StackLayoutGenerator.cpp	29
/src/solidity/libyul/backends/evm/StackLayoutGenerator.h	2
/src/solidity/build/deps/include/range/v3/algorithm/find.hpp	2
/src/solidity/build/deps/include/range/v3/view/enumerate.hpp	1
/src/solidity/build/deps/include/range/v3/view/zip.hpp	6
/src/solidity/build/deps/include/range/v3/view/zip_with.hpp	1
/src/solidity/build/deps/include/range/v3/view/iota.hpp	5
/src/solidity/libyul/backends/evm/StackHelpers.h	6
/src/solidity/build/deps/include/range/v3/algorithm/all_of.hpp	3
/src/solidity/build/deps/include/range/v3/view/drop.hpp	1
/src/solidity/libyul/optimiser/DataFlowAnalyzer.cpp	4
/src/solidity/libyul/optimiser/DataFlowAnalyzer.h	3
/src/solidity/libyul/optimiser/KnowledgeBase.h	2
/src/solidity/libyul/optimiser/Rematerialiser.cpp	2
/src/solidity/libyul/optimiser/NameCollector.cpp	3
/src/solidity/libyul/optimiser/Rematerialiser.h	1
/src/solidity/libyul/optimiser/UnusedPruner.cpp	5
/src/solidity/build/deps/include/range/v3/action/remove_if.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/remove_if.hpp	2
/src/solidity/build/deps/include/range/v3/algorithm/find_if.hpp	1
/src/solidity/build/deps/include/range/v3/action/erase.hpp	2
/src/solidity/libyul/optimiser/UnusedPruner.h	2
/src/solidity/libyul/CompilabilityChecker.cpp	1
/src/solidity/libyul/backends/evm/NoOutputAssembly.cpp	2
/src/solidity/libyul/Dialect.h	3
/src/solidity/libevmasm/Instruction.h	8
/src/solidity/liblangutil/EVMVersion.cpp	1
/src/solidity/libevmasm/Instruction.cpp	2
/src/solidity/libyul/ControlFlowSideEffects.h	1
/src/solidity/libevmasm/SemanticInformation.cpp	9
/src/solidity/libyul/backends/evm/NoOutputAssembly.h	1
/src/solidity/libyul/backends/evm/AbstractAssembly.h	4
/src/solidity/libyul/backends/evm/EVMCodeTransform.h	5
/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp	13
/src/solidity/libyul/backends/evm/VariableReferenceCounter.h	3
/src/solidity/libyul/backends/evm/VariableReferenceCounter.cpp	1
/src/solidity/build/deps/include/range/v3/algorithm/none_of.hpp	3
/src/solidity/libevmasm/Exceptions.h	5
/src/solidity/build/deps/include/range/v3/algorithm/max.hpp	1
/src/solidity/libyul/CompilabilityChecker.h	1
/src/solidity/libyul/backends/evm/ConstantOptimiser.h	1
/src/solidity/libyul/optimiser/StackLimitEvader.cpp	6
/src/solidity/build/deps/include/range/v3/view/take.hpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.cpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.h	1
/src/solidity/libyul/optimiser/CallGraphGenerator.cpp	5
/src/solidity/libyul/optimiser/CallGraphGenerator.h	4
/src/solidity/build/deps/include/range/v3/view/concat.hpp	2
/src/solidity/libyul/optimiser/StackToMemoryMover.cpp	9
/src/solidity/libyul/optimiser/StackToMemoryMover.h	3
/src/solidity/libyul/optimiser/VarNameCleaner.h	2
/src/solidity/libyul/optimiser/VarNameCleaner.cpp	1
/src/solidity/libsolutil/Exceptions.cpp	2
/src/solidity/libevmasm/Assembly.h	22
/src/solidity/libevmasm/LinkerObject.h	5
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.cpp	1
/src/solidity/libyul/backends/evm/EVMObjectCompiler.cpp	2
/src/solidity/libyul/backends/evm/EVMObjectCompiler.h	1
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.cpp	8
/src/solidity/build/deps/include/range/v3/view/take_last.hpp	1
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.h	1
/src/solidity/libevmasm/Assembly.cpp	17
/src/solidity/libevmasm/JumpdestRemover.cpp	2
/src/solidity/libevmasm/AssemblyItem.h	21
/src/solidity/libevmasm/AssemblyItem.cpp	8
/src/solidity/libevmasm/BlockDeduplicator.cpp	2
/src/solidity/libevmasm/Inliner.h	1
/src/solidity/libevmasm/Inliner.cpp	10
/src/solidity/build/deps/include/range/v3/view/slice.hpp	1
/src/solidity/build/deps/include/range/v3/view/span.hpp	7
/src/solidity/build/deps/include/range/v3/range/primitives.hpp	1
/src/solidity/build/deps/include/range/v3/view/subrange.hpp	2
/src/solidity/build/deps/include/range/v3/view/drop_last.hpp	3
/src/solidity/build/deps/include/range/v3/numeric/accumulate.hpp	3
/src/solidity/libevmasm/GasMeter.h	6
/src/solidity/libevmasm/GasMeter.cpp	3
/src/solidity/libevmasm/JumpdestRemover.h	1
/src/solidity/libevmasm/PeepholeOptimiser.h	2
/src/solidity/libevmasm/PeepholeOptimiser.cpp	7
/src/solidity/libevmasm/BlockDeduplicator.h	3
/src/solidity/libevmasm/KnownState.h	12
/usr/include/boost/bimap/bimap.hpp	2
/usr/include/boost/multi_index_container.hpp	11
/usr/include/boost/multi_index/detail/converter.hpp	1
/usr/include/boost/bimap/views/set_view.hpp	1
/usr/include/boost/bimap/container_adaptor/set_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/ordered_associative_container_adaptor.hpp	2
/usr/include/boost/bimap/container_adaptor/associative_container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/detail/functor_bag.hpp	1
/usr/include/boost/utility/base_from_member.hpp	2
/usr/include/boost/multi_index/detail/header_holder.hpp	3
/usr/include/boost/tuple/detail/tuple_basic.hpp	5
/usr/include/boost/multi_index/detail/ord_index_impl.hpp	17
/usr/include/boost/multi_index/detail/index_base.hpp	4
/usr/include/boost/multi_index/detail/ord_index_node.hpp	14
/usr/include/boost/bimap/views/map_view.hpp	2
/usr/include/boost/bimap/container_adaptor/map_adaptor.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.h	4
/usr/include/boost/multi_index/detail/copy_map.hpp	10
/usr/include/boost/multi_index/detail/auto_space.hpp	3
/usr/include/boost/multi_index/detail/bidir_node_iterator.hpp	3
/usr/include/boost/multi_index/ordered_index.hpp	1
/usr/include/boost/multi_index/detail/raw_ptr.hpp	5
/usr/include/boost/multi_index/detail/index_node_base.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.cpp	4
/src/solidity/libevmasm/KnownState.cpp	9
/src/solidity/libevmasm/ExpressionClasses.cpp	10
/src/solidity/libevmasm/ExpressionClasses.h	3
/src/solidity/libevmasm/SimplificationRules.cpp	12
/src/solidity/libevmasm/SimplificationRules.h	10
/src/solidity/libevmasm/RuleList.h	58
/src/solidity/libevmasm/SimplificationRule.h	76
/src/solidity/libevmasm/ConstantOptimiser.cpp	12
/src/solidity/libevmasm/ConstantOptimiser.h	10
/usr/include/boost/multiprecision/detail/functions/pow.hpp	2
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.h	1
/src/solidity/libevmasm/LinkerObject.cpp	3
/src/solidity/libsolidity/codegen/Compiler.cpp	2
/src/solidity/libsolidity/codegen/ContractCompiler.h	2
/src/solidity/libsolidity/codegen/ContractCompiler.cpp	19
/src/solidity/libsolidity/codegen/CompilerContext.cpp	29
/src/solidity/libsolidity/codegen/CompilerUtils.cpp	34
/src/solidity/libyul/backends/evm/EVMMetrics.h	2
/src/solidity/libyul/AsmPrinter.h	3
/src/solidity/libyul/backends/evm/AsmCodeGen.cpp	1
/src/solidity/libsolidity/codegen/ArrayUtils.h	1
/src/solidity/libsolidity/codegen/ArrayUtils.cpp	5
/src/solidity/libsolidity/codegen/LValue.cpp	4
/src/solidity/libsolidity/codegen/LValue.h	2
/src/solidity/libsolidity/codegen/ABIFunctions.cpp	5
/src/solidity/libsolidity/codegen/ABIFunctions.h	3
/src/solidity/libsolidity/codegen/ExpressionCompiler.h	2
/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp	3
/src/solidity/libsolidity/codegen/Compiler.h	1
/src/solidity/libyul/backends/wasm/EVMToEwasmTranslator.h	1
/src/solidity/libyul/backends/wasm/EVMToEwasmTranslator.cpp	2
/src/solidity/libyul/optimiser/FunctionHoister.h	2
/src/solidity/libyul/optimiser/FunctionHoister.cpp	1
/src/solidity/libyul/optimiser/FunctionGrouper.h	1
/src/solidity/libyul/optimiser/FunctionGrouper.cpp	2
/src/solidity/libyul/optimiser/MainFunction.h	1
/src/solidity/libyul/optimiser/MainFunction.cpp	1
/src/solidity/libyul/optimiser/ForLoopConditionIntoBody.cpp	1
/src/solidity/libyul/optimiser/ForLoopConditionIntoBody.h	1
/src/solidity/libyul/optimiser/ExpressionSplitter.cpp	2
/src/solidity/libyul/optimiser/TypeInfo.cpp	3
/src/solidity/libyul/optimiser/ExpressionSplitter.h	1
/src/solidity/libyul/optimiser/TypeInfo.h	1
/src/solidity/libyul/backends/wasm/WordSizeTransform.cpp	2
/src/solidity/libyul/optimiser/NameDisplacer.h	1
/src/solidity/libyul/optimiser/NameDisplacer.cpp	2
/src/solidity/libyul/backends/wasm/WordSizeTransform.h	1
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.cpp	2
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.h	1
/src/solidity/libyul/backends/wasm/WasmCodeTransform.cpp	7
/src/solidity/libyul/backends/wasm/WasmAST.h	12
/src/solidity/libyul/backends/wasm/WasmCodeTransform.h	2
/src/solidity/libyul/backends/wasm/TextTransform.cpp	5
/src/solidity/libyul/backends/wasm/BinaryTransform.cpp	30
/src/solidity/libsolutil/LEB128.h	2
/src/solidity/libyul/backends/wasm/BinaryTransform.h	2
/src/solidity/libsolidity/interface/CompilerStack.h	1
/src/solidity/build/deps/src/jsoncpp-project/src/lib_json/json_value.cpp	33
/src/solidity/build/deps/src/jsoncpp-project/src/lib_json/../../include/json/value.h	5
/src/solidity/build/deps/src/jsoncpp-project/src/lib_json/json_valueiterator.inl	5
/src/solidity/build/deps/include/json/value.h	1
/usr/include/google/protobuf/repeated_ptr_field.h	3

Fuzzer: const_opt_ossfuzz

Call tree

The distribution of callsites in terms of coloring is

Color Callsite count Percentage

red 439 59.3%

gold 0 0.0%

yellow 0 0.0%

greenyellow 0 0.0%

lawngreen 301 40.6%

All colors 740 100

Full call tree

The following link provides a visualisation of the full call tree overlaid with coverage information: full call tree

For further technical details on how the call tree is generated, please see the Glossary .

Fuzz blockers

The followings nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
122	54	solidity::evmasm::Assembly::Assembly(bool, std::__1::basic_string , std::__1::allocator >)	call site	_ZN5boost14multiprecision8backends8eval_addILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvLj256ELj256ELS3_0ELS4_0EvLj256ELj256ELS3_0ELS4_0EvEENS_11enable_if_cIXaaaantsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valuentsr18is_trivial_cpp_intINS6_IXT4_EXT5_EXT6_EXT7_ET8_EEEE5valuentsr18is_trivial_cpp_intINS6_IXT9_EXT10_EXT11_EXT12_ET13_EEEE5valueEvE4typeERS8_RKSA_RKSC_
75	570	solidity::evmasm::ComputeMethod::checkRepresentation(boost::multiprecision::number , (boost::multiprecision::expression_template_option)0> const&, std::__1::vector > const&) const	call site	_ZN5boost14multiprecision3powINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEEEENS_11enable_if_cIXeqsr15number_categoryIT_EE5valueLNS0_20number_category_typeE0EENS0_6numberIS8_LNS0_26expression_template_optionE0EEEE4typeERKSC_RKj
28	7	boost::multiprecision::number , (boost::multiprecision::expression_template_option)0> solidity::fromBigEndian , (boost::multiprecision::expression_template_option)0>, std::__1::array >(std::__1::array const&)	call site	__clang_call_terminate
22	451	solidity::evmasm::AssemblyItem::bytesRequired(unsigned long, solidity::evmasm::Precision) const	call site
21	318	solidity::evmasm::GasMeter::dataGas(std::__1::vector > const&, bool, solidity::langutil::EVMVersion)	call site	_ZN5boost14multiprecision6numberINS0_8backends15cpp_int_backendILj0ELj0ELNS0_16cpp_integer_typeE1ELNS0_18cpp_int_check_typeE0ENSt3__19allocatorIyEEEELNS0_26expression_template_optionE1EEC2INS0_6detail19multiply_immediatesESB_mvvEERKNSD_10expressionIT_T0_T1_T2_T3_EEPNS_11enable_if_cIXsr14is_convertibleINSL_11result_typeESB_EE5valueEvE4typeE
19	668	solidity::evmasm::ComputeMethod::checkRepresentation(boost::multiprecision::number , (boost::multiprecision::expression_template_option)0> const&, std::__1::vector > const&) const	call site	_ZN5boost14multiprecision6numberINS0_8backends15cpp_int_backendILj0ELj0ELNS0_16cpp_integer_typeE1ELNS0_18cpp_int_check_typeE0ENSt3__19allocatorIyEEEELNS0_26expression_template_optionE1EEC2INS0_6detail10shift_leftESB_jvvEERKNSD_10expressionIT_T0_T1_T2_T3_EEPNS_11enable_if_cIXsr14is_convertibleINSL_11result_typeESB_EE5valueEvE4typeE
13	261	solidity::evmasm::GasMeter::runGas(solidity::evmasm::Instruction)	call site
12	36	boost::multiprecision::number , (boost::multiprecision::expression_template_option)0> solidity::fromBigEndian , (boost::multiprecision::expression_template_option)0>, std::__1::array >(std::__1::array const&)	call site	__clang_call_terminate
9	293	void solidity::toBigEndian , (boost::multiprecision::expression_template_option)0>, std::__1::vector > >(boost::multiprecision::number , (boost::multiprecision::expression_template_option)0>, std::__1::vector >&)	call site	__clang_call_terminate
8	538	solidity::evmasm::ComputeMethod::findRepresentation(boost::multiprecision::number , (boost::multiprecision::expression_template_option)0> const&)	call site	_ZN5boost14multiprecisionneINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEELNS0_26expression_template_optionE0EiEENS_11enable_if_cIXsr6detail22is_valid_mixed_compareINS0_6numberIT_XT0_EEET1_EE5valueEbE4typeERKSB_RKSC_
7	240	solidity::evmasm::ConstantOptimisationMethod::optimiseConstants(bool, unsigned long, solidity::langutil::EVMVersion, solidity::evmasm::Assembly&)	call site	__clang_call_terminate
7	491	solidity::evmasm::ComputeMethod::findRepresentation(boost::multiprecision::number , (boost::multiprecision::expression_template_option)0> const&)	call site	_ZN5boost14multiprecision6numberINS0_8backends15cpp_int_backendILj0ELj0ELNS0_16cpp_integer_typeE1ELNS0_18cpp_int_check_typeE0ENSt3__19allocatorIyEEEELNS0_26expression_template_optionE1EEC2INS0_6detail19subtract_immediatesENS1_INS3_ILj256ELj256ELS4_0ELS5_0EvEELSA_0EEESB_vvEERKNSD_10expressionIT_T0_T1_T2_T3_EEPNS_11enable_if_cIXsr14is_convertibleINSN_11result_typeESB_EE5valueEvE4typeE

Branch Blockers [Click to view]

[EXPERIMENTAL] The followings are the branches where fuzzer fails to bypass.

Blocked Complexity	Reachable Complexity	Function Name	Blocked Branch
1151	5544	solidity::evmasm::ComputeMethod::findRepresentation(boost::multiprecision::number ,(boost::multiprecision::expression_template_option)0>const&)	/src/solidity/libevmasm/ConstantOptimiser.cpp:226
447	2886	FuzzerUtil::testConstantOptimizer(std::__1::basic_string ,std::__1::allocator >const&,bool)	/src/solidity/test/tools/fuzzer_common.cpp:174
447	2748	FuzzerUtil::testConstantOptimizer(std::__1::basic_string ,std::__1::allocator >const&,bool)	/src/solidity/test/tools/fuzzer_common.cpp:185
447	2748	FuzzerUtil::testConstantOptimizer(std::__1::basic_string ,std::__1::allocator >const&,bool)	/src/solidity/test/tools/fuzzer_common.cpp:193
148	834	solidity::evmasm::ConstantOptimisationMethod::simpleRunGas(std::__1::vector >const&)	/src/solidity/libevmasm/ConstantOptimiser.cpp:90
12	12	solidity::evmasm::AssemblyItem::AssemblyItem(solidity::evmasm::AssemblyItemType,boost::multiprecision::number ,(boost::multiprecision::expression_template_option)0>,solidity::langutil::SourceLocation)	/src/solidity/libevmasm/AssemblyItem.h:78
8	8	solidity::evmasm::AssemblyItem::operator<(solidity::evmasm::AssemblyItemconst&)const	/src/solidity/libevmasm/AssemblyItem.h:141
4	4	solidity::evmasm::Assembly::append(solidity::evmasm::AssemblyItem)	/src/solidity/libevmasm/Assembly.cpp:56
4	4	solidity::evmasm::AssemblyItem::arguments()const	/src/solidity/libevmasm/AssemblyItem.cpp:172
0	316	solidity::evmasm::AssemblyItem::operator<(solidity::evmasm::AssemblyItemconst&)const	/src/solidity/libevmasm/AssemblyItem.h:139
0	4	solidity::evmasm::AssemblyItem::operator<(solidity::evmasm::AssemblyItemconst&)const	/src/solidity/libevmasm/AssemblyItem.h:137

Runtime coverage analysis

101

257

330

For further technical details on the call tree overview, please see the Glossary .

22.12%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/solidity/test/tools/ossfuzz/const_opt_ossfuzz.cpp	1
/src/solidity/test/tools/fuzzer_common.cpp	1
/src/solidity/libsolutil/FixedHash.h	3
/src/solidity/libsolutil/Numeric.h	5
/usr/include/boost/multiprecision/cpp_int.hpp	31
/usr/include/boost/multiprecision/detail/number_base.hpp	13
/usr/local/include/c++/v1/stdexcept	3
/usr/include/boost/assert/source_location.hpp	4
/usr/include/boost/throw_exception.hpp	12
/usr/include/boost/exception/exception.hpp	10
/usr/include/boost/exception/info.hpp	10
/usr/include/boost/multiprecision/cpp_int/bitwise.hpp	9
/usr/include/boost/multiprecision/detail/default_ops.hpp	8
/src/solidity/libevmasm/Assembly.h	5
/src/solidity/libevmasm/LinkerObject.h	2
/src/solidity/liblangutil/SourceLocation.h	7
/usr/include/boost/multiprecision/number.hpp	22
/usr/include/boost/lexical_cast.hpp	1
/usr/include/boost/lexical_cast/try_lexical_convert.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical_streams.hpp	6
/usr/include/boost/lexical_cast/detail/lcast_unsigned_converters.hpp	1
/usr/include/boost/lexical_cast/bad_lexical_cast.hpp	3
/usr/local/include/c++/v1/typeinfo	1
/usr/local/include/c++/v1/exception	2
/usr/include/boost/multiprecision/cpp_int/divide.hpp	2
/usr/include/boost/multiprecision/cpp_int/add.hpp	8
/usr/include/boost/multiprecision/cpp_int/cpp_int_config.hpp	1
/usr/include/boost/multiprecision/detail/constexpr.hpp	4
/src/solidity/libevmasm/AssemblyItem.h	13
/usr/include/boost/multiprecision/cpp_int/misc.hpp	2
/src/solidity/libevmasm/Assembly.cpp	1
/src/solidity/libevmasm/Exceptions.h	4
/src/solidity/libsolutil/Exceptions.h	2
/src/solidity/libsolutil/Assertions.h	1
/usr/include/boost/exception/detail/error_info_impl.hpp	2
/src/solidity/libevmasm/AssemblyItem.cpp	3
/src/solidity/libevmasm/Instruction.cpp	1
/src/solidity/libevmasm/Instruction.h	2
/usr/local/include/c++/v1/optional	4
/src/solidity/liblangutil/EVMVersion.h	7
/src/solidity/libevmasm/ConstantOptimiser.cpp	12
/usr/include/boost/multiprecision/detail/number_compare.hpp	26
/src/solidity/libevmasm/ConstantOptimiser.h	10
/usr/include/boost/core/empty_value.hpp	3
/src/solidity/libevmasm/GasMeter.cpp	2
/src/solidity/libevmasm/GasMeter.h	2
/usr/include/boost/operators.hpp	1
/usr/include/boost/multiprecision/detail/et_ops.hpp	8
/usr/include/boost/multiprecision/detail/precision.hpp	7
/usr/include/boost/multiprecision/cpp_int/multiply.hpp	8
/src/solidity/libsolutil/CommonData.h	4
/src/solidity/liblangutil/Exceptions.h	1
/usr/include/boost/multiprecision/cpp_int/comparison.hpp	2
/usr/include/boost/multiprecision/detail/functions/pow.hpp	2
/usr/include/boost/type_traits/integral_constant.hpp	1
/src/solidity/libsolutil/Keccak256.h	1
/src/solidity/libsolutil/vector_ref.h	3
/src/solidity/libsolutil/Keccak256.cpp	5

Fuzzer: solc_ossfuzz

Call tree

The distribution of callsites in terms of coloring is

Color Callsite count Percentage

red 3356 26.5%

gold 884 6.99%

yellow 392 3.10%

greenyellow 184 1.45%

lawngreen 7814 61.8%

All colors 12630 100

Full call tree

The following link provides a visualisation of the full call tree overlaid with coverage information: full call tree

For further technical details on how the call tree is generated, please see the Glossary .

Fuzz blockers

The followings nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
434	12145	(anonymous namespace)::indent(std::__1::basic_string , std::__1::allocator > const&)	call site	_ZN5boost14multiprecisionltINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEELNS0_26expression_template_optionE0EiEENS_11enable_if_cIXaasr6detail22is_valid_mixed_compareINS0_6numberIT_XT0_EEET1_EE5valuenesr15number_categoryISA_EE5valueLNS0_20number_category_typeE4EEbE4typeERKSB_RKSC_
186	7835	solidity::evmasm::Assembly::Assembly(bool, std::__1::basic_string , std::__1::allocator >)	call site	_ZN6ranges11view_facadeINS_18iter_zip_with_viewINS_6detail16indirect_zip_fn_EJNS_8ref_viewINSt3__16vectorINS5_7variantIJN8solidity3yul27FunctionCallReturnLabelSlotENS9_23FunctionReturnLabelSlotENS9_12VariableSlotENS9_11LiteralSlotENS9_13TemporarySlotENS9_8JunkSlotEEEENS5_9allocatorISG_EEEEEENS4_IKSJ_EEEEELNS_11cardinalityEn1EE5beginISN_Lb1ELi0EEENS_14basic_iteratorINS5_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
121	8389	solidity::evmasm::CommonSubexpressionEliminator::CommonSubexpressionEliminator(solidity::evmasm::KnownState const&)	call site	__clang_call_terminate
108	5131	solidity::frontend::CHC::checkAndReportTarget(solidity::frontend::CHC::CHCVerificationTarget const&, std::__1::vector > const&, solidity::langutil::ErrorId, std::__1::basic_string , std::__1::allocator >, std::__1::basic_string , std::__1::allocator >)	call site	_ZN6ranges11view_facadeINS_19iter_transform_viewINS_8ref_viewINSt3__13mapIPKN8solidity8frontend18ContractDefinitionEPKNS6_9PredicateENS3_4lessIS9_EENS3_9allocatorINS3_4pairIKS9_SC_EEEEEEEENS_10indirectedINS_6detail10get_secondEEEEELNS_11cardinalityEn1EE5beginISQ_Lb1ELi0EEENS_14basic_iteratorINS3_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
106	4950	solidity::frontend::IntegerType::minValue() const	call site	_ZN5boost14multiprecision8backends16eval_right_shiftILj0ELj0ELNS0_18cpp_int_check_typeE0ENSt3__19allocatorIyEEEENS_11enable_if_cIXntsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_ELNS0_16cpp_integer_typeE1EXT1_ET2_EEEE5valueEvE4typeERSB_o
101	6483	solidity::yul::YulStack::analyzeParsed(solidity::yul::Object&)	call site
83	6215	solidity::yul::reindent(std::__1::basic_string , std::__1::allocator > const&)	call site	_ZN5boost9function2INS_14iterator_rangeINSt3__111__wrap_iterIPKcEEEES6_S6_EC2INS_9algorithm6detail13token_finderFINSB_10is_any_ofFIcEEEEEET_NS_10enable_if_IXntsr11is_integralISG_EE5valueEiE4typeE
73	4044	solidity::frontend::ControlFlowAnalyzer::checkUninitializedAccess(solidity::frontend::CFGNode const, solidity::frontend::CFGNode const, bool, std::__1::optional , std::__1::allocator > >)	call site	_ZNK6ranges11_iter_swap_2fnclIRNSt3__111__wrap_iterIPPKN8solidity8frontend18VariableOccurrenceEEESC_EENS_6detail9enable_ifIXaant29is_adl_indirectly_swappable_vIT_T0_Esr17is_swappable_withIDTdeclsr3stdE7declvalIRSF_EEEDTdeclsr3stdE7declvalIRSG_EEEEE5valueEE6invokeIvEEOSF_OSG_
62	5789	solidity::yul::AsmPrinter::formatSourceLocation(solidity::langutil::SourceLocation const&, std::__1::map , std::__1::allocator >, unsigned int, std::__1::less , std::__1::allocator > >, std::__1::allocator , std::__1::allocator > const, unsigned int> > > const&, solidity::langutil::DebugInfoSelection const&, solidity::langutil::CharStreamProvider const*)	call site
60	12005	solidity::frontend::CompilerStack::compileContract(solidity::frontend::ContractDefinition const&, std::__1::map , std::__1::less , std::__1::allocator > > >&)	call site
58	8329	solidity::evmasm::Assembly::optimiseInternal(solidity::evmasm::Assembly::OptimiserSettings const&, std::__1::set , std::__1::allocator >)	call site	_ZN5boost6bimaps17container_adaptor11set_adaptorINS_11multi_index6detail13ordered_indexINS3_6memberINS0_8relation6detail16relation_storageINS0_4tags6taggedIKjNS7_9member_at4leftEEENSB_IKNSt3__13setINS_14multiprecision6numberINSI_8backends15cpp_int_backendILj256ELj256ELNSI_16cpp_integer_typeE0ELNSI_18cpp_int_check_typeE0EvEELNSI_26expression_template_optionE0EEENSG_4lessISQ_EENSG_9allocatorISQ_EEEENSD_5rightEEELb1EEEjXadL_ZNSZ_4leftEEEEENSR_IjEENS4_9nth_layerILi2ENS7_15mutant_relationISF_SY_N4mpl_2naELb1EEENS0_6detail10bimap_coreIjSV_S15_S15_S15_E12core_indicesENST_IS16_EEEENS_3mpl6v_itemISE_NS1D_7vector0IS15_EELi0EEENS4_18ordered_unique_tagENS4_19null_augment_policyEEENS17_17set_view_iteratorINS4_19bidir_node_iteratorINS4_18ordered_index_nodeIS1J_NS4_15index_node_baseIS16_S1B_EEEEEEEENS17_23const_set_view_iteratorIS1R_EENS1L_INS_9iterators16reverse_iteratorIS1R_EEEENS1T_IS1X_EENS1_7support23iterator_facade_to_baseIS1S_S1U_EES15_S15_NS8_28get_mutable_relation_functorIS16_EENS7_7support22get_above_view_functorIS16_EENS17_20set_view_key_to_baseIjS16_S10_EENS1D_6vectorIS15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_EEEC2ERS1K_
54	9527	solidity::evmasm::ComputeMethod::checkRepresentation(boost::multiprecision::number , (boost::multiprecision::expression_template_option)0> const&, std::__1::vector > const&) const	call site	_ZN5boost14multiprecision8backends13eval_multiplyILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvLj256ELj256ELS3_0ELS4_0EvLj256ELj256ELS3_0ELS4_0EvEENS_11enable_if_cIXaaaantsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valuentsr18is_trivial_cpp_intINS6_IXT4_EXT5_EXT6_EXT7_ET8_EEEE5valuentsr18is_trivial_cpp_intINS6_IXT9_EXT10_EXT11_EXT12_ET13_EEEE5valueEvE4typeERS8_RKSA_RKSC_

Branch Blockers [Click to view]

[EXPERIMENTAL] The followings are the branches where fuzzer fails to bypass.

Blocked Complexity	Reachable Complexity	Function Name	Blocked Branch
36541	76838	solidity::frontend::CompilerStack::compile(solidity::frontend::CompilerStack::State)	/src/solidity/libsolidity/interface/CompilerStack.cpp:667
9361	29279	solidity::frontend::ArrayUtils::copyArrayToMemory(solidity::frontend::ArrayTypeconst&,bool)const	/src/solidity/libsolidity/codegen/ArrayUtils.cpp:366
6532	212368	solidity::frontend::ExpressionCompiler::visit(solidity::frontend::MemberAccessconst&)	/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp:1615
3556	6740	solidity::frontend::CHC::checkVerificationTargets()	/src/solidity/libsolidity/formal/CHC.cpp:1665
3166	3373	solidity::frontend::CHC::checkAndReportTarget(solidity::frontend::CHC::CHCVerificationTargetconst&,std::__1::vector >const&,solidity::langutil::ErrorId,std::__1::basic_string ,std::__1::allocator >,std::__1::basic_string ,std::__1::allocator >)	/src/solidity/libsolidity/formal/CHC.cpp:1822
2252	14065	solidity::frontend::CompilerContext::appendInlineAssembly(std::__1::basic_string ,std::__1::allocator >const&,std::__1::vector ,std::__1::allocator >,std::__1::allocator ,std::__1::allocator >>>const&,std::__1::set ,std::__1::allocator >,std::__1::less ,std::__1::allocator >>,std::__1::allocator ,std::__1::allocator >>>const&,bool,solidity::frontend::OptimiserSettingsconst&,std::__1::basic_string ,std::__1::allocator >)	/src/solidity/libsolidity/codegen/CompilerContext.cpp:477
1982	129530	solidity::frontend::CompilerUtils::encodeToMemory(std::__1::vector >const&,std::__1::vector >const&,bool,bool,bool)	/src/solidity/libsolidity/codegen/CompilerUtils.cpp:511
1512	2887	boolsolidity::yul::Shuffler<(anonymousnamespace)::createIdealLayout ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2>(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2)::ShuffleOperations>::shuffleStep ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2>(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2)::PreviousSlot,std::__1::variant >,std::__1::allocator ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2>(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2)::PreviousSlot,std::__1::variant >>>&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2&>(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2>(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2)::PreviousSlot,std::__1::variant >,std::__1::allocator ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2>(std::__1::vector ,std::__1::allocator >>const&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2)::PreviousSlot,std::__1::variant >>>&,std::__1::vector ,std::__1::allocator >>const&,solidity::yul::StackLayoutGenerator::propagateStackThroughOperation(std::__1::vector ,std::__1::allocator >>,solidity::yul::CFG::Operationconst&,bool)::$_2&)	/src/solidity/libyul/backends/evm/StackHelpers.h:303
1357	24966	solidity::frontend::ContractCompiler::handleCatch(std::__1::vector ,std::__1::allocator >>const&)	/src/solidity/libsolidity/codegen/ContractCompiler.cpp:1069
1322	1322	solidity::frontend::CHC::checkAndReportTarget(solidity::frontend::CHC::CHCVerificationTargetconst&,std::__1::vector >const&,solidity::langutil::ErrorId,std::__1::basic_string ,std::__1::allocator >,std::__1::basic_string ,std::__1::allocator >)	/src/solidity/libsolidity/formal/CHC.cpp:1810
1248	1767	solidity::frontend::Parser::parseContractDefinition()	/src/solidity/libsolidity/parsing/Parser.cpp:414
1244	1763	solidity::frontend::Parser::parseBlock(bool,std::__1::shared_ptr ,std::__1::allocator >>const&)	/src/solidity/libsolidity/parsing/Parser.cpp:1249

Runtime coverage analysis

6797

1590

3452

For further technical details on the call tree overview, please see the Glossary .

53.94%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/solidity/test/tools/ossfuzz/solc_ossfuzz.cpp	1
/src/solidity/test/TestCaseReader.cpp	2
/usr/include/boost/filesystem/path.hpp	20
/src/solidity/test/TestCaseReader.h	4
/usr/include/boost/algorithm/string/predicate.hpp	13
/usr/include/boost/range/as_literal.hpp	7
/usr/include/boost/range/end.hpp	9
/usr/include/boost/range/iterator_range_core.hpp	24
/usr/include/boost/range/begin.hpp	10
/usr/include/boost/algorithm/string/compare.hpp	1
/usr/local/include/c++/v1/initializer_list	4
/usr/include/boost/algorithm/string/trim.hpp	6
/usr/include/boost/algorithm/string/classification.hpp	2
/usr/include/boost/algorithm/string/detail/classification.hpp	8
/usr/include/boost/algorithm/string/detail/trim.hpp	5
/usr/include/boost/assert/source_location.hpp	3
/usr/include/boost/throw_exception.hpp	31
/usr/include/boost/exception/exception.hpp	16
/usr/include/boost/exception/info.hpp	25
/src/solidity/test/libsolidity/util/SoltestErrors.h	3
/usr/local/include/c++/v1/exception	2
/src/solidity/libsolutil/Exceptions.h	8
/src/solidity/libsolutil/Assertions.h	1
/usr/include/boost/exception/detail/error_info_impl.hpp	2
/usr/include/boost/filesystem/operations.hpp	2
/usr/include/boost/filesystem/file_status.hpp	3
/src/solidity/libsolutil/CommonIO.cpp	4
/src/solidity/test/tools/fuzzer_common.cpp	2
/src/solidity/libsolidity/interface/CompilerStack.cpp	37
/src/solidity/liblangutil/CharStreamProvider.h	3
/src/solidity/libsolidity/interface/OptimiserSettings.h	7
/src/solidity/liblangutil/EVMVersion.h	17
/src/solidity/libsolidity/formal/ModelCheckerSettings.h	19
/src/solidity/libsolidity/formal/ModelCheckerSettings.cpp	2
/src/solidity/build/deps/include/range/v3/view/view.hpp	48
/src/solidity/build/deps/include/range/v3/view/map.hpp	1
/src/solidity/build/deps/include/range/v3/view/all.hpp	9
/src/solidity/build/deps/include/range/v3/range_fwd.hpp	5
/src/solidity/build/deps/include/range/v3/view/ref.hpp	7
/src/solidity/build/deps/include/range/v3/view/transform.hpp	27
/src/solidity/build/deps/include/range/v3/functional/indirect.hpp	4
/src/solidity/build/deps/include/range/v3/view/adaptor.hpp	10
/src/solidity/build/deps/include/range/v3/view/facade.hpp	23
/src/solidity/build/deps/include/range/v3/detail/range_access.hpp	6
/src/solidity/build/deps/include/range/v3/view/interface.hpp	7
/src/solidity/build/deps/include/range/v3/range/access.hpp	12
/src/solidity/build/deps/include/range/v3/utility/compressed_pair.hpp	3
/src/solidity/build/deps/include/range/v3/utility/box.hpp	7
/src/solidity/build/deps/include/range/v3/iterator/basic_iterator.hpp	52
/src/solidity/build/deps/include/range/v3/view/split.hpp	3
/src/solidity/build/deps/include/range/v3/functional/bind_back.hpp	9
/src/solidity/build/deps/include/range/v3/functional/invoke.hpp	14
/src/solidity/build/deps/include/range/v3/view/single.hpp	2
/src/solidity/build/deps/include/range/v3/range/conversion.hpp	12
/usr/local/include/c++/v1/optional	40
/src/solidity/libsmtutil/SolverInterface.h	13
/src/solidity/libsolidity/interface/ImportRemapper.h	2
/src/solidity/liblangutil/ErrorReporter.h	7
/src/solidity/liblangutil/DebugInfoSelection.h	4
/src/solidity/liblangutil/DebugInfoSelection.cpp	2
/src/solidity/liblangutil/Exceptions.h	16
/src/solidity/libsolidity/interface/CompilerStack.h	1
/src/solidity/liblangutil/ErrorReporter.cpp	22
/src/solidity/liblangutil/SemVerHandler.cpp	11
/src/solidity/liblangutil/SemVerHandler.h	10
/src/solidity/liblangutil/SourceLocation.h	12
/src/solidity/libsolidity/parsing/Parser.h	11
/src/solidity/liblangutil/ParserBase.h	4
/src/solidity/libsolidity/parsing/Parser.cpp	132
/src/solidity/liblangutil/Scanner.h	25
/src/solidity/liblangutil/ParserBase.cpp	14
/src/solidity/liblangutil/Token.h	17
/src/solidity/liblangutil/Token.cpp	9
/src/solidity/libsolidity/ast/AST.h	67
/src/solidity/libsolidity/ast/ASTEnums.h	1
/src/solidity/liblangutil/Scanner.cpp	30
/src/solidity/liblangutil/CharStream.cpp	7
/src/solidity/liblangutil/CharStream.h	11
/src/solidity/liblangutil/Common.h	6
/src/solidity/libsolutil/StringUtils.h	12
/src/solidity/libyul/backends/evm/EVMDialect.cpp	9
/src/solidity/libyul/YulString.h	12
/src/solidity/libyul/AsmParser.h	14
/src/solidity/libyul/AsmParser.cpp	21
/src/solidity/libsolutil/Common.h	6
/usr/include/boost/algorithm/string/detail/predicate.hpp	1
/src/solidity/libyul/AST.h	41
/usr/include/boost/multiprecision/cpp_int.hpp	37
/usr/include/boost/multiprecision/cpp_int/cpp_int_config.hpp	2
/usr/include/boost/multiprecision/cpp_int/multiply.hpp	7
/usr/include/boost/multiprecision/cpp_int/add.hpp	9
/usr/include/boost/multiprecision/detail/constexpr.hpp	4
/src/solidity/libyul/Exceptions.h	5
/src/solidity/libsolutil/SetOnce.h	13
/usr/include/boost/iterator/iterator_facade.hpp	5
/usr/include/boost/type_traits/integral_constant.hpp	2
/src/solidity/libsolidity/interface/ImportRemapper.cpp	2
/src/solidity/libsolidity/interface/ReadFile.h	2
/src/solidity/libsolidity/analysis/SyntaxChecker.h	1
/src/solidity/libsolidity/ast/ASTVisitor.h	6
/src/solidity/libsolidity/analysis/Scoper.cpp	1
/src/solidity/libsolidity/analysis/Scoper.h	2
/src/solidity/libsolidity/analysis/SyntaxChecker.cpp	1
/src/solidity/libsolidity/analysis/NameAndTypeResolver.cpp	17
/src/solidity/libsolidity/analysis/GlobalContext.cpp	5
/src/solidity/libsolidity/analysis/DeclarationContainer.cpp	5
/src/solidity/libsolutil/CommonData.h	86
/src/solidity/libsolidity/ast/AST.cpp	20
/src/solidity/libsolidity/analysis/DeclarationContainer.h	2
/src/solidity/build/deps/include/range/v3/view/filter.hpp	1
/src/solidity/libsolidity/analysis/DocStringTagParser.h	1
/src/solidity/libsolidity/analysis/DocStringTagParser.cpp	2
/src/solidity/libsolidity/ast/TypeProvider.h	10
/src/solidity/libsolidity/ast/TypeProvider.cpp	19
/src/solidity/libsolidity/analysis/GlobalContext.h	1
/src/solidity/libsolidity/analysis/ReferencesResolver.h	1
/src/solidity/libyul/optimiser/ASTWalker.h	8
/src/solidity/libsolidity/analysis/ReferencesResolver.cpp	1
/src/solidity/libsolidity/analysis/DeclarationTypeChecker.h	2
/src/solidity/libsolidity/analysis/DeclarationTypeChecker.cpp	1
/src/solidity/libsolidity/analysis/ContractLevelChecker.h	2
/src/solidity/libsolidity/analysis/OverrideChecker.h	8
/src/solidity/libsolidity/analysis/TypeChecker.h	1
/src/solidity/libsolidity/analysis/ContractLevelChecker.cpp	20
/src/solidity/libsolidity/ast/Types.cpp	32
/src/solidity/libsolidity/ast/Types.h	44
/src/solidity/libsolidity/analysis/OverrideChecker.cpp	39
/src/solidity/build/deps/include/range/v3/view/reverse.hpp	9
/src/solidity/build/deps/include/range/v3/iterator/reverse_iterator.hpp	3
/src/solidity/libsolutil/Result.h	10
/usr/include/boost/algorithm/string/join.hpp	4
/src/solidity/build/deps/include/range/v3/functional/reference_wrapper.hpp	8
/src/solidity/build/deps/include/range/v3/utility/semiregular_box.hpp	3
/usr/include/boost/algorithm/string/detail/sequence.hpp	5
/src/solidity/libsolutil/LazyInit.h	3
/src/solidity/libsolutil/Keccak256.h	2
/src/solidity/libsolutil/vector_ref.h	13
/src/solidity/libsolutil/Keccak256.cpp	5
/src/solidity/libsolutil/FixedHash.h	15
/src/solidity/libsolidity/analysis/TypeChecker.cpp	2
/usr/include/boost/core/empty_value.hpp	3
/usr/include/boost/multiprecision/detail/number_base.hpp	21
/usr/include/boost/multiprecision/number.hpp	33
/usr/include/boost/multiprecision/detail/precision.hpp	8
/usr/include/boost/multiprecision/detail/et_ops.hpp	16
/usr/local/include/c++/v1/stdexcept	2
/usr/include/boost/multiprecision/detail/default_ops.hpp	10
/usr/include/boost/multiprecision/cpp_int/bitwise.hpp	14
/usr/include/boost/multiprecision/detail/number_compare.hpp	40
/src/solidity/libsolidity/analysis/DocStringAnalyser.h	1
/src/solidity/libsolidity/analysis/DocStringAnalyser.cpp	1
/src/solidity/libsolidity/analysis/PostTypeChecker.cpp	3
/src/solidity/libsolidity/analysis/PostTypeChecker.h	1
/src/solidity/libsolidity/analysis/FunctionCallGraph.cpp	6
/src/solidity/libsolidity/analysis/FunctionCallGraph.h	2
/src/solidity/libsolidity/ast/CallGraph.h	3
/src/solidity/libsolutil/Algorithms.h	23
/src/solidity/libsolidity/analysis/PostTypeContractLevelChecker.h	1
/src/solidity/libsolidity/analysis/PostTypeContractLevelChecker.cpp	2
/src/solidity/libsolutil/FunctionSelector.h	2
/usr/include/boost/multiprecision/cpp_int/misc.hpp	2
/src/solidity/libsolidity/analysis/ImmutableValidator.h	1
/src/solidity/libsolidity/analysis/ImmutableValidator.cpp	3
/src/solidity/libsolidity/analysis/ControlFlowGraph.h	8
/src/solidity/libsolidity/analysis/ControlFlowGraph.cpp	2
/src/solidity/libsolidity/analysis/ControlFlowRevertPruner.h	2
/src/solidity/libsolidity/analysis/ControlFlowRevertPruner.cpp	5
/src/solidity/libsolidity/analysis/ControlFlowAnalyzer.h	2
/src/solidity/libsolidity/analysis/ControlFlowAnalyzer.cpp	7
/src/solidity/build/deps/include/range/v3/algorithm/sort.hpp	11
/src/solidity/build/deps/include/range/v3/iterator/operations.hpp	8
/src/solidity/build/deps/include/range/v3/algorithm/partial_sort.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/heap_algorithm.hpp	4
/src/solidity/build/deps/include/range/v3/iterator/access.hpp	4
/src/solidity/build/deps/include/range/v3/utility/move.hpp	1
/src/solidity/build/deps/include/concepts/swap.hpp	2
/src/solidity/build/deps/include/range/v3/functional/identity.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/move_backward.hpp	1
/src/solidity/libsolidity/analysis/StaticAnalyzer.cpp	3
/src/solidity/libsolidity/analysis/ViewPureChecker.h	1
/src/solidity/libsolidity/analysis/ViewPureChecker.cpp	1
/src/solidity/libsolidity/formal/ModelChecker.cpp	5
/src/solidity/liblangutil/UniqueErrorReporter.h	8
/src/solidity/libsolidity/formal/EncodingContext.cpp	9
/src/solidity/libsolidity/formal/SymbolicState.h	12
/src/solidity/libsolidity/formal/SymbolicVariables.cpp	11
/src/solidity/libsolidity/formal/SymbolicTypes.cpp	24
/src/solidity/libsmtutil/Sorts.cpp	1
/src/solidity/libsolidity/formal/SymbolicVariables.h	3
/src/solidity/libsolidity/formal/SymbolicState.cpp	7
/src/solidity/libsolidity/formal/BMC.cpp	3
/src/solidity/libsolidity/formal/SMTEncoder.cpp	24
/src/solidity/libsolidity/formal/VariableUsage.h	3
/src/solidity/libsolidity/formal/SMTEncoder.h	2
/src/solidity/libsolidity/formal/CHC.cpp	19
/src/solidity/libsolidity/formal/BMC.h	2
/src/solidity/libsolidity/formal/EncodingContext.h	5
/src/solidity/build/deps/include/range/v3/algorithm/any_of.hpp	5
/src/solidity/libsmtutil/CHCSmtLib2Interface.h	2
/src/solidity/libsolidity/formal/Predicate.cpp	9
/src/solidity/libsolidity/formal/ArraySlicePredicate.h	1
/src/solidity/libsmtutil/CHCSmtLib2Interface.cpp	1
/src/solidity/libsolidity/formal/SSAVariable.cpp	1
/usr/include/boost/rational.hpp	2
/src/solidity/libsolidity/formal/PredicateSort.cpp	6
/src/solidity/libsolidity/formal/SSAVariable.h	1
/src/solidity/libsmtutil/Exceptions.h	1
/src/solidity/libsolidity/formal/PredicateInstance.cpp	2
/usr/include/boost/multiprecision/cpp_int/comparison.hpp	2
/usr/include/boost/lexical_cast.hpp	1
/usr/include/boost/lexical_cast/try_lexical_convert.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical_streams.hpp	6
/usr/include/boost/lexical_cast/detail/lcast_unsigned_converters.hpp	1
/usr/include/boost/lexical_cast/bad_lexical_cast.hpp	2
/usr/include/boost/multiprecision/cpp_int/divide.hpp	2
/src/solidity/libsolutil/Numeric.h	17
/src/solidity/libsolutil/CommonData.cpp	6
/src/solidity/libsolidity/formal/Invariants.cpp	2
/src/solidity/libsolidity/formal/ExpressionFormatter.cpp	7
/src/solidity/libsolidity/formal/CHC.h	4
/src/solidity/libsolidity/formal/Predicate.h	1
/src/solidity/libsolidity/formal/ModelChecker.h	1
/src/solidity/libsolidity/analysis/NameAndTypeResolver.h	1
/src/solidity/libsolidity/codegen/CompilerContext.h	33
/src/solidity/libsolidity/codegen/ir/IRGenerator.h	2
/src/solidity/libsolidity/codegen/ir/IRGenerationContext.h	15
/src/solidity/libsolidity/codegen/MultiUseYulFunctionCollector.h	3
/src/solidity/libsolidity/codegen/YulUtilFunctions.h	1
/src/solidity/libsolutil/IpfsHash.cpp	10
/src/solidity/libsolutil/picosha2.h	19
/src/solidity/libsolutil/SwarmHash.h	1
/src/solidity/libsolutil/SwarmHash.cpp	3
/src/solidity/libsolidity/codegen/ir/IRGenerator.cpp	18
/src/solidity/libsolutil/Whiskers.cpp	12
/src/solidity/libsolidity/codegen/MultiUseYulFunctionCollector.cpp	3
/src/solidity/libsolidity/codegen/ir/IRGenerationContext.cpp	11
/src/solidity/libsolidity/codegen/ir/Common.cpp	9
/src/solidity/libsolutil/CommonIO.h	2
/src/solidity/libsolutil/Whiskers.h	4
/src/solidity/libyul/AsmPrinter.cpp	3
/usr/include/boost/algorithm/string/replace.hpp	5
/usr/include/boost/algorithm/string/finder.hpp	3
/usr/include/boost/algorithm/string/detail/finder.hpp	6
/usr/include/boost/algorithm/string/formatter.hpp	2
/usr/include/boost/algorithm/string/detail/formatter.hpp	3
/usr/include/boost/algorithm/string/find_format.hpp	2
/usr/include/boost/range/empty.hpp	1
/usr/include/boost/algorithm/string/detail/find_format_all.hpp	4
/usr/include/boost/algorithm/string/detail/find_format_store.hpp	8
/usr/include/boost/range/detail/safe_bool.hpp	1
/usr/include/boost/algorithm/string/detail/replace_storage.hpp	4
/src/solidity/libsolidity/codegen/YulUtilFunctions.cpp	11
/src/solidity/libsolidity/codegen/CompilerUtils.h	3
/src/solidity/libyul/Object.h	6
/src/solidity/libyul/Utilities.cpp	6
/usr/include/boost/range/distance.hpp	1
/usr/include/boost/iterator/distance.hpp	2
/usr/include/boost/algorithm/string/split.hpp	1
/usr/include/boost/algorithm/string/iter_find.hpp	1
/usr/include/boost/algorithm/string/find_iterator.hpp	4
/usr/include/boost/algorithm/string/detail/find_iterator.hpp	5
/usr/include/boost/function/function_template.hpp	12
/usr/include/boost/function/function_base.hpp	5
/usr/include/boost/core/addressof.hpp	2
/usr/include/boost/iterator/transform_iterator.hpp	3
/usr/include/boost/iterator/iterator_adaptor.hpp	3
/src/solidity/libyul/YulStack.h	6
/src/solidity/libyul/YulStack.cpp	14
/src/solidity/libyul/ObjectParser.h	1
/src/solidity/libyul/ObjectParser.cpp	8
/src/solidity/libyul/backends/wasm/WasmDialect.cpp	1
/src/solidity/libyul/Object.cpp	3
/src/solidity/libyul/AsmAnalysis.h	2
/src/solidity/libyul/SideEffects.h	1
/src/solidity/libyul/backends/evm/EVMDialect.h	7
/src/solidity/libyul/AsmAnalysis.cpp	4
/src/solidity/libyul/ScopeFiller.cpp	2
/src/solidity/liblangutil/SourceReferenceFormatter.cpp	11
/src/solidity/liblangutil/SourceReferenceFormatter.h	3
/src/solidity/liblangutil/SourceReferenceExtractor.cpp	2
/usr/include/boost/exception/get_error_info.hpp	6
/usr/include/boost/exception/detail/type_info.hpp	1
/usr/include/boost/smart_ptr/detail/operator_bool.hpp	1
/usr/include/boost/smart_ptr/shared_ptr.hpp	1
/src/solidity/liblangutil/SourceReferenceExtractor.h	5
/src/solidity/liblangutil/Exceptions.cpp	2
/usr/include/boost/algorithm/string/case_conv.hpp	1
/usr/include/boost/algorithm/string/detail/case_conv.hpp	2
/src/solidity/libsolutil/AnsiColorized.h	11
/src/solidity/libyul/optimiser/Suite.cpp	10
/usr/include/boost/operators.hpp	2
/src/solidity/libyul/optimiser/Disambiguator.h	1
/src/solidity/libyul/optimiser/ASTCopier.h	5
/src/solidity/libyul/optimiser/NameDispenser.cpp	5
/src/solidity/libyul/optimiser/ASTCopier.cpp	3
/src/solidity/libyul/optimiser/NameCollector.h	4
/src/solidity/libyul/optimiser/Suite.h	1
/src/solidity/libyul/optimiser/Metrics.cpp	1
/src/solidity/libyul/optimiser/Metrics.h	1
/src/solidity/libyul/optimiser/ASTWalker.cpp	4
/src/solidity/libyul/optimiser/NameSimplifier.h	2
/src/solidity/libyul/optimiser/NameSimplifier.cpp	2
/src/solidity/libyul/optimiser/OptimizerUtilities.cpp	2
/src/solidity/libyul/optimiser/NameDispenser.h	2
/src/solidity/libyul/optimiser/StackCompressor.cpp	7
/src/solidity/libyul/optimiser/Semantics.cpp	2
/src/solidity/libyul/optimiser/Semantics.h	3
/src/solidity/libyul/AsmAnalysisInfo.h	3
/src/solidity/libyul/backends/evm/ControlFlowGraphBuilder.cpp	11
/src/solidity/libyul/backends/evm/ControlFlowGraph.h	4
/src/solidity/libsolutil/cxx20.h	1
/src/solidity/libyul/backends/evm/StackLayoutGenerator.cpp	29
/src/solidity/libyul/backends/evm/StackLayoutGenerator.h	2
/src/solidity/build/deps/include/range/v3/algorithm/find.hpp	2
/src/solidity/build/deps/include/range/v3/view/enumerate.hpp	1
/src/solidity/build/deps/include/range/v3/view/zip.hpp	6
/src/solidity/build/deps/include/range/v3/view/zip_with.hpp	1
/src/solidity/build/deps/include/range/v3/view/iota.hpp	5
/src/solidity/libyul/backends/evm/StackHelpers.h	6
/src/solidity/build/deps/include/range/v3/algorithm/all_of.hpp	2
/src/solidity/build/deps/include/range/v3/view/drop.hpp	1
/src/solidity/libyul/optimiser/DataFlowAnalyzer.cpp	4
/src/solidity/libyul/optimiser/DataFlowAnalyzer.h	3
/src/solidity/libyul/optimiser/KnowledgeBase.h	2
/src/solidity/libyul/optimiser/Rematerialiser.cpp	2
/src/solidity/libyul/optimiser/NameCollector.cpp	3
/src/solidity/libyul/optimiser/Rematerialiser.h	1
/src/solidity/libyul/optimiser/UnusedPruner.cpp	5
/src/solidity/build/deps/include/range/v3/action/remove_if.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/remove_if.hpp	2
/src/solidity/build/deps/include/range/v3/algorithm/find_if.hpp	1
/src/solidity/build/deps/include/range/v3/action/erase.hpp	2
/src/solidity/libyul/optimiser/UnusedPruner.h	2
/src/solidity/libyul/CompilabilityChecker.cpp	1
/src/solidity/libyul/backends/evm/NoOutputAssembly.cpp	2
/src/solidity/libyul/Dialect.h	3
/src/solidity/libevmasm/Instruction.h	8
/src/solidity/liblangutil/EVMVersion.cpp	1
/src/solidity/libevmasm/Instruction.cpp	2
/src/solidity/libyul/ControlFlowSideEffects.h	1
/src/solidity/libevmasm/SemanticInformation.cpp	9
/src/solidity/libyul/backends/evm/NoOutputAssembly.h	1
/src/solidity/libyul/backends/evm/AbstractAssembly.h	4
/src/solidity/libyul/backends/evm/EVMCodeTransform.h	5
/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp	13
/src/solidity/libyul/backends/evm/VariableReferenceCounter.h	3
/src/solidity/libyul/backends/evm/VariableReferenceCounter.cpp	1
/src/solidity/build/deps/include/range/v3/algorithm/none_of.hpp	3
/src/solidity/libevmasm/Exceptions.h	5
/src/solidity/build/deps/include/range/v3/algorithm/max.hpp	1
/src/solidity/libyul/CompilabilityChecker.h	1
/src/solidity/libyul/backends/evm/ConstantOptimiser.h	1
/src/solidity/libyul/optimiser/StackLimitEvader.cpp	6
/src/solidity/build/deps/include/range/v3/view/take.hpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.cpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.h	1
/src/solidity/libyul/optimiser/CallGraphGenerator.cpp	5
/src/solidity/libyul/optimiser/CallGraphGenerator.h	4
/src/solidity/build/deps/include/range/v3/view/concat.hpp	1
/src/solidity/libyul/optimiser/StackToMemoryMover.cpp	9
/src/solidity/libyul/optimiser/StackToMemoryMover.h	3
/src/solidity/libyul/optimiser/VarNameCleaner.h	2
/src/solidity/libyul/optimiser/VarNameCleaner.cpp	1
/src/solidity/libsolutil/Exceptions.cpp	2
/src/solidity/libevmasm/Assembly.h	22
/src/solidity/libevmasm/LinkerObject.h	4
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.cpp	1
/src/solidity/libyul/backends/evm/EVMObjectCompiler.cpp	2
/src/solidity/libyul/backends/evm/EVMObjectCompiler.h	1
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.cpp	8
/src/solidity/build/deps/include/range/v3/view/take_last.hpp	1
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.h	1
/src/solidity/libevmasm/Assembly.cpp	17
/src/solidity/libevmasm/JumpdestRemover.cpp	2
/src/solidity/libevmasm/AssemblyItem.h	21
/src/solidity/libevmasm/AssemblyItem.cpp	8
/src/solidity/libevmasm/BlockDeduplicator.cpp	2
/src/solidity/libevmasm/Inliner.h	1
/src/solidity/libevmasm/Inliner.cpp	10
/src/solidity/build/deps/include/range/v3/view/slice.hpp	1
/src/solidity/build/deps/include/range/v3/view/span.hpp	5
/src/solidity/build/deps/include/range/v3/range/primitives.hpp	1
/src/solidity/build/deps/include/range/v3/view/subrange.hpp	2
/src/solidity/build/deps/include/range/v3/view/drop_last.hpp	3
/src/solidity/build/deps/include/range/v3/utility/optional.hpp	5
/src/solidity/build/deps/include/range/v3/numeric/accumulate.hpp	3
/src/solidity/libevmasm/GasMeter.h	6
/src/solidity/libevmasm/GasMeter.cpp	3
/src/solidity/libevmasm/JumpdestRemover.h	1
/src/solidity/libevmasm/PeepholeOptimiser.h	2
/src/solidity/libevmasm/PeepholeOptimiser.cpp	7
/src/solidity/libevmasm/BlockDeduplicator.h	3
/src/solidity/libevmasm/KnownState.h	12
/usr/include/boost/bimap/bimap.hpp	2
/usr/include/boost/multi_index_container.hpp	11
/usr/include/boost/multi_index/detail/converter.hpp	1
/usr/include/boost/bimap/views/set_view.hpp	1
/usr/include/boost/bimap/container_adaptor/set_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/ordered_associative_container_adaptor.hpp	2
/usr/include/boost/bimap/container_adaptor/associative_container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/detail/functor_bag.hpp	1
/usr/include/boost/utility/base_from_member.hpp	2
/usr/include/boost/multi_index/detail/header_holder.hpp	3
/usr/include/boost/tuple/detail/tuple_basic.hpp	5
/usr/include/boost/multi_index/detail/ord_index_impl.hpp	17
/usr/include/boost/multi_index/detail/index_base.hpp	4
/usr/include/boost/multi_index/detail/ord_index_node.hpp	14
/usr/include/boost/bimap/views/map_view.hpp	2
/usr/include/boost/bimap/container_adaptor/map_adaptor.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.h	4
/usr/include/boost/multi_index/detail/copy_map.hpp	10
/usr/include/boost/multi_index/detail/auto_space.hpp	3
/usr/include/boost/multi_index/detail/bidir_node_iterator.hpp	3
/usr/include/boost/multi_index/ordered_index.hpp	1
/usr/include/boost/multi_index/detail/raw_ptr.hpp	5
/usr/include/boost/multi_index/detail/index_node_base.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.cpp	4
/src/solidity/libevmasm/KnownState.cpp	9
/src/solidity/libevmasm/ExpressionClasses.cpp	10
/src/solidity/libevmasm/ExpressionClasses.h	3
/src/solidity/libevmasm/SimplificationRules.cpp	12
/src/solidity/libevmasm/SimplificationRules.h	10
/src/solidity/libevmasm/RuleList.h	58
/src/solidity/libevmasm/SimplificationRule.h	76
/src/solidity/libevmasm/ConstantOptimiser.cpp	12
/src/solidity/libevmasm/ConstantOptimiser.h	10
/usr/include/boost/multiprecision/detail/functions/pow.hpp	2
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.h	1
/src/solidity/libevmasm/LinkerObject.cpp	3
/src/solidity/libsolidity/codegen/Compiler.cpp	2
/src/solidity/libsolidity/codegen/ContractCompiler.h	2
/src/solidity/libsolidity/codegen/ContractCompiler.cpp	19
/src/solidity/libsolidity/codegen/CompilerContext.cpp	29
/src/solidity/libsolidity/codegen/CompilerUtils.cpp	34
/src/solidity/libyul/backends/evm/EVMMetrics.h	2
/src/solidity/libyul/AsmPrinter.h	3
/src/solidity/libyul/backends/evm/AsmCodeGen.cpp	1
/src/solidity/libsolidity/codegen/ArrayUtils.h	1
/src/solidity/libsolidity/codegen/ArrayUtils.cpp	5
/src/solidity/libsolidity/codegen/LValue.cpp	4
/src/solidity/libsolidity/codegen/LValue.h	2
/src/solidity/libsolidity/codegen/ABIFunctions.cpp	5
/src/solidity/libsolidity/codegen/ABIFunctions.h	3
/src/solidity/libsolidity/codegen/ExpressionCompiler.h	2
/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp	3
/src/solidity/libsolidity/codegen/Compiler.h	1
/src/solidity/libyul/backends/wasm/EVMToEwasmTranslator.h	1
/src/solidity/libyul/backends/wasm/EVMToEwasmTranslator.cpp	2
/src/solidity/libyul/optimiser/FunctionHoister.h	2
/src/solidity/libyul/optimiser/FunctionHoister.cpp	1
/src/solidity/libyul/optimiser/FunctionGrouper.h	1
/src/solidity/libyul/optimiser/FunctionGrouper.cpp	2
/src/solidity/libyul/optimiser/MainFunction.h	1
/src/solidity/libyul/optimiser/MainFunction.cpp	1
/src/solidity/libyul/optimiser/ForLoopConditionIntoBody.cpp	1
/src/solidity/libyul/optimiser/ForLoopConditionIntoBody.h	1
/src/solidity/libyul/optimiser/ExpressionSplitter.cpp	2
/src/solidity/libyul/optimiser/TypeInfo.cpp	3
/src/solidity/libyul/optimiser/ExpressionSplitter.h	1
/src/solidity/libyul/optimiser/TypeInfo.h	1
/src/solidity/libyul/backends/wasm/WordSizeTransform.cpp	2
/src/solidity/libyul/optimiser/NameDisplacer.h	1
/src/solidity/libyul/optimiser/NameDisplacer.cpp	2
/src/solidity/libyul/backends/wasm/WordSizeTransform.h	1
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.cpp	2
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.h	1
/src/solidity/libyul/backends/wasm/WasmCodeTransform.cpp	7
/src/solidity/libyul/backends/wasm/WasmAST.h	12
/src/solidity/libyul/backends/wasm/WasmCodeTransform.h	2
/src/solidity/libyul/backends/wasm/TextTransform.cpp	5
/src/solidity/libyul/backends/wasm/BinaryTransform.cpp	30
/src/solidity/libsolutil/LEB128.h	2
/src/solidity/libyul/backends/wasm/BinaryTransform.h	2

Fuzzer: abiv2_proto_ossfuzz

Call tree

The distribution of callsites in terms of coloring is

Color Callsite count Percentage

red 8938 67.3%

gold 25 0.18%

yellow 10 0.07%

greenyellow 0 0.0%

lawngreen 4304 32.4%

All colors 13277 100

Full call tree

The following link provides a visualisation of the full call tree overlaid with coverage information: full call tree

For further technical details on how the call tree is generated, please see the Glossary .

Fuzz blockers

The followings nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
616	6862	solidity::langutil::EVMVersion::canOverchargeGasForCall() const	call site	_ZN12_GLOBAL__N_123optimiserStepCollectionIJN8solidity3yul14BlockFlattenerENS2_24CircularReferencesPrunerENS2_29CommonSubexpressionEliminatorENS2_21ConditionalSimplifierENS2_23ConditionalUnsimplifierENS2_21ControlFlowSimplifierENS2_18DeadCodeEliminatorENS2_20EqualStoreEliminatorENS2_26EquivalentFunctionCombinerENS2_17ExpressionInlinerENS2_16ExpressionJoinerENS2_20ExpressionSimplifierENS2_18ExpressionSplitterENS2_24ForLoopConditionIntoBodyENS2_25ForLoopConditionOutOfBodyENS2_19ForLoopInitRewriterENS2_11FullInlinerENS2_15FunctionGrouperENS2_15FunctionHoisterENS2_19FunctionSpecializerENS2_21LiteralRematerialiserENS2_12LoadResolverENS2_23LoopInvariantCodeMotionENS2_22UnusedAssignEliminatorENS2_21UnusedStoreEliminatorENS2_24ReasoningBasedSimplifierENS2_14RematerialiserENS2_11SSAReverserENS2_12SSATransformENS2_20StructuralSimplifierENS2_29UnusedFunctionParameterPrunerENS2_12UnusedPrunerENS2_18VarDeclInitializerEEEENSt3__13mapINS10_12basic_stringIcNS10_11char_traitsIcEENS10_9allocatorIcEEEENS10_10unique_ptrINS2_13OptimiserStepENS10_14default_deleteIS19_EEEENS10_4lessIS17_EENS15_INS10_4pairIKS17_S1C_EEEEEEv
504	8790	solidity::evmasm::SemanticInformation::isCommutativeOperation(solidity::evmasm::AssemblyItem const&)	call site	_ZN5boost14multiprecision8backends15eval_left_shiftILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEENS_11enable_if_cIXntsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valueEvE4typeERS8_o
388	9465	boost::multiprecision::number , (boost::multiprecision::expression_template_option)0> solidity::fromBigEndian , (boost::multiprecision::expression_template_option)0>, std::__1::array >(std::__1::array const&)	call site	_ZN5boost14multiprecision3powINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEEEENS_11enable_if_cIXeqsr15number_categoryIT_EE5valueLNS0_20number_category_typeE0EENS0_6numberIS8_LNS0_26expression_template_optionE0EEEE4typeERKSC_RKj
321	12495	solidity::toHex(boost::multiprecision::number , (boost::multiprecision::expression_template_option)0>)	call site	_ZN6ranges11view_facadeINS_19iter_transform_viewINS_8ref_viewIKNSt3__13mapINS3_4pairINS3_6vectorIhNS3_9allocatorIhEEEES9_EENS6_INS3_12basic_stringIcNS3_11char_traitsIcEENS7_IcEEEENS7_ISF_EEEENS3_4lessISA_EENS7_INS5_IKSA_SH_EEEEEEEENS_10indirectedINS_6detail10get_secondEEEEELNS_11cardinalityEn1EE5beginISU_Lb1ELi0EEENS_14basic_iteratorINS3_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
258	12235	solidity::frontend::CompilerStack::compileContract(solidity::frontend::ContractDefinition const&, std::__1::map , std::__1::less , std::__1::allocator > > >&)	call site	_ZN5boost14multiprecisionltINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEELNS0_26expression_template_optionE0EiEENS_11enable_if_cIXaasr6detail22is_valid_mixed_compareINS0_6numberIT_XT0_EEET1_EE5valuenesr15number_categoryISA_EE5valueLNS0_20number_category_typeE4EEbE4typeERKSB_RKSC_
220	8532	solidity::evmasm::AssemblyItem::pushTag() const	call site	_ZN5boost6bimaps17container_adaptor11set_adaptorINS_11multi_index6detail13ordered_indexINS3_6memberINS0_8relation6detail16relation_storageINS0_4tags6taggedIKjNS7_9member_at4leftEEENSB_IKNSt3__13setINS_14multiprecision6numberINSI_8backends15cpp_int_backendILj256ELj256ELNSI_16cpp_integer_typeE0ELNSI_18cpp_int_check_typeE0EvEELNSI_26expression_template_optionE0EEENSG_4lessISQ_EENSG_9allocatorISQ_EEEENSD_5rightEEELb1EEEjXadL_ZNSZ_4leftEEEEENSR_IjEENS4_9nth_layerILi2ENS7_15mutant_relationISF_SY_N4mpl_2naELb1EEENS0_6detail10bimap_coreIjSV_S15_S15_S15_E12core_indicesENST_IS16_EEEENS_3mpl6v_itemISE_NS1D_7vector0IS15_EELi0EEENS4_18ordered_unique_tagENS4_19null_augment_policyEEENS17_17set_view_iteratorINS4_19bidir_node_iteratorINS4_18ordered_index_nodeIS1J_NS4_15index_node_baseIS16_S1B_EEEEEEEENS17_23const_set_view_iteratorIS1R_EENS1L_INS_9iterators16reverse_iteratorIS1R_EEEENS1T_IS1X_EENS1_7support23iterator_facade_to_baseIS1S_S1U_EES15_S15_NS8_28get_mutable_relation_functorIS16_EENS7_7support22get_above_view_functorIS16_EENS17_20set_view_key_to_baseIjS16_S10_EENS1D_6vectorIS15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_EEEC2ERS1K_
186	7816	solidity::util::fromHex(std::__1::basic_string , std::__1::allocator > const&, solidity::util::WhenError)	call site	_ZN5boost14multiprecision8backends15eval_left_shiftILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEENS_11enable_if_cIXntsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valueEvE4typeERS8_o
186	8060	solidity::evmasm::Assembly::Assembly(bool, std::__1::basic_string , std::__1::allocator >)	call site	_ZN6ranges11view_facadeINS_18iter_zip_with_viewINS_6detail16indirect_zip_fn_EJNS_8ref_viewINSt3__16vectorINS5_7variantIJN8solidity3yul27FunctionCallReturnLabelSlotENS9_23FunctionReturnLabelSlotENS9_12VariableSlotENS9_11LiteralSlotENS9_13TemporarySlotENS9_8JunkSlotEEEENS5_9allocatorISG_EEEEEENS4_IKSJ_EEEEELNS_11cardinalityEn1EE5beginISN_Lb1ELi0EEENS_14basic_iteratorINS5_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
169	5072	solidity::frontend::smt::SymbolicVariable::SymbolicVariable(std::__1::shared_ptr , std::__1::basic_string , std::__1::allocator >, solidity::frontend::smt::EncodingContext&)	call site	__dynamic_cast
152	9296	solidity::langutil::EVMVersion::hasSelfBalance() const	call site	_ZN5boost14multiprecisiongtINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEELNS0_26expression_template_optionE0EiEENS_11enable_if_cIXaasr6detail22is_valid_mixed_compareINS0_6numberIT_XT0_EEET1_EE5valuenesr15number_categoryISA_EE5valueLNS0_20number_category_typeE4EEbE4typeERKSB_RKSC_
147	5395	solidity::frontend::IntegerType::maxValue() const	call site	_ZN6ranges11view_facadeINS_19iter_transform_viewINS_8ref_viewINSt3__13mapIPKN8solidity8frontend18ContractDefinitionEPKNS6_9PredicateENS3_4lessIS9_EENS3_9allocatorINS3_4pairIKS9_SC_EEEEEEEENS_10indirectedINS_6detail10get_secondEEEEELNS_11cardinalityEn1EE5beginISQ_Lb1ELi0EEENS_14basic_iteratorINS3_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
135	6725	solidity::yul::AsmAnalyzer::analyze(solidity::yul::Block const&)	call site	__dynamic_cast

Branch Blockers [Click to view]

[EXPERIMENTAL] The followings are the branches where fuzzer fails to bypass.

Blocked Complexity	Reachable Complexity	Function Name	Blocked Branch
154586	735335	solidity::frontend::ExpressionCompiler::visit(solidity::frontend::FunctionCallconst&)	/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp:584
50273	76838	solidity::frontend::CompilerStack::compile(solidity::frontend::CompilerStack::State)	/src/solidity/libsolidity/interface/CompilerStack.cpp:663
50273	76838	solidity::frontend::CompilerStack::compile(solidity::frontend::CompilerStack::State)	/src/solidity/libsolidity/interface/CompilerStack.cpp:667
33725	89533	solidity::frontend::ExpressionCompiler::visit(solidity::frontend::FunctionCallconst&)	/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp:1266
32835	72094	solidity::frontend::ExpressionCompiler::visit(solidity::frontend::FunctionCallconst&)	/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp:1297
26324	52067	solidity::frontend::Parser::parseStatement(bool)	/src/solidity/libsolidity/parsing/Parser.cpp:1263
18726	96476	solidity::frontend::ArrayUtils::copyArrayToMemory(solidity::frontend::ArrayTypeconst&,bool)const	/src/solidity/libsolidity/codegen/ArrayUtils.cpp:328
17254	29247	solidity::frontend::Parser::parseContractDefinition()	/src/solidity/libsolidity/parsing/Parser.cpp:373
17254	29247	solidity::frontend::Parser::parseContractDefinition()	/src/solidity/libsolidity/parsing/Parser.cpp:375
17254	29247	solidity::frontend::Parser::parseContractDefinition()	/src/solidity/libsolidity/parsing/Parser.cpp:379
17254	29247	solidity::frontend::Parser::parseContractDefinition()	/src/solidity/libsolidity/parsing/Parser.cpp:385
17193	46334	solidity::frontend::ExpressionCompiler::visit(solidity::frontend::FunctionCallconst&)	/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp:1318

Runtime coverage analysis

3085

2476

3734

For further technical details on the call tree overview, please see the Glossary .

33.69%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/solidity/test/tools/ossfuzz/abiV2ProtoFuzzer.cpp	2
/src/solidity/test/tools/ossfuzz/abiV2Proto.pb.h	52
/src/solidity/test/tools/ossfuzz/abiV2Proto.pb.cc	26
/usr/include/google/protobuf/message.h	2
/usr/include/google/protobuf/message_lite.h	4
/usr/include/google/protobuf/metadata_lite.h	8
/usr/include/google/protobuf/generated_message_util.h	1
/src/solidity/test/tools/ossfuzz/protoToAbiV2.h	26
/src/solidity/test/tools/ossfuzz/protoToAbiV2.cpp	45
/usr/include/google/protobuf/generated_message_bases.h	1
/src/solidity/libsolutil/Whiskers.cpp	12
/src/solidity/libsolutil/Whiskers.h	6
/usr/local/include/c++/v1/exception	2
/usr/include/boost/exception/exception.hpp	15
/src/solidity/libsolutil/Exceptions.h	6
/src/solidity/libsolutil/Assertions.h	1
/usr/include/boost/exception/detail/error_info_impl.hpp	3
/usr/include/boost/exception/info.hpp	23
/usr/include/boost/smart_ptr/shared_ptr.hpp	7
/usr/include/boost/smart_ptr/detail/shared_count.hpp	4
/usr/include/boost/smart_ptr/detail/sp_counted_impl.hpp	1
/usr/include/boost/smart_ptr/detail/sp_counted_base_clang.hpp	6
/usr/include/boost/core/checked_delete.hpp	1
/usr/include/boost/exception/detail/type_info.hpp	1
/usr/include/boost/throw_exception.hpp	27
/src/solidity/liblangutil/Exceptions.h	16
/src/solidity/liblangutil/EVMVersion.h	19
/src/solidity/test/EVMHost.cpp	19
/src/solidity/test/evmc/mocked_host.hpp	2
/src/solidity/test/evmc/evmc.hpp	20
/usr/include/boost/operators.hpp	2
/src/solidity/libsolidity/interface/OptimiserSettings.h	8
/src/solidity/test/tools/ossfuzz/SolidityEvmoneInterface.h	10
/src/solidity/libsolidity/interface/CompilerStack.cpp	42
/src/solidity/libsolidity/ast/TypeProvider.cpp	19
/src/solidity/libsolidity/ast/TypeProvider.h	10
/src/solidity/libsolidity/interface/ImportRemapper.h	1
/src/solidity/libsolidity/formal/ModelCheckerSettings.h	10
/src/solidity/liblangutil/CharStreamProvider.h	3
/src/solidity/test/tools/ossfuzz/SolidityEvmoneInterface.cpp	7
/src/solidity/liblangutil/ErrorReporter.cpp	22
/src/solidity/liblangutil/SemVerHandler.cpp	11
/src/solidity/liblangutil/SemVerHandler.h	12
/usr/include/boost/assert/source_location.hpp	4
/src/solidity/liblangutil/SourceLocation.h	12
/src/solidity/libsolidity/parsing/Parser.h	11
/src/solidity/liblangutil/ParserBase.h	4
/src/solidity/libsolidity/parsing/Parser.cpp	132
/src/solidity/liblangutil/Scanner.h	25
/src/solidity/liblangutil/ParserBase.cpp	14
/src/solidity/liblangutil/Token.h	17
/src/solidity/liblangutil/Token.cpp	9
/src/solidity/libsolidity/ast/AST.h	69
/src/solidity/libsolidity/ast/ASTEnums.h	1
/src/solidity/liblangutil/Scanner.cpp	30
/usr/local/include/c++/v1/optional	39
/src/solidity/liblangutil/ErrorReporter.h	7
/src/solidity/liblangutil/CharStream.cpp	7
/src/solidity/liblangutil/CharStream.h	11
/src/solidity/liblangutil/Common.h	6
/src/solidity/libsolutil/StringUtils.h	12
/src/solidity/libyul/backends/evm/EVMDialect.cpp	9
/src/solidity/libyul/YulString.h	12
/src/solidity/libyul/AsmParser.h	14
/src/solidity/libyul/AsmParser.cpp	21
/src/solidity/libsolutil/Common.h	6
/usr/include/boost/algorithm/string/predicate.hpp	13
/usr/include/boost/range/as_literal.hpp	7
/usr/include/boost/range/begin.hpp	10
/usr/include/boost/range/iterator_range_core.hpp	24
/usr/include/boost/range/end.hpp	9
/usr/include/boost/algorithm/string/detail/predicate.hpp	1
/usr/include/boost/algorithm/string/compare.hpp	1
/src/solidity/libyul/AST.h	41
/usr/include/boost/multiprecision/cpp_int.hpp	37
/usr/include/boost/multiprecision/cpp_int/cpp_int_config.hpp	2
/usr/include/boost/multiprecision/cpp_int/multiply.hpp	7
/usr/include/boost/multiprecision/cpp_int/add.hpp	9
/usr/include/boost/multiprecision/detail/constexpr.hpp	4
/src/solidity/libyul/Exceptions.h	5
/usr/include/boost/algorithm/string/trim.hpp	6
/usr/include/boost/algorithm/string/classification.hpp	2
/usr/include/boost/algorithm/string/detail/classification.hpp	8
/usr/include/boost/algorithm/string/detail/trim.hpp	5
/src/solidity/libsolutil/SetOnce.h	13
/src/solidity/libsolutil/CommonIO.cpp	2
/usr/include/boost/filesystem/path.hpp	10
/usr/include/boost/iterator/iterator_facade.hpp	5
/usr/include/boost/type_traits/integral_constant.hpp	2
/src/solidity/libsolidity/interface/ImportRemapper.cpp	2
/src/solidity/libsolidity/interface/ReadFile.h	2
/src/solidity/libsolidity/analysis/SyntaxChecker.h	1
/src/solidity/libsolidity/ast/ASTVisitor.h	6
/src/solidity/libsolidity/analysis/Scoper.cpp	1
/src/solidity/libsolidity/analysis/Scoper.h	2
/src/solidity/libsolidity/analysis/SyntaxChecker.cpp	1
/src/solidity/libsolidity/analysis/NameAndTypeResolver.cpp	17
/src/solidity/libsolidity/analysis/GlobalContext.cpp	5
/src/solidity/libsolidity/analysis/DeclarationContainer.cpp	5
/src/solidity/libsolutil/CommonData.h	90
/src/solidity/libsolidity/ast/AST.cpp	23
/src/solidity/libsolidity/analysis/DeclarationContainer.h	2
/src/solidity/build/deps/include/range/v3/view/filter.hpp	3
/src/solidity/build/deps/include/range/v3/functional/bind_back.hpp	8
/src/solidity/build/deps/include/range/v3/view/view.hpp	45
/src/solidity/build/deps/include/range/v3/functional/invoke.hpp	17
/src/solidity/build/deps/include/range/v3/view/all.hpp	9
/src/solidity/build/deps/include/range/v3/range_fwd.hpp	7
/src/solidity/build/deps/include/range/v3/view/ref.hpp	7
/src/solidity/build/deps/include/range/v3/functional/not_fn.hpp	3
/src/solidity/build/deps/include/range/v3/view/remove_if.hpp	6
/src/solidity/build/deps/include/range/v3/view/adaptor.hpp	10
/src/solidity/build/deps/include/range/v3/utility/box.hpp	9
/src/solidity/build/deps/include/range/v3/utility/optional.hpp	12
/src/solidity/build/deps/include/range/v3/range/conversion.hpp	11
/src/solidity/build/deps/include/range/v3/range/access.hpp	13
/src/solidity/build/deps/include/range/v3/view/facade.hpp	22
/src/solidity/build/deps/include/range/v3/detail/range_access.hpp	6
/src/solidity/build/deps/include/range/v3/view/interface.hpp	7
/src/solidity/build/deps/include/range/v3/utility/compressed_pair.hpp	3
/src/solidity/build/deps/include/range/v3/iterator/basic_iterator.hpp	51
/src/solidity/libsolidity/analysis/DocStringTagParser.h	1
/src/solidity/libsolidity/analysis/DocStringTagParser.cpp	2
/src/solidity/libsolidity/analysis/GlobalContext.h	1
/src/solidity/libsolidity/analysis/ReferencesResolver.h	1
/src/solidity/libyul/optimiser/ASTWalker.h	8
/src/solidity/libsolidity/analysis/ReferencesResolver.cpp	1
/src/solidity/libsolidity/analysis/DeclarationTypeChecker.h	2
/src/solidity/libsolidity/analysis/DeclarationTypeChecker.cpp	1
/src/solidity/libsolidity/analysis/ContractLevelChecker.h	2
/src/solidity/libsolidity/analysis/OverrideChecker.h	8
/src/solidity/libsolidity/analysis/TypeChecker.h	1
/src/solidity/libsolidity/analysis/ContractLevelChecker.cpp	20
/src/solidity/libsolidity/ast/Types.cpp	32
/src/solidity/libsolidity/ast/Types.h	44
/src/solidity/libsolidity/analysis/OverrideChecker.cpp	39
/src/solidity/build/deps/include/range/v3/view/reverse.hpp	9
/src/solidity/build/deps/include/range/v3/iterator/reverse_iterator.hpp	3
/src/solidity/libsolutil/Result.h	10
/src/solidity/build/deps/include/range/v3/view/transform.hpp	25
/usr/include/boost/algorithm/string/join.hpp	4
/src/solidity/build/deps/include/range/v3/functional/reference_wrapper.hpp	8
/src/solidity/build/deps/include/range/v3/utility/semiregular_box.hpp	3
/src/solidity/build/deps/include/range/v3/functional/indirect.hpp	4
/usr/include/boost/algorithm/string/detail/sequence.hpp	5
/src/solidity/libsolutil/LazyInit.h	4
/src/solidity/libsolutil/Keccak256.h	2
/src/solidity/libsolutil/vector_ref.h	13
/src/solidity/libsolutil/Keccak256.cpp	5
/src/solidity/libsolutil/FixedHash.h	18
/src/solidity/libsolidity/analysis/TypeChecker.cpp	2
/usr/include/boost/core/empty_value.hpp	3
/usr/include/boost/multiprecision/detail/number_base.hpp	21
/usr/include/boost/multiprecision/number.hpp	33
/usr/include/boost/multiprecision/detail/precision.hpp	8
/usr/include/boost/multiprecision/detail/et_ops.hpp	16
/usr/local/include/c++/v1/stdexcept	2
/usr/include/boost/multiprecision/detail/default_ops.hpp	10
/usr/include/boost/multiprecision/cpp_int/bitwise.hpp	14
/usr/include/boost/multiprecision/detail/number_compare.hpp	43
/src/solidity/libsolidity/analysis/DocStringAnalyser.h	1
/src/solidity/libsolidity/analysis/DocStringAnalyser.cpp	1
/src/solidity/libsolidity/analysis/PostTypeChecker.cpp	3
/src/solidity/libsolidity/analysis/PostTypeChecker.h	1
/src/solidity/libsolidity/analysis/FunctionCallGraph.cpp	6
/src/solidity/libsolidity/analysis/FunctionCallGraph.h	2
/src/solidity/libsolidity/ast/CallGraph.h	3
/src/solidity/libsolutil/Algorithms.h	23
/src/solidity/libsolidity/analysis/PostTypeContractLevelChecker.h	1
/src/solidity/libsolidity/analysis/PostTypeContractLevelChecker.cpp	2
/src/solidity/libsolutil/FunctionSelector.h	2
/usr/include/boost/multiprecision/cpp_int/misc.hpp	2
/src/solidity/libsolidity/analysis/ImmutableValidator.h	1
/src/solidity/libsolidity/analysis/ImmutableValidator.cpp	3
/src/solidity/libsolidity/analysis/ControlFlowGraph.h	8
/src/solidity/libsolidity/analysis/ControlFlowGraph.cpp	2
/src/solidity/libsolidity/analysis/ControlFlowRevertPruner.h	2
/src/solidity/libsolidity/analysis/ControlFlowRevertPruner.cpp	5
/src/solidity/libsolidity/analysis/ControlFlowAnalyzer.h	2
/src/solidity/libsolidity/analysis/ControlFlowAnalyzer.cpp	7
/src/solidity/build/deps/include/range/v3/algorithm/sort.hpp	11
/src/solidity/build/deps/include/range/v3/iterator/operations.hpp	8
/src/solidity/build/deps/include/range/v3/algorithm/partial_sort.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/heap_algorithm.hpp	4
/src/solidity/build/deps/include/range/v3/iterator/access.hpp	4
/src/solidity/build/deps/include/range/v3/utility/move.hpp	1
/src/solidity/build/deps/include/concepts/swap.hpp	2
/src/solidity/build/deps/include/range/v3/functional/identity.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/move_backward.hpp	1
/src/solidity/libsolidity/analysis/StaticAnalyzer.cpp	3
/src/solidity/libsolidity/analysis/ViewPureChecker.h	1
/src/solidity/libsolidity/analysis/ViewPureChecker.cpp	1
/src/solidity/libsolidity/formal/ModelChecker.cpp	5
/src/solidity/liblangutil/UniqueErrorReporter.h	8
/src/solidity/libsolidity/formal/EncodingContext.cpp	9
/src/solidity/libsolidity/formal/SymbolicState.h	12
/src/solidity/libsolidity/formal/SymbolicVariables.cpp	11
/src/solidity/libsolidity/formal/SymbolicTypes.cpp	24
/src/solidity/libsmtutil/Sorts.cpp	1
/src/solidity/libsolidity/formal/SymbolicVariables.h	3
/src/solidity/libsolidity/formal/SymbolicState.cpp	7
/src/solidity/libsolidity/formal/BMC.cpp	3
/src/solidity/libsolidity/formal/SMTEncoder.cpp	24
/src/solidity/libsolidity/formal/VariableUsage.h	3
/src/solidity/libsolidity/formal/SMTEncoder.h	2
/src/solidity/libsolidity/formal/CHC.cpp	19
/src/solidity/libsmtutil/SolverInterface.h	12
/src/solidity/libsolidity/formal/BMC.h	2
/src/solidity/libsolidity/formal/EncodingContext.h	5
/src/solidity/build/deps/include/range/v3/algorithm/any_of.hpp	5
/src/solidity/build/deps/include/range/v3/view/map.hpp	1
/src/solidity/libsmtutil/CHCSmtLib2Interface.h	2
/src/solidity/libsolidity/formal/Predicate.cpp	9
/src/solidity/libsolidity/formal/ArraySlicePredicate.h	1
/src/solidity/libsmtutil/CHCSmtLib2Interface.cpp	1
/src/solidity/libsolidity/formal/SSAVariable.cpp	1
/usr/include/boost/rational.hpp	2
/src/solidity/libsolidity/formal/PredicateSort.cpp	6
/src/solidity/libsolidity/formal/SSAVariable.h	1
/src/solidity/libsmtutil/Exceptions.h	1
/src/solidity/libsolidity/formal/PredicateInstance.cpp	2
/usr/include/boost/multiprecision/cpp_int/comparison.hpp	2
/usr/include/boost/lexical_cast.hpp	1
/usr/include/boost/lexical_cast/try_lexical_convert.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical_streams.hpp	6
/usr/include/boost/lexical_cast/detail/lcast_unsigned_converters.hpp	1
/usr/include/boost/lexical_cast/bad_lexical_cast.hpp	2
/usr/include/boost/multiprecision/cpp_int/divide.hpp	2
/src/solidity/libsolutil/Numeric.h	18
/src/solidity/libsolutil/CommonData.cpp	6
/src/solidity/libsolidity/formal/Invariants.cpp	2
/src/solidity/libsolidity/formal/ExpressionFormatter.cpp	7
/src/solidity/libsolidity/formal/CHC.h	4
/src/solidity/libsolidity/formal/Predicate.h	1
/src/solidity/libsolidity/formal/ModelChecker.h	1
/src/solidity/libsolidity/analysis/NameAndTypeResolver.h	1
/src/solidity/libsolidity/codegen/CompilerContext.h	33
/src/solidity/libsolidity/codegen/ir/IRGenerator.h	2
/src/solidity/libsolidity/codegen/ir/IRGenerationContext.h	15
/src/solidity/libsolidity/codegen/MultiUseYulFunctionCollector.h	3
/src/solidity/libsolidity/codegen/YulUtilFunctions.h	1
/src/solidity/libsolutil/IpfsHash.cpp	10
/src/solidity/libsolutil/picosha2.h	19
/usr/local/include/c++/v1/initializer_list	4
/src/solidity/libsolutil/SwarmHash.h	1
/src/solidity/libsolutil/SwarmHash.cpp	3
/src/solidity/libsolidity/codegen/ir/IRGenerator.cpp	18
/src/solidity/libsolidity/codegen/MultiUseYulFunctionCollector.cpp	3
/src/solidity/libsolidity/codegen/ir/IRGenerationContext.cpp	11
/src/solidity/libsolidity/codegen/ir/Common.cpp	9
/src/solidity/libsolutil/CommonIO.h	2
/src/solidity/libyul/AsmPrinter.cpp	3
/src/solidity/liblangutil/DebugInfoSelection.h	4
/src/solidity/liblangutil/DebugInfoSelection.cpp	2
/usr/include/boost/algorithm/string/replace.hpp	5
/usr/include/boost/algorithm/string/finder.hpp	3
/usr/include/boost/algorithm/string/detail/finder.hpp	6
/usr/include/boost/algorithm/string/formatter.hpp	2
/usr/include/boost/algorithm/string/detail/formatter.hpp	3
/usr/include/boost/algorithm/string/find_format.hpp	2
/usr/include/boost/range/empty.hpp	1
/usr/include/boost/algorithm/string/detail/find_format_all.hpp	4
/usr/include/boost/algorithm/string/detail/find_format_store.hpp	8
/usr/include/boost/range/detail/safe_bool.hpp	1
/usr/include/boost/algorithm/string/detail/replace_storage.hpp	4
/src/solidity/libsolidity/codegen/YulUtilFunctions.cpp	11
/src/solidity/libsolidity/codegen/CompilerUtils.h	3
/src/solidity/libyul/Object.h	6
/src/solidity/libyul/Utilities.cpp	6
/usr/include/boost/range/distance.hpp	1
/usr/include/boost/iterator/distance.hpp	2
/usr/include/boost/algorithm/string/split.hpp	1
/usr/include/boost/algorithm/string/iter_find.hpp	1
/usr/include/boost/algorithm/string/find_iterator.hpp	4
/usr/include/boost/algorithm/string/detail/find_iterator.hpp	5
/usr/include/boost/function/function_template.hpp	12
/usr/include/boost/function/function_base.hpp	5
/usr/include/boost/core/addressof.hpp	2
/usr/include/boost/iterator/transform_iterator.hpp	3
/usr/include/boost/iterator/iterator_adaptor.hpp	3
/src/solidity/libyul/YulStack.h	6
/src/solidity/libyul/YulStack.cpp	14
/src/solidity/libyul/ObjectParser.h	1
/src/solidity/libyul/ObjectParser.cpp	8
/src/solidity/libyul/backends/wasm/WasmDialect.cpp	1
/src/solidity/libyul/Object.cpp	3
/src/solidity/libyul/AsmAnalysis.h	2
/src/solidity/libyul/SideEffects.h	1
/src/solidity/libyul/backends/evm/EVMDialect.h	7
/src/solidity/libyul/AsmAnalysis.cpp	4
/src/solidity/libyul/ScopeFiller.cpp	2
/src/solidity/liblangutil/SourceReferenceFormatter.cpp	11
/src/solidity/liblangutil/SourceReferenceFormatter.h	3
/src/solidity/liblangutil/SourceReferenceExtractor.cpp	2
/usr/include/boost/exception/get_error_info.hpp	6
/usr/include/boost/smart_ptr/detail/operator_bool.hpp	1
/src/solidity/liblangutil/SourceReferenceExtractor.h	5
/src/solidity/liblangutil/Exceptions.cpp	2
/usr/include/boost/algorithm/string/case_conv.hpp	1
/usr/include/boost/algorithm/string/detail/case_conv.hpp	2
/src/solidity/libsolutil/AnsiColorized.h	11
/src/solidity/libyul/optimiser/Suite.cpp	10
/src/solidity/libyul/optimiser/Disambiguator.h	1
/src/solidity/libyul/optimiser/ASTCopier.h	5
/src/solidity/libyul/optimiser/NameDispenser.cpp	5
/src/solidity/libyul/optimiser/ASTCopier.cpp	3
/src/solidity/libyul/optimiser/NameCollector.h	4
/src/solidity/libyul/optimiser/Suite.h	1
/src/solidity/libyul/optimiser/Metrics.cpp	1
/src/solidity/libyul/optimiser/Metrics.h	1
/src/solidity/libyul/optimiser/ASTWalker.cpp	4
/src/solidity/libyul/optimiser/NameSimplifier.h	2
/src/solidity/libyul/optimiser/NameSimplifier.cpp	2
/src/solidity/libyul/optimiser/OptimizerUtilities.cpp	2
/src/solidity/libyul/optimiser/NameDispenser.h	2
/src/solidity/libyul/optimiser/StackCompressor.cpp	7
/src/solidity/libyul/optimiser/Semantics.cpp	2
/src/solidity/libyul/optimiser/Semantics.h	3
/src/solidity/libyul/AsmAnalysisInfo.h	3
/src/solidity/libyul/backends/evm/ControlFlowGraphBuilder.cpp	11
/src/solidity/libyul/backends/evm/ControlFlowGraph.h	4
/src/solidity/libsolutil/cxx20.h	1
/src/solidity/libyul/backends/evm/StackLayoutGenerator.cpp	29
/src/solidity/libyul/backends/evm/StackLayoutGenerator.h	2
/src/solidity/build/deps/include/range/v3/algorithm/find.hpp	2
/src/solidity/build/deps/include/range/v3/view/enumerate.hpp	1
/src/solidity/build/deps/include/range/v3/view/zip.hpp	6
/src/solidity/build/deps/include/range/v3/view/zip_with.hpp	1
/src/solidity/build/deps/include/range/v3/view/iota.hpp	5
/src/solidity/libyul/backends/evm/StackHelpers.h	6
/src/solidity/build/deps/include/range/v3/algorithm/all_of.hpp	3
/src/solidity/build/deps/include/range/v3/view/drop.hpp	1
/src/solidity/libyul/optimiser/DataFlowAnalyzer.cpp	4
/src/solidity/libyul/optimiser/DataFlowAnalyzer.h	3
/src/solidity/libyul/optimiser/KnowledgeBase.h	2
/src/solidity/libyul/optimiser/Rematerialiser.cpp	2
/src/solidity/libyul/optimiser/NameCollector.cpp	3
/src/solidity/libyul/optimiser/Rematerialiser.h	1
/src/solidity/libyul/optimiser/UnusedPruner.cpp	5
/src/solidity/build/deps/include/range/v3/action/remove_if.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/remove_if.hpp	2
/src/solidity/build/deps/include/range/v3/algorithm/find_if.hpp	1
/src/solidity/build/deps/include/range/v3/action/erase.hpp	2
/src/solidity/libyul/optimiser/UnusedPruner.h	2
/src/solidity/libyul/CompilabilityChecker.cpp	1
/src/solidity/libyul/backends/evm/NoOutputAssembly.cpp	2
/src/solidity/libyul/Dialect.h	3
/src/solidity/libevmasm/Instruction.h	8
/src/solidity/liblangutil/EVMVersion.cpp	1
/src/solidity/libevmasm/Instruction.cpp	2
/src/solidity/libyul/ControlFlowSideEffects.h	1
/src/solidity/libevmasm/SemanticInformation.cpp	9
/src/solidity/libyul/backends/evm/NoOutputAssembly.h	1
/src/solidity/libyul/backends/evm/AbstractAssembly.h	4
/src/solidity/libyul/backends/evm/EVMCodeTransform.h	5
/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp	13
/src/solidity/libyul/backends/evm/VariableReferenceCounter.h	3
/src/solidity/libyul/backends/evm/VariableReferenceCounter.cpp	1
/src/solidity/build/deps/include/range/v3/algorithm/none_of.hpp	3
/src/solidity/libevmasm/Exceptions.h	5
/src/solidity/build/deps/include/range/v3/algorithm/max.hpp	1
/src/solidity/libyul/CompilabilityChecker.h	1
/src/solidity/libyul/backends/evm/ConstantOptimiser.h	1
/src/solidity/libyul/optimiser/StackLimitEvader.cpp	6
/src/solidity/build/deps/include/range/v3/view/take.hpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.cpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.h	1
/src/solidity/libyul/optimiser/CallGraphGenerator.cpp	5
/src/solidity/libyul/optimiser/CallGraphGenerator.h	4
/src/solidity/build/deps/include/range/v3/view/concat.hpp	2
/src/solidity/libyul/optimiser/StackToMemoryMover.cpp	9
/src/solidity/libyul/optimiser/StackToMemoryMover.h	3
/src/solidity/libyul/optimiser/VarNameCleaner.h	2
/src/solidity/libyul/optimiser/VarNameCleaner.cpp	1
/src/solidity/libsolutil/Exceptions.cpp	2
/src/solidity/libevmasm/Assembly.h	22
/src/solidity/libevmasm/LinkerObject.h	5
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.cpp	1
/src/solidity/libyul/backends/evm/EVMObjectCompiler.cpp	2
/src/solidity/libyul/backends/evm/EVMObjectCompiler.h	1
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.cpp	8
/src/solidity/build/deps/include/range/v3/view/take_last.hpp	1
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.h	1
/src/solidity/libevmasm/Assembly.cpp	17
/src/solidity/libevmasm/JumpdestRemover.cpp	2
/src/solidity/libevmasm/AssemblyItem.h	21
/src/solidity/libevmasm/AssemblyItem.cpp	8
/src/solidity/libevmasm/BlockDeduplicator.cpp	2
/src/solidity/libevmasm/Inliner.h	1
/src/solidity/libevmasm/Inliner.cpp	10
/src/solidity/build/deps/include/range/v3/view/slice.hpp	1
/src/solidity/build/deps/include/range/v3/view/span.hpp	7
/src/solidity/build/deps/include/range/v3/range/primitives.hpp	1
/src/solidity/build/deps/include/range/v3/view/subrange.hpp	2
/src/solidity/build/deps/include/range/v3/view/drop_last.hpp	3
/src/solidity/build/deps/include/range/v3/numeric/accumulate.hpp	3
/src/solidity/libevmasm/GasMeter.h	6
/src/solidity/libevmasm/GasMeter.cpp	3
/src/solidity/libevmasm/JumpdestRemover.h	1
/src/solidity/libevmasm/PeepholeOptimiser.h	2
/src/solidity/libevmasm/PeepholeOptimiser.cpp	7
/src/solidity/libevmasm/BlockDeduplicator.h	3
/src/solidity/libevmasm/KnownState.h	12
/usr/include/boost/bimap/bimap.hpp	2
/usr/include/boost/multi_index_container.hpp	11
/usr/include/boost/multi_index/detail/converter.hpp	1
/usr/include/boost/bimap/views/set_view.hpp	1
/usr/include/boost/bimap/container_adaptor/set_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/ordered_associative_container_adaptor.hpp	2
/usr/include/boost/bimap/container_adaptor/associative_container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/detail/functor_bag.hpp	1
/usr/include/boost/utility/base_from_member.hpp	2
/usr/include/boost/multi_index/detail/header_holder.hpp	3
/usr/include/boost/tuple/detail/tuple_basic.hpp	5
/usr/include/boost/multi_index/detail/ord_index_impl.hpp	17
/usr/include/boost/multi_index/detail/index_base.hpp	4
/usr/include/boost/multi_index/detail/ord_index_node.hpp	14
/usr/include/boost/bimap/views/map_view.hpp	2
/usr/include/boost/bimap/container_adaptor/map_adaptor.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.h	4
/usr/include/boost/multi_index/detail/copy_map.hpp	10
/usr/include/boost/multi_index/detail/auto_space.hpp	3
/usr/include/boost/multi_index/detail/bidir_node_iterator.hpp	3
/usr/include/boost/multi_index/ordered_index.hpp	1
/usr/include/boost/multi_index/detail/raw_ptr.hpp	5
/usr/include/boost/multi_index/detail/index_node_base.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.cpp	4
/src/solidity/libevmasm/KnownState.cpp	9
/src/solidity/libevmasm/ExpressionClasses.cpp	10
/src/solidity/libevmasm/ExpressionClasses.h	3
/src/solidity/libevmasm/SimplificationRules.cpp	12
/src/solidity/libevmasm/SimplificationRules.h	10
/src/solidity/libevmasm/RuleList.h	58
/src/solidity/libevmasm/SimplificationRule.h	76
/src/solidity/libevmasm/ConstantOptimiser.cpp	12
/src/solidity/libevmasm/ConstantOptimiser.h	10
/usr/include/boost/multiprecision/detail/functions/pow.hpp	2
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.h	1
/src/solidity/libevmasm/LinkerObject.cpp	3
/src/solidity/libsolidity/codegen/Compiler.cpp	2
/src/solidity/libsolidity/codegen/ContractCompiler.h	2
/src/solidity/libsolidity/codegen/ContractCompiler.cpp	19
/src/solidity/libsolidity/codegen/CompilerContext.cpp	29
/src/solidity/libsolidity/codegen/CompilerUtils.cpp	34
/src/solidity/libyul/backends/evm/EVMMetrics.h	2
/src/solidity/libyul/AsmPrinter.h	3
/src/solidity/libyul/backends/evm/AsmCodeGen.cpp	1
/src/solidity/libsolidity/codegen/ArrayUtils.h	1
/src/solidity/libsolidity/codegen/ArrayUtils.cpp	5
/src/solidity/libsolidity/codegen/LValue.cpp	4
/src/solidity/libsolidity/codegen/LValue.h	2
/src/solidity/libsolidity/codegen/ABIFunctions.cpp	5
/src/solidity/libsolidity/codegen/ABIFunctions.h	3
/src/solidity/libsolidity/codegen/ExpressionCompiler.h	2
/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp	3
/src/solidity/libsolidity/codegen/Compiler.h	1
/src/solidity/libyul/backends/wasm/EVMToEwasmTranslator.h	1
/src/solidity/libyul/backends/wasm/EVMToEwasmTranslator.cpp	2
/src/solidity/libyul/optimiser/FunctionHoister.h	2
/src/solidity/libyul/optimiser/FunctionHoister.cpp	1
/src/solidity/libyul/optimiser/FunctionGrouper.h	1
/src/solidity/libyul/optimiser/FunctionGrouper.cpp	2
/src/solidity/libyul/optimiser/MainFunction.h	1
/src/solidity/libyul/optimiser/MainFunction.cpp	1
/src/solidity/libyul/optimiser/ForLoopConditionIntoBody.cpp	1
/src/solidity/libyul/optimiser/ForLoopConditionIntoBody.h	1
/src/solidity/libyul/optimiser/ExpressionSplitter.cpp	2
/src/solidity/libyul/optimiser/TypeInfo.cpp	3
/src/solidity/libyul/optimiser/ExpressionSplitter.h	1
/src/solidity/libyul/optimiser/TypeInfo.h	1
/src/solidity/libyul/backends/wasm/WordSizeTransform.cpp	2
/src/solidity/libyul/optimiser/NameDisplacer.h	1
/src/solidity/libyul/optimiser/NameDisplacer.cpp	2
/src/solidity/libyul/backends/wasm/WordSizeTransform.h	1
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.cpp	2
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.h	1
/src/solidity/libyul/backends/wasm/WasmCodeTransform.cpp	7
/src/solidity/libyul/backends/wasm/WasmAST.h	12
/src/solidity/libyul/backends/wasm/WasmCodeTransform.h	2
/src/solidity/libyul/backends/wasm/TextTransform.cpp	5
/src/solidity/libyul/backends/wasm/BinaryTransform.cpp	30
/src/solidity/libsolutil/LEB128.h	2
/src/solidity/libyul/backends/wasm/BinaryTransform.h	2
/src/solidity/libsolidity/interface/CompilerStack.h	1
/src/solidity/build/deps/src/jsoncpp-project/src/lib_json/json_value.cpp	33
/src/solidity/build/deps/src/jsoncpp-project/src/lib_json/../../include/json/value.h	5
/src/solidity/build/deps/src/jsoncpp-project/src/lib_json/json_valueiterator.inl	5
/src/solidity/build/deps/include/json/value.h	1
/usr/include/google/protobuf/repeated_ptr_field.h	3

Fuzzer: sol_proto_ossfuzz

Call tree

The distribution of callsites in terms of coloring is

Color Callsite count Percentage

red 10234 78.0%

gold 20 0.15%

yellow 0 0.0%

greenyellow 0 0.0%

lawngreen 2856 21.7%

All colors 13110 100

Full call tree

The following link provides a visualisation of the full call tree overlaid with coverage information: full call tree

For further technical details on how the call tree is generated, please see the Glossary .

Fuzz blockers

The followings nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
748	6620	solidity::yul::AsmAnalyzer::analyze(solidity::yul::Block const&)	call site	_ZN12_GLOBAL__N_123optimiserStepCollectionIJN8solidity3yul14BlockFlattenerENS2_24CircularReferencesPrunerENS2_29CommonSubexpressionEliminatorENS2_21ConditionalSimplifierENS2_23ConditionalUnsimplifierENS2_21ControlFlowSimplifierENS2_18DeadCodeEliminatorENS2_20EqualStoreEliminatorENS2_26EquivalentFunctionCombinerENS2_17ExpressionInlinerENS2_16ExpressionJoinerENS2_20ExpressionSimplifierENS2_18ExpressionSplitterENS2_24ForLoopConditionIntoBodyENS2_25ForLoopConditionOutOfBodyENS2_19ForLoopInitRewriterENS2_11FullInlinerENS2_15FunctionGrouperENS2_15FunctionHoisterENS2_19FunctionSpecializerENS2_21LiteralRematerialiserENS2_12LoadResolverENS2_23LoopInvariantCodeMotionENS2_22UnusedAssignEliminatorENS2_21UnusedStoreEliminatorENS2_24ReasoningBasedSimplifierENS2_14RematerialiserENS2_11SSAReverserENS2_12SSATransformENS2_20StructuralSimplifierENS2_29UnusedFunctionParameterPrunerENS2_12UnusedPrunerENS2_18VarDeclInitializerEEEENSt3__13mapINS10_12basic_stringIcNS10_11char_traitsIcEENS10_9allocatorIcEEEENS10_10unique_ptrINS2_13OptimiserStepENS10_14default_deleteIS19_EEEENS10_4lessIS17_EENS15_INS10_4pairIKS17_S1C_EEEEEEv
581	12126	solidity::frontend::CompilerStack::compileContract(solidity::frontend::ContractDefinition const&, std::__1::map , std::__1::less , std::__1::allocator > > >&)	call site	_ZN5boost14multiprecisionltINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEELNS0_26expression_template_optionE0EiEENS_11enable_if_cIXaasr6detail22is_valid_mixed_compareINS0_6numberIT_XT0_EEET1_EE5valuenesr15number_categoryISA_EE5valueLNS0_20number_category_typeE4EEbE4typeERKSB_RKSC_
504	8681	solidity::evmasm::SemanticInformation::isCommutativeOperation(solidity::evmasm::AssemblyItem const&)	call site	_ZN5boost14multiprecision8backends15eval_left_shiftILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEENS_11enable_if_cIXntsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valueEvE4typeERS8_o
401	9356	boost::multiprecision::number , (boost::multiprecision::expression_template_option)0> solidity::fromBigEndian , (boost::multiprecision::expression_template_option)0>, std::__1::array >(std::__1::array const&)	call site	_ZN5boost14multiprecision3powINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEEEENS_11enable_if_cIXeqsr15number_categoryIT_EE5valueLNS0_20number_category_typeE0EENS0_6numberIS8_LNS0_26expression_template_optionE0EEEE4typeERKSC_RKj
320	11119	solidity::frontend::CompilerContext::appendJump(solidity::evmasm::AssemblyItem::JumpType)	call site	_ZN5boost14multiprecisiongtINS0_8backends15cpp_int_backendILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEELNS0_26expression_template_optionE0EiEENS_11enable_if_cIXaasr6detail22is_valid_mixed_compareINS0_6numberIT_XT0_EEET1_EE5valuenesr15number_categoryISA_EE5valueLNS0_20number_category_typeE4EEbE4typeERKSB_RKSC_
221	8422	solidity::evmasm::AssemblyItem::pushTag() const	call site	_ZN5boost6bimaps17container_adaptor11set_adaptorINS_11multi_index6detail13ordered_indexINS3_6memberINS0_8relation6detail16relation_storageINS0_4tags6taggedIKjNS7_9member_at4leftEEENSB_IKNSt3__13setINS_14multiprecision6numberINSI_8backends15cpp_int_backendILj256ELj256ELNSI_16cpp_integer_typeE0ELNSI_18cpp_int_check_typeE0EvEELNSI_26expression_template_optionE0EEENSG_4lessISQ_EENSG_9allocatorISQ_EEEENSD_5rightEEELb1EEEjXadL_ZNSZ_4leftEEEEENSR_IjEENS4_9nth_layerILi2ENS7_15mutant_relationISF_SY_N4mpl_2naELb1EEENS0_6detail10bimap_coreIjSV_S15_S15_S15_E12core_indicesENST_IS16_EEEENS_3mpl6v_itemISE_NS1D_7vector0IS15_EELi0EEENS4_18ordered_unique_tagENS4_19null_augment_policyEEENS17_17set_view_iteratorINS4_19bidir_node_iteratorINS4_18ordered_index_nodeIS1J_NS4_15index_node_baseIS16_S1B_EEEEEEEENS17_23const_set_view_iteratorIS1R_EENS1L_INS_9iterators16reverse_iteratorIS1R_EEEENS1T_IS1X_EENS1_7support23iterator_facade_to_baseIS1S_S1U_EES15_S15_NS8_28get_mutable_relation_functorIS16_EENS7_7support22get_above_view_functorIS16_EENS17_20set_view_key_to_baseIjS16_S10_EENS1D_6vectorIS15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_S15_EEEC2ERS1K_
186	7706	solidity::util::fromHex(std::__1::basic_string , std::__1::allocator > const&, solidity::util::WhenError)	call site	_ZN5boost14multiprecision8backends15eval_left_shiftILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEENS_11enable_if_cIXntsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valueEvE4typeERS8_o
186	7950	solidity::evmasm::Assembly::Assembly(bool, std::__1::basic_string , std::__1::allocator >)	call site	_ZN6ranges11view_facadeINS_18iter_zip_with_viewINS_6detail16indirect_zip_fn_EJNS_8ref_viewINSt3__16vectorINS5_7variantIJN8solidity3yul27FunctionCallReturnLabelSlotENS9_23FunctionReturnLabelSlotENS9_12VariableSlotENS9_11LiteralSlotENS9_13TemporarySlotENS9_8JunkSlotEEEENS5_9allocatorISG_EEEEEENS4_IKSJ_EEEEELNS_11cardinalityEn1EE5beginISN_Lb1ELi0EEENS_14basic_iteratorINS5_5decayIDTclsr12range_accessE12begin_cursorclsr3stdE7declvalIRT_EEEEE4typeEEEv
185	1219	solidity::frontend::Parser::parseStatement(bool)	call site	__dynamic_cast
174	4659	solidity::frontend::RationalNumberType::isFractional() const	call site	_ZN5boost14multiprecision6detail12unsigned_absIxEENS_11enable_if_cIXoosr9is_signedIT_EE5valuesr17is_floating_pointIS4_EE5valueENS_13make_unsignedIS4_E4typeEE4typeES4_
174	11442	solidity::frontend::CompilerUtils::sizeOnStack(std::__1::vector > const&)	call site	_ZN5boost14multiprecision8backends15eval_left_shiftILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvEENS_11enable_if_cIXntsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valueEvE4typeERS8_o
169	4971	solidity::frontend::smt::SymbolicVariable::SymbolicVariable(std::__1::shared_ptr , std::__1::basic_string , std::__1::allocator >, solidity::frontend::smt::EncodingContext&)	call site	__dynamic_cast

Branch Blockers [Click to view]

[EXPERIMENTAL] The followings are the branches where fuzzer fails to bypass.

Blocked Complexity	Reachable Complexity	Function Name	Blocked Branch
143685	255527	solidity::frontend::CompilerUtils::convertType(solidity::frontend::Typeconst&,solidity::frontend::Typeconst&,bool,bool,bool)	/src/solidity/libsolidity/codegen/CompilerUtils.cpp:808
108009	129815	solidity::frontend::CompilerUtils::encodeToMemory(std::__1::vector >const&,std::__1::vector >const&,bool,bool,bool)	/src/solidity/libsolidity/codegen/CompilerUtils.cpp:444
50273	76838	solidity::frontend::CompilerStack::compile(solidity::frontend::CompilerStack::State)	/src/solidity/libsolidity/interface/CompilerStack.cpp:663
50273	76838	solidity::frontend::CompilerStack::compile(solidity::frontend::CompilerStack::State)	/src/solidity/libsolidity/interface/CompilerStack.cpp:667
43097	52067	solidity::frontend::Parser::parseStatement(bool)	/src/solidity/libsolidity/parsing/Parser.cpp:1263
17362	103225	solidity::frontend::ContractCompiler::appendFunctionSelector(solidity::frontend::ContractDefinitionconst&)	/src/solidity/libsolidity/codegen/ContractCompiler.cpp:417
16689	72635	solidity::frontend::ContractCompiler::appendFunctionSelector(solidity::frontend::ContractDefinitionconst&)	/src/solidity/libsolidity/codegen/ContractCompiler.cpp:463
16271	35091	solidity::frontend::ContractCompiler::visit(solidity::frontend::FunctionDefinitionconst&)	/src/solidity/libsolidity/codegen/ContractCompiler.cpp:624
16271	33356	solidity::frontend::ContractCompiler::visit(solidity::frontend::FunctionDefinitionconst&)	/src/solidity/libsolidity/codegen/ContractCompiler.cpp:638
15335	55206	solidity::frontend::ContractCompiler::appendFunctionSelector(solidity::frontend::ContractDefinitionconst&)	/src/solidity/libsolidity/codegen/ContractCompiler.cpp:518
15335	55206	solidity::frontend::ContractCompiler::appendFunctionSelector(solidity::frontend::ContractDefinitionconst&)	/src/solidity/libsolidity/codegen/ContractCompiler.cpp:533
14956	14974	solidity::frontend::ContractCompiler::appendInitAndConstructorCode(solidity::frontend::ContractDefinitionconst&)	/src/solidity/libsolidity/codegen/ContractCompiler.cpp:160

Runtime coverage analysis

1833

2662

3624

For further technical details on the call tree overview, please see the Glossary .

26.55%

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/solidity/test/tools/ossfuzz/solProtoFuzzer.cpp	2
/src/solidity/test/tools/ossfuzz/solProto.pb.h	19
/src/solidity/test/tools/ossfuzz/solProto.pb.cc	6
/usr/include/google/protobuf/message.h	1
/usr/include/google/protobuf/message_lite.h	2
/usr/include/google/protobuf/metadata_lite.h	7
/usr/include/google/protobuf/generated_message_util.h	1
/usr/include/google/protobuf/repeated_ptr_field.h	7
/src/solidity/test/tools/ossfuzz/protoToSol.h	4
/src/solidity/test/tools/ossfuzz/protoToSol.cpp	12
/src/solidity/libsolutil/Whiskers.cpp	12
/src/solidity/libsolutil/Whiskers.h	6
/usr/local/include/c++/v1/exception	2
/usr/include/boost/exception/exception.hpp	15
/src/solidity/libsolutil/Exceptions.h	6
/src/solidity/libsolutil/Assertions.h	1
/usr/include/boost/exception/detail/error_info_impl.hpp	3
/usr/include/boost/exception/info.hpp	23
/usr/include/boost/smart_ptr/shared_ptr.hpp	7
/usr/include/boost/smart_ptr/detail/shared_count.hpp	4
/usr/include/boost/smart_ptr/detail/sp_counted_impl.hpp	1
/usr/include/boost/smart_ptr/detail/sp_counted_base_clang.hpp	6
/usr/include/boost/core/checked_delete.hpp	1
/usr/include/boost/exception/detail/type_info.hpp	1
/usr/include/boost/throw_exception.hpp	27
/src/solidity/liblangutil/Exceptions.h	16
/src/solidity/liblangutil/EVMVersion.h	19
/src/solidity/test/EVMHost.cpp	19
/src/solidity/test/evmc/mocked_host.hpp	2
/src/solidity/test/evmc/evmc.hpp	20
/usr/include/boost/operators.hpp	2
/src/solidity/libsolidity/interface/OptimiserSettings.h	8
/src/solidity/test/tools/ossfuzz/SolidityEvmoneInterface.h	9
/src/solidity/libsolidity/interface/CompilerStack.cpp	42
/src/solidity/libsolidity/ast/TypeProvider.cpp	19
/src/solidity/libsolidity/ast/TypeProvider.h	10
/src/solidity/libsolidity/interface/ImportRemapper.h	1
/src/solidity/libsolidity/formal/ModelCheckerSettings.h	10
/src/solidity/liblangutil/CharStreamProvider.h	3
/src/solidity/test/tools/ossfuzz/SolidityEvmoneInterface.cpp	7
/src/solidity/liblangutil/ErrorReporter.cpp	22
/src/solidity/liblangutil/SemVerHandler.cpp	11
/src/solidity/liblangutil/SemVerHandler.h	12
/usr/include/boost/assert/source_location.hpp	4
/src/solidity/liblangutil/SourceLocation.h	12
/src/solidity/libsolidity/parsing/Parser.h	11
/src/solidity/liblangutil/ParserBase.h	4
/src/solidity/libsolidity/parsing/Parser.cpp	132
/src/solidity/liblangutil/Scanner.h	25
/src/solidity/liblangutil/ParserBase.cpp	14
/src/solidity/liblangutil/Token.h	17
/src/solidity/liblangutil/Token.cpp	9
/src/solidity/libsolidity/ast/AST.h	69
/src/solidity/libsolidity/ast/ASTEnums.h	1
/src/solidity/liblangutil/Scanner.cpp	30
/usr/local/include/c++/v1/optional	39
/src/solidity/liblangutil/ErrorReporter.h	7
/src/solidity/liblangutil/CharStream.cpp	7
/src/solidity/liblangutil/CharStream.h	11
/src/solidity/liblangutil/Common.h	6
/src/solidity/libsolutil/StringUtils.h	12
/src/solidity/libyul/backends/evm/EVMDialect.cpp	9
/src/solidity/libyul/YulString.h	12
/src/solidity/libyul/AsmParser.h	14
/src/solidity/libyul/AsmParser.cpp	21
/src/solidity/libsolutil/Common.h	6
/usr/include/boost/algorithm/string/predicate.hpp	13
/usr/include/boost/range/as_literal.hpp	7
/usr/include/boost/range/begin.hpp	10
/usr/include/boost/range/iterator_range_core.hpp	24
/usr/include/boost/range/end.hpp	9
/usr/include/boost/algorithm/string/detail/predicate.hpp	1
/usr/include/boost/algorithm/string/compare.hpp	1
/src/solidity/libyul/AST.h	41
/usr/include/boost/multiprecision/cpp_int.hpp	37
/usr/include/boost/multiprecision/cpp_int/cpp_int_config.hpp	2
/usr/include/boost/multiprecision/cpp_int/multiply.hpp	7
/usr/include/boost/multiprecision/cpp_int/add.hpp	9
/usr/include/boost/multiprecision/detail/constexpr.hpp	4
/src/solidity/libyul/Exceptions.h	5
/usr/include/boost/algorithm/string/trim.hpp	6
/usr/include/boost/algorithm/string/classification.hpp	2
/usr/include/boost/algorithm/string/detail/classification.hpp	8
/usr/include/boost/algorithm/string/detail/trim.hpp	5
/src/solidity/libsolutil/SetOnce.h	13
/src/solidity/libsolutil/CommonIO.cpp	2
/usr/include/boost/filesystem/path.hpp	10
/usr/include/boost/iterator/iterator_facade.hpp	5
/usr/include/boost/type_traits/integral_constant.hpp	2
/src/solidity/libsolidity/interface/ImportRemapper.cpp	2
/src/solidity/libsolidity/interface/ReadFile.h	2
/src/solidity/libsolidity/analysis/SyntaxChecker.h	1
/src/solidity/libsolidity/ast/ASTVisitor.h	6
/src/solidity/libsolidity/analysis/Scoper.cpp	1
/src/solidity/libsolidity/analysis/Scoper.h	2
/src/solidity/libsolidity/analysis/SyntaxChecker.cpp	1
/src/solidity/libsolidity/analysis/NameAndTypeResolver.cpp	17
/src/solidity/libsolidity/analysis/GlobalContext.cpp	5
/src/solidity/libsolidity/analysis/DeclarationContainer.cpp	5
/src/solidity/libsolutil/CommonData.h	90
/src/solidity/libsolidity/ast/AST.cpp	23
/src/solidity/libsolidity/analysis/DeclarationContainer.h	2
/src/solidity/build/deps/include/range/v3/view/filter.hpp	3
/src/solidity/build/deps/include/range/v3/functional/bind_back.hpp	8
/src/solidity/build/deps/include/range/v3/view/view.hpp	45
/src/solidity/build/deps/include/range/v3/functional/invoke.hpp	17
/src/solidity/build/deps/include/range/v3/view/all.hpp	9
/src/solidity/build/deps/include/range/v3/range_fwd.hpp	7
/src/solidity/build/deps/include/range/v3/view/ref.hpp	7
/src/solidity/build/deps/include/range/v3/functional/not_fn.hpp	3
/src/solidity/build/deps/include/range/v3/view/remove_if.hpp	6
/src/solidity/build/deps/include/range/v3/view/adaptor.hpp	10
/src/solidity/build/deps/include/range/v3/utility/box.hpp	9
/src/solidity/build/deps/include/range/v3/utility/optional.hpp	12
/src/solidity/build/deps/include/range/v3/range/conversion.hpp	11
/src/solidity/build/deps/include/range/v3/range/access.hpp	13
/src/solidity/build/deps/include/range/v3/view/facade.hpp	22
/src/solidity/build/deps/include/range/v3/detail/range_access.hpp	6
/src/solidity/build/deps/include/range/v3/view/interface.hpp	7
/src/solidity/build/deps/include/range/v3/utility/compressed_pair.hpp	3
/src/solidity/build/deps/include/range/v3/iterator/basic_iterator.hpp	51
/src/solidity/libsolidity/analysis/DocStringTagParser.h	1
/src/solidity/libsolidity/analysis/DocStringTagParser.cpp	2
/src/solidity/libsolidity/analysis/GlobalContext.h	1
/src/solidity/libsolidity/analysis/ReferencesResolver.h	1
/src/solidity/libyul/optimiser/ASTWalker.h	8
/src/solidity/libsolidity/analysis/ReferencesResolver.cpp	1
/src/solidity/libsolidity/analysis/DeclarationTypeChecker.h	2
/src/solidity/libsolidity/analysis/DeclarationTypeChecker.cpp	1
/src/solidity/libsolidity/analysis/ContractLevelChecker.h	2
/src/solidity/libsolidity/analysis/OverrideChecker.h	8
/src/solidity/libsolidity/analysis/TypeChecker.h	1
/src/solidity/libsolidity/analysis/ContractLevelChecker.cpp	20
/src/solidity/libsolidity/ast/Types.cpp	32
/src/solidity/libsolidity/ast/Types.h	44
/src/solidity/libsolidity/analysis/OverrideChecker.cpp	39
/src/solidity/build/deps/include/range/v3/view/reverse.hpp	9
/src/solidity/build/deps/include/range/v3/iterator/reverse_iterator.hpp	3
/src/solidity/libsolutil/Result.h	10
/src/solidity/build/deps/include/range/v3/view/transform.hpp	25
/usr/include/boost/algorithm/string/join.hpp	4
/src/solidity/build/deps/include/range/v3/functional/reference_wrapper.hpp	8
/src/solidity/build/deps/include/range/v3/utility/semiregular_box.hpp	3
/src/solidity/build/deps/include/range/v3/functional/indirect.hpp	4
/usr/include/boost/algorithm/string/detail/sequence.hpp	5
/src/solidity/libsolutil/LazyInit.h	4
/src/solidity/libsolutil/Keccak256.h	2
/src/solidity/libsolutil/vector_ref.h	13
/src/solidity/libsolutil/Keccak256.cpp	5
/src/solidity/libsolutil/FixedHash.h	18
/src/solidity/libsolidity/analysis/TypeChecker.cpp	2
/usr/include/boost/core/empty_value.hpp	3
/usr/include/boost/multiprecision/detail/number_base.hpp	21
/usr/include/boost/multiprecision/number.hpp	33
/usr/include/boost/multiprecision/detail/precision.hpp	8
/usr/include/boost/multiprecision/detail/et_ops.hpp	16
/usr/local/include/c++/v1/stdexcept	2
/usr/include/boost/multiprecision/detail/default_ops.hpp	10
/usr/include/boost/multiprecision/cpp_int/bitwise.hpp	14
/usr/include/boost/multiprecision/detail/number_compare.hpp	43
/src/solidity/libsolidity/analysis/DocStringAnalyser.h	1
/src/solidity/libsolidity/analysis/DocStringAnalyser.cpp	1
/src/solidity/libsolidity/analysis/PostTypeChecker.cpp	3
/src/solidity/libsolidity/analysis/PostTypeChecker.h	1
/src/solidity/libsolidity/analysis/FunctionCallGraph.cpp	6
/src/solidity/libsolidity/analysis/FunctionCallGraph.h	2
/src/solidity/libsolidity/ast/CallGraph.h	3
/src/solidity/libsolutil/Algorithms.h	23
/src/solidity/libsolidity/analysis/PostTypeContractLevelChecker.h	1
/src/solidity/libsolidity/analysis/PostTypeContractLevelChecker.cpp	2
/src/solidity/libsolutil/FunctionSelector.h	2
/usr/include/boost/multiprecision/cpp_int/misc.hpp	2
/src/solidity/libsolidity/analysis/ImmutableValidator.h	1
/src/solidity/libsolidity/analysis/ImmutableValidator.cpp	3
/src/solidity/libsolidity/analysis/ControlFlowGraph.h	8
/src/solidity/libsolidity/analysis/ControlFlowGraph.cpp	2
/src/solidity/libsolidity/analysis/ControlFlowRevertPruner.h	2
/src/solidity/libsolidity/analysis/ControlFlowRevertPruner.cpp	5
/src/solidity/libsolidity/analysis/ControlFlowAnalyzer.h	2
/src/solidity/libsolidity/analysis/ControlFlowAnalyzer.cpp	7
/src/solidity/build/deps/include/range/v3/algorithm/sort.hpp	11
/src/solidity/build/deps/include/range/v3/iterator/operations.hpp	8
/src/solidity/build/deps/include/range/v3/algorithm/partial_sort.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/heap_algorithm.hpp	4
/src/solidity/build/deps/include/range/v3/iterator/access.hpp	4
/src/solidity/build/deps/include/range/v3/utility/move.hpp	1
/src/solidity/build/deps/include/concepts/swap.hpp	2
/src/solidity/build/deps/include/range/v3/functional/identity.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/move_backward.hpp	1
/src/solidity/libsolidity/analysis/StaticAnalyzer.cpp	3
/src/solidity/libsolidity/analysis/ViewPureChecker.h	1
/src/solidity/libsolidity/analysis/ViewPureChecker.cpp	1
/src/solidity/libsolidity/formal/ModelChecker.cpp	5
/src/solidity/liblangutil/UniqueErrorReporter.h	8
/src/solidity/libsolidity/formal/EncodingContext.cpp	9
/src/solidity/libsolidity/formal/SymbolicState.h	12
/src/solidity/libsolidity/formal/SymbolicVariables.cpp	11
/src/solidity/libsolidity/formal/SymbolicTypes.cpp	24
/src/solidity/libsmtutil/Sorts.cpp	1
/src/solidity/libsolidity/formal/SymbolicVariables.h	3
/src/solidity/libsolidity/formal/SymbolicState.cpp	7
/src/solidity/libsolidity/formal/BMC.cpp	3
/src/solidity/libsolidity/formal/SMTEncoder.cpp	24
/src/solidity/libsolidity/formal/VariableUsage.h	3
/src/solidity/libsolidity/formal/SMTEncoder.h	2
/src/solidity/libsolidity/formal/CHC.cpp	19
/src/solidity/libsmtutil/SolverInterface.h	12
/src/solidity/libsolidity/formal/BMC.h	2
/src/solidity/libsolidity/formal/EncodingContext.h	5
/src/solidity/build/deps/include/range/v3/algorithm/any_of.hpp	5
/src/solidity/build/deps/include/range/v3/view/map.hpp	1
/src/solidity/libsmtutil/CHCSmtLib2Interface.h	2
/src/solidity/libsolidity/formal/Predicate.cpp	9
/src/solidity/libsolidity/formal/ArraySlicePredicate.h	1
/src/solidity/libsmtutil/CHCSmtLib2Interface.cpp	1
/src/solidity/libsolidity/formal/SSAVariable.cpp	1
/usr/include/boost/rational.hpp	2
/src/solidity/libsolidity/formal/PredicateSort.cpp	6
/src/solidity/libsolidity/formal/SSAVariable.h	1
/src/solidity/libsmtutil/Exceptions.h	1
/src/solidity/libsolidity/formal/PredicateInstance.cpp	2
/usr/include/boost/multiprecision/cpp_int/comparison.hpp	2
/usr/include/boost/lexical_cast.hpp	1
/usr/include/boost/lexical_cast/try_lexical_convert.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical.hpp	1
/usr/include/boost/lexical_cast/detail/converter_lexical_streams.hpp	6
/usr/include/boost/lexical_cast/detail/lcast_unsigned_converters.hpp	1
/usr/include/boost/lexical_cast/bad_lexical_cast.hpp	2
/usr/include/boost/multiprecision/cpp_int/divide.hpp	2
/src/solidity/libsolutil/Numeric.h	18
/src/solidity/libsolutil/CommonData.cpp	6
/src/solidity/libsolidity/formal/Invariants.cpp	2
/src/solidity/libsolidity/formal/ExpressionFormatter.cpp	7
/src/solidity/libsolidity/formal/CHC.h	4
/src/solidity/libsolidity/formal/Predicate.h	1
/src/solidity/libsolidity/formal/ModelChecker.h	1
/src/solidity/libsolidity/analysis/NameAndTypeResolver.h	1
/src/solidity/libsolidity/codegen/CompilerContext.h	33
/src/solidity/libsolidity/codegen/ir/IRGenerator.h	2
/src/solidity/libsolidity/codegen/ir/IRGenerationContext.h	15
/src/solidity/libsolidity/codegen/MultiUseYulFunctionCollector.h	3
/src/solidity/libsolidity/codegen/YulUtilFunctions.h	1
/src/solidity/libsolutil/IpfsHash.cpp	10
/src/solidity/libsolutil/picosha2.h	19
/usr/local/include/c++/v1/initializer_list	4
/src/solidity/libsolutil/SwarmHash.h	1
/src/solidity/libsolutil/SwarmHash.cpp	3
/src/solidity/libsolidity/codegen/ir/IRGenerator.cpp	18
/src/solidity/libsolidity/codegen/MultiUseYulFunctionCollector.cpp	3
/src/solidity/libsolidity/codegen/ir/IRGenerationContext.cpp	11
/src/solidity/libsolidity/codegen/ir/Common.cpp	9
/src/solidity/libsolutil/CommonIO.h	2
/src/solidity/libyul/AsmPrinter.cpp	3
/src/solidity/liblangutil/DebugInfoSelection.h	4
/src/solidity/liblangutil/DebugInfoSelection.cpp	2
/usr/include/boost/algorithm/string/replace.hpp	5
/usr/include/boost/algorithm/string/finder.hpp	3
/usr/include/boost/algorithm/string/detail/finder.hpp	6
/usr/include/boost/algorithm/string/formatter.hpp	2
/usr/include/boost/algorithm/string/detail/formatter.hpp	3
/usr/include/boost/algorithm/string/find_format.hpp	2
/usr/include/boost/range/empty.hpp	1
/usr/include/boost/algorithm/string/detail/find_format_all.hpp	4
/usr/include/boost/algorithm/string/detail/find_format_store.hpp	8
/usr/include/boost/range/detail/safe_bool.hpp	1
/usr/include/boost/algorithm/string/detail/replace_storage.hpp	4
/src/solidity/libsolidity/codegen/YulUtilFunctions.cpp	11
/src/solidity/libsolidity/codegen/CompilerUtils.h	3
/src/solidity/libyul/Object.h	6
/src/solidity/libyul/Utilities.cpp	6
/usr/include/boost/range/distance.hpp	1
/usr/include/boost/iterator/distance.hpp	2
/usr/include/boost/algorithm/string/split.hpp	1
/usr/include/boost/algorithm/string/iter_find.hpp	1
/usr/include/boost/algorithm/string/find_iterator.hpp	4
/usr/include/boost/algorithm/string/detail/find_iterator.hpp	5
/usr/include/boost/function/function_template.hpp	12
/usr/include/boost/function/function_base.hpp	5
/usr/include/boost/core/addressof.hpp	2
/usr/include/boost/iterator/transform_iterator.hpp	3
/usr/include/boost/iterator/iterator_adaptor.hpp	3
/src/solidity/libyul/YulStack.h	6
/src/solidity/libyul/YulStack.cpp	14
/src/solidity/libyul/ObjectParser.h	1
/src/solidity/libyul/ObjectParser.cpp	8
/src/solidity/libyul/backends/wasm/WasmDialect.cpp	1
/src/solidity/libyul/Object.cpp	3
/src/solidity/libyul/AsmAnalysis.h	2
/src/solidity/libyul/SideEffects.h	1
/src/solidity/libyul/backends/evm/EVMDialect.h	7
/src/solidity/libyul/AsmAnalysis.cpp	4
/src/solidity/libyul/ScopeFiller.cpp	2
/src/solidity/liblangutil/SourceReferenceFormatter.cpp	11
/src/solidity/liblangutil/SourceReferenceFormatter.h	3
/src/solidity/liblangutil/SourceReferenceExtractor.cpp	2
/usr/include/boost/exception/get_error_info.hpp	6
/usr/include/boost/smart_ptr/detail/operator_bool.hpp	1
/src/solidity/liblangutil/SourceReferenceExtractor.h	5
/src/solidity/liblangutil/Exceptions.cpp	2
/usr/include/boost/algorithm/string/case_conv.hpp	1
/usr/include/boost/algorithm/string/detail/case_conv.hpp	2
/src/solidity/libsolutil/AnsiColorized.h	11
/src/solidity/libyul/optimiser/Suite.cpp	10
/src/solidity/libyul/optimiser/Disambiguator.h	1
/src/solidity/libyul/optimiser/ASTCopier.h	5
/src/solidity/libyul/optimiser/NameDispenser.cpp	5
/src/solidity/libyul/optimiser/ASTCopier.cpp	3
/src/solidity/libyul/optimiser/NameCollector.h	4
/src/solidity/libyul/optimiser/Suite.h	1
/src/solidity/libyul/optimiser/Metrics.cpp	1
/src/solidity/libyul/optimiser/Metrics.h	1
/src/solidity/libyul/optimiser/ASTWalker.cpp	4
/src/solidity/libyul/optimiser/NameSimplifier.h	2
/src/solidity/libyul/optimiser/NameSimplifier.cpp	2
/src/solidity/libyul/optimiser/OptimizerUtilities.cpp	2
/src/solidity/libyul/optimiser/NameDispenser.h	2
/src/solidity/libyul/optimiser/StackCompressor.cpp	7
/src/solidity/libyul/optimiser/Semantics.cpp	2
/src/solidity/libyul/optimiser/Semantics.h	3
/src/solidity/libyul/AsmAnalysisInfo.h	3
/src/solidity/libyul/backends/evm/ControlFlowGraphBuilder.cpp	11
/src/solidity/libyul/backends/evm/ControlFlowGraph.h	4
/src/solidity/libsolutil/cxx20.h	1
/src/solidity/libyul/backends/evm/StackLayoutGenerator.cpp	29
/src/solidity/libyul/backends/evm/StackLayoutGenerator.h	2
/src/solidity/build/deps/include/range/v3/algorithm/find.hpp	2
/src/solidity/build/deps/include/range/v3/view/enumerate.hpp	1
/src/solidity/build/deps/include/range/v3/view/zip.hpp	6
/src/solidity/build/deps/include/range/v3/view/zip_with.hpp	1
/src/solidity/build/deps/include/range/v3/view/iota.hpp	5
/src/solidity/libyul/backends/evm/StackHelpers.h	6
/src/solidity/build/deps/include/range/v3/algorithm/all_of.hpp	3
/src/solidity/build/deps/include/range/v3/view/drop.hpp	1
/src/solidity/libyul/optimiser/DataFlowAnalyzer.cpp	4
/src/solidity/libyul/optimiser/DataFlowAnalyzer.h	3
/src/solidity/libyul/optimiser/KnowledgeBase.h	2
/src/solidity/libyul/optimiser/Rematerialiser.cpp	2
/src/solidity/libyul/optimiser/NameCollector.cpp	3
/src/solidity/libyul/optimiser/Rematerialiser.h	1
/src/solidity/libyul/optimiser/UnusedPruner.cpp	5
/src/solidity/build/deps/include/range/v3/action/remove_if.hpp	1
/src/solidity/build/deps/include/range/v3/algorithm/remove_if.hpp	2
/src/solidity/build/deps/include/range/v3/algorithm/find_if.hpp	1
/src/solidity/build/deps/include/range/v3/action/erase.hpp	2
/src/solidity/libyul/optimiser/UnusedPruner.h	2
/src/solidity/libyul/CompilabilityChecker.cpp	1
/src/solidity/libyul/backends/evm/NoOutputAssembly.cpp	2
/src/solidity/libyul/Dialect.h	3
/src/solidity/libevmasm/Instruction.h	8
/src/solidity/liblangutil/EVMVersion.cpp	1
/src/solidity/libevmasm/Instruction.cpp	2
/src/solidity/libyul/ControlFlowSideEffects.h	1
/src/solidity/libevmasm/SemanticInformation.cpp	9
/src/solidity/libyul/backends/evm/NoOutputAssembly.h	1
/src/solidity/libyul/backends/evm/AbstractAssembly.h	4
/src/solidity/libyul/backends/evm/EVMCodeTransform.h	5
/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp	13
/src/solidity/libyul/backends/evm/VariableReferenceCounter.h	3
/src/solidity/libyul/backends/evm/VariableReferenceCounter.cpp	1
/src/solidity/build/deps/include/range/v3/algorithm/none_of.hpp	3
/src/solidity/libevmasm/Exceptions.h	5
/src/solidity/build/deps/include/range/v3/algorithm/max.hpp	1
/src/solidity/libyul/CompilabilityChecker.h	1
/src/solidity/libyul/backends/evm/ConstantOptimiser.h	1
/src/solidity/libyul/optimiser/StackLimitEvader.cpp	6
/src/solidity/build/deps/include/range/v3/view/take.hpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.cpp	2
/src/solidity/libyul/optimiser/FunctionCallFinder.h	1
/src/solidity/libyul/optimiser/CallGraphGenerator.cpp	5
/src/solidity/libyul/optimiser/CallGraphGenerator.h	4
/src/solidity/build/deps/include/range/v3/view/concat.hpp	2
/src/solidity/libyul/optimiser/StackToMemoryMover.cpp	9
/src/solidity/libyul/optimiser/StackToMemoryMover.h	3
/src/solidity/libyul/optimiser/VarNameCleaner.h	2
/src/solidity/libyul/optimiser/VarNameCleaner.cpp	1
/src/solidity/libsolutil/Exceptions.cpp	2
/src/solidity/libevmasm/Assembly.h	22
/src/solidity/libevmasm/LinkerObject.h	5
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.cpp	1
/src/solidity/libyul/backends/evm/EVMObjectCompiler.cpp	2
/src/solidity/libyul/backends/evm/EVMObjectCompiler.h	1
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.cpp	8
/src/solidity/build/deps/include/range/v3/view/take_last.hpp	1
/src/solidity/libyul/backends/evm/OptimizedEVMCodeTransform.h	1
/src/solidity/libevmasm/Assembly.cpp	17
/src/solidity/libevmasm/JumpdestRemover.cpp	2
/src/solidity/libevmasm/AssemblyItem.h	21
/src/solidity/libevmasm/AssemblyItem.cpp	8
/src/solidity/libevmasm/BlockDeduplicator.cpp	2
/src/solidity/libevmasm/Inliner.h	1
/src/solidity/libevmasm/Inliner.cpp	10
/src/solidity/build/deps/include/range/v3/view/slice.hpp	1
/src/solidity/build/deps/include/range/v3/view/span.hpp	7
/src/solidity/build/deps/include/range/v3/range/primitives.hpp	1
/src/solidity/build/deps/include/range/v3/view/subrange.hpp	2
/src/solidity/build/deps/include/range/v3/view/drop_last.hpp	3
/src/solidity/build/deps/include/range/v3/numeric/accumulate.hpp	3
/src/solidity/libevmasm/GasMeter.h	6
/src/solidity/libevmasm/GasMeter.cpp	3
/src/solidity/libevmasm/JumpdestRemover.h	1
/src/solidity/libevmasm/PeepholeOptimiser.h	2
/src/solidity/libevmasm/PeepholeOptimiser.cpp	7
/src/solidity/libevmasm/BlockDeduplicator.h	3
/src/solidity/libevmasm/KnownState.h	12
/usr/include/boost/bimap/bimap.hpp	2
/usr/include/boost/multi_index_container.hpp	11
/usr/include/boost/multi_index/detail/converter.hpp	1
/usr/include/boost/bimap/views/set_view.hpp	1
/usr/include/boost/bimap/container_adaptor/set_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/ordered_associative_container_adaptor.hpp	2
/usr/include/boost/bimap/container_adaptor/associative_container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/container_adaptor.hpp	1
/usr/include/boost/bimap/container_adaptor/detail/functor_bag.hpp	1
/usr/include/boost/utility/base_from_member.hpp	2
/usr/include/boost/multi_index/detail/header_holder.hpp	3
/usr/include/boost/tuple/detail/tuple_basic.hpp	5
/usr/include/boost/multi_index/detail/ord_index_impl.hpp	17
/usr/include/boost/multi_index/detail/index_base.hpp	4
/usr/include/boost/multi_index/detail/ord_index_node.hpp	14
/usr/include/boost/bimap/views/map_view.hpp	2
/usr/include/boost/bimap/container_adaptor/map_adaptor.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.h	4
/usr/include/boost/multi_index/detail/copy_map.hpp	10
/usr/include/boost/multi_index/detail/auto_space.hpp	3
/usr/include/boost/multi_index/detail/bidir_node_iterator.hpp	3
/usr/include/boost/multi_index/ordered_index.hpp	1
/usr/include/boost/multi_index/detail/raw_ptr.hpp	5
/usr/include/boost/multi_index/detail/index_node_base.hpp	1
/src/solidity/libevmasm/CommonSubexpressionEliminator.cpp	4
/src/solidity/libevmasm/KnownState.cpp	9
/src/solidity/libevmasm/ExpressionClasses.cpp	10
/src/solidity/libevmasm/ExpressionClasses.h	3
/src/solidity/libevmasm/SimplificationRules.cpp	12
/src/solidity/libevmasm/SimplificationRules.h	10
/src/solidity/libevmasm/RuleList.h	58
/src/solidity/libevmasm/SimplificationRule.h	76
/src/solidity/libevmasm/ConstantOptimiser.cpp	12
/src/solidity/libevmasm/ConstantOptimiser.h	10
/usr/include/boost/multiprecision/detail/functions/pow.hpp	2
/src/solidity/libyul/backends/evm/EthAssemblyAdapter.h	1
/src/solidity/libevmasm/LinkerObject.cpp	3
/src/solidity/libsolidity/codegen/Compiler.cpp	2
/src/solidity/libsolidity/codegen/ContractCompiler.h	2
/src/solidity/libsolidity/codegen/ContractCompiler.cpp	19
/src/solidity/libsolidity/codegen/CompilerContext.cpp	29
/src/solidity/libsolidity/codegen/CompilerUtils.cpp	34
/src/solidity/libyul/backends/evm/EVMMetrics.h	2
/src/solidity/libyul/AsmPrinter.h	3
/src/solidity/libyul/backends/evm/AsmCodeGen.cpp	1
/src/solidity/libsolidity/codegen/ArrayUtils.h	1
/src/solidity/libsolidity/codegen/ArrayUtils.cpp	5
/src/solidity/libsolidity/codegen/LValue.cpp	4
/src/solidity/libsolidity/codegen/LValue.h	2
/src/solidity/libsolidity/codegen/ABIFunctions.cpp	5
/src/solidity/libsolidity/codegen/ABIFunctions.h	3
/src/solidity/libsolidity/codegen/ExpressionCompiler.h	2
/src/solidity/libsolidity/codegen/ExpressionCompiler.cpp	3
/src/solidity/libsolidity/codegen/Compiler.h	1
/src/solidity/libyul/backends/wasm/EVMToEwasmTranslator.h	1
/src/solidity/libyul/backends/wasm/EVMToEwasmTranslator.cpp	2
/src/solidity/libyul/optimiser/FunctionHoister.h	2
/src/solidity/libyul/optimiser/FunctionHoister.cpp	1
/src/solidity/libyul/optimiser/FunctionGrouper.h	1
/src/solidity/libyul/optimiser/FunctionGrouper.cpp	2
/src/solidity/libyul/optimiser/MainFunction.h	1
/src/solidity/libyul/optimiser/MainFunction.cpp	1
/src/solidity/libyul/optimiser/ForLoopConditionIntoBody.cpp	1
/src/solidity/libyul/optimiser/ForLoopConditionIntoBody.h	1
/src/solidity/libyul/optimiser/ExpressionSplitter.cpp	2
/src/solidity/libyul/optimiser/TypeInfo.cpp	3
/src/solidity/libyul/optimiser/ExpressionSplitter.h	1
/src/solidity/libyul/optimiser/TypeInfo.h	1
/src/solidity/libyul/backends/wasm/WordSizeTransform.cpp	2
/src/solidity/libyul/optimiser/NameDisplacer.h	1
/src/solidity/libyul/optimiser/NameDisplacer.cpp	2
/src/solidity/libyul/backends/wasm/WordSizeTransform.h	1
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.cpp	2
/src/solidity/libyul/backends/wasm/WasmObjectCompiler.h	1
/src/solidity/libyul/backends/wasm/WasmCodeTransform.cpp	7
/src/solidity/libyul/backends/wasm/WasmAST.h	12
/src/solidity/libyul/backends/wasm/WasmCodeTransform.h	2
/src/solidity/libyul/backends/wasm/TextTransform.cpp	5
/src/solidity/libyul/backends/wasm/BinaryTransform.cpp	30
/src/solidity/libsolutil/LEB128.h	2
/src/solidity/libyul/backends/wasm/BinaryTransform.h	2
/src/solidity/libsolidity/interface/CompilerStack.h	1
/src/solidity/build/deps/src/jsoncpp-project/src/lib_json/json_value.cpp	33
/src/solidity/build/deps/src/jsoncpp-project/src/lib_json/../../include/json/value.h	5
/src/solidity/build/deps/src/jsoncpp-project/src/lib_json/json_valueiterator.inl	5
/src/solidity/build/deps/include/json/value.h	1
/usr/include/google/protobuf/arena.h	1

Fuzzer: yul_proto_ossfuzz

Call tree

The distribution of callsites in terms of coloring is

Color Callsite count Percentage

red 946 38.8%

gold 1 0.04%

yellow 6 0.24%

greenyellow 0 0.0%

lawngreen 1484 60.8%

All colors 2437 100

Full call tree

The following link provides a visualisation of the full call tree overlaid with coverage information: full call tree

For further technical details on how the call tree is generated, please see the Glossary .

Fuzz blockers

The followings nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
92	1449	solidity::langutil::Scanner::scanToken()	call site
91	566	solidity::yul::test::yul_fuzzer::ProtoConverter::createVars(unsigned int, unsigned int)	call site	_ZN5boost9function2INS_14iterator_rangeINSt3__111__wrap_iterIPcEEEES5_S5_EC2INS_9algorithm6detail13token_finderFINSA_10is_any_ofFIcEEEEEET_NS_10enable_if_IXntsr11is_integralISF_EE5valueEiE4typeE
83	1697	solidity::yul::Parser::parseInline(std::__1::shared_ptr const&)	call site	__cxa_guard_acquire
75	1815	solidity::langutil::ParserBase::expectToken(solidity::langutil::Token, bool)	call site
60	895	solidity::yul::test::yul_fuzzer::ProtoConverter::visit(solidity::yul::test::yul_fuzzer::CaseStmt const&)	call site	_ZN5boost14multiprecision8backends13eval_multiplyILj256ELj256ELNS0_16cpp_integer_typeE0ELNS0_18cpp_int_check_typeE0EvLj256ELj256ELS3_0ELS4_0EvEENS_11enable_if_cIXaantsr18is_trivial_cpp_intINS1_15cpp_int_backendIXT_EXT0_EXT1_EXT2_ET3_EEEE5valuentsr18is_trivial_cpp_intINS6_IXT4_EXT5_EXT6_EXT7_ET8_EEEE5valueEvE4typeERS8_RKSA_RKy
36	84	solidity::yul::test::yul_fuzzer::ProtoConverter::openBlockScope()	call site	__cxa_begin_catch
25	1565	solidity::langutil::Scanner::scanNumber(char)	call site
22	1261	solidity::langutil::DebugInfoSelection::All(bool)	call site	_ZN6ranges12view_adaptorINS_19iter_transform_viewINS_8ref_viewIKNSt3__13mapINS3_12basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEEMN8solidity8langutil18DebugInfoSelectionEbNS3_4lessISA_EENS8_INS3_4pairIKSA_SE_EEEEEEEENS_10indirectedINS_6detail10get_secondEEEEESN_LNS_11cardinalityEn1EE12begin_cursorISS_Lb1ELi0EEEDTclsr12view_adaptorE13begin_cursor_clsr3stdE7declvalIRT_EEEEv
21	1402	solidity::langutil::Scanner::scanHexByte(char&)	call site
19	246	solidity::yul::test::yul_fuzzer::ProtoConverter::createHex(std::__1::basic_string , std::__1::allocator > const&)	call site	_ZNK6ranges12remove_if_fnclIRNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEZN8solidity3yul4test10yul_fuzzer14ProtoConverter9createHexERKS8_E3$_0NS_8identityELb1ELi0ELi0ELi0EEEN4meta6detail5_condIXsr6detailE15_borrowed_rangeIT_EEE6invokeIDTclL_ZNS_1_5beginEEclscPDoFRSM_vELDnEEEENS_8danglingEEEOSM_T0_T1_
17	1653	solidity::langutil::Scanner::Scanner(solidity::langutil::CharStream&)	call site	__cxa_begin_catch
16	1429	solidity::langutil::Scanner::selectToken(solidity::langutil::Token)	call site

Branch Blockers [Click to view]

[EXPERIMENTAL] The followings are the branches where fuzzer fails to bypass.

Blocked Complexity	Reachable Complexity	Function Name	Blocked Branch
3420	3797	solidity::yul::StackLimitEvader::run(solidity::yul::OptimiserStepContext&,solidity::yul::Object&,std::__1::map ,std::__1::allocator >,std::__1::less ,std::__1::allocator ,std::__1::allocator >>>>const&)	/src/solidity/libyul/optimiser/StackLimitEvader.cpp:178
1601	1605	solidity::langutil::ParserBase::expectToken(solidity::langutil::Token,bool)	/src/solidity/liblangutil/ParserBase.cpp:77
1468	3117	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:321
1145	1953	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:337
1039	1823	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:376
1039	1823	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:382
1039	1823	solidity::yul::AsmAnalyzer::operator()(solidity::yul::FunctionCallconst&)	/src/solidity/libyul/AsmAnalysis.cpp:393
959	1310	solidity::yul::OptimiserSuite::runSequence(std::__1::vector ,std::__1::allocator >,std::__1::allocator ,std::__1::allocator >>>const&,solidity::yul::Block&)	/src/solidity/libyul/optimiser/Suite.cpp:429
955	1263	solidity::yul::OptimiserSuite::runSequence(std::__1::vector ,std::__1::allocator >,std::__1::allocator ,std::__1::allocator >>>const&,solidity::yul::Block&)	/src/solidity/libyul/optimiser/Suite.cpp:433
885	2528	solidity::yul::LoadResolver::tryEvaluateKeccak(std::__1::variant &,std::__1::vector ,std::__1::allocator >>const&)	/src/solidity/libyul/optimiser/LoadResolver.cpp:111
847	3127	solidity::yul::CodeTransform::operator()(solidity::yul::FunctionDefinitionconst&)	/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp:397
847	3127	solidity::yul::CodeTransform::operator()(solidity::yul::FunctionDefinitionconst&)	/src/solidity/libyul/backends/evm/EVMCodeTransform.cpp:406

Runtime coverage analysis

2885

405

961