Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzzers overview

Fuzzer Fuzzer filename Functions Reached Functions unreached Fuzzer depth Files reached Basic blocks reached Cyclomatic complexity Details
Tss2_Sys_ContextLoad_Prepare test/fuzz/main-sys.c 69 328 7 18 561 289 main-sys.c
Tss2_Sys_DictionaryAttackLockReset_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_PolicyOR_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_PolicyAuthorizeNV_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_PolicyLocality_Prepare test/fuzz/main-sys.c 65 332 7 17 470 252 main-sys.c
Tss2_Sys_PCR_SetAuthPolicy_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_ObjectChangeAuth_Prepare test/fuzz/main-sys.c 66 331 7 17 512 268 main-sys.c
Tss2_Sys_HMAC_Prepare test/fuzz/main-sys.c 66 331 7 17 512 268 main-sys.c
Tss2_Sys_GetSessionAuditDigest_Complete test/fuzz/main-sys.c 75 322 9 20 789 365 main-sys.c
Tss2_Sys_FieldUpgradeData_Prepare test/fuzz/main-sys.c 65 332 7 17 481 256 main-sys.c
Tss2_Sys_CreateLoaded_Prepare test/fuzz/main-sys.c 70 327 7 18 642 319 main-sys.c
Tss2_Sys_PolicyCounterTimer_Prepare test/fuzz/main-sys.c 66 331 7 17 514 269 main-sys.c
Tss2_Sys_SetAlgorithmSet_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_EC_Ephemeral_Complete test/fuzz/main-sys.c 62 335 7 18 526 273 main-sys.c
Tss2_Sys_PolicyAuthorize_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_SequenceUpdate_Complete test/fuzz/main-sys.c 58 339 7 14 393 220 main-sys.c
Tss2_Sys_CertifyX509_Complete test/fuzz/main-sys.c 76 321 9 20 824 379 main-sys.c
Tss2_Sys_SequenceComplete_Complete test/fuzz/main-sys.c 61 336 7 18 485 257 main-sys.c
Tss2_Sys_PolicyNvWritten_Prepare test/fuzz/main-sys.c 65 332 7 16 470 252 main-sys.c
Tss2_Sys_Sign_Prepare test/fuzz/main-sys.c 72 325 7 20 609 305 main-sys.c
Tss2_Sys_HashSequenceStart_Prepare test/fuzz/main-sys.c 65 332 7 17 483 257 main-sys.c
Tss2_Sys_Create_Prepare test/fuzz/main-sys.c 101 296 10 22 1340 561 main-sys.c
Tss2_Sys_Commit_Complete test/fuzz/main-sys.c 62 335 7 18 530 275 main-sys.c
Tss2_Sys_PolicyAuthorizeNV_Prepare test/fuzz/main-sys.c 64 333 7 16 445 243 main-sys.c
Tss2_Sys_SelfTest_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_EncryptDecrypt2_Complete test/fuzz/main-sys.c 61 336 7 17 491 259 main-sys.c
Tss2_Sys_EC_Ephemeral_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_ChangeEPS_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_Hash_Prepare test/fuzz/main-sys.c 66 331 7 17 512 268 main-sys.c
Tss2_Sys_NV_GlobalWriteLock_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_CertifyX509_Prepare test/fuzz/main-sys.c 72 325 7 20 629 312 main-sys.c
Tss2_Sys_PP_Commands_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_ClearControl_Prepare test/fuzz/main-sys.c 65 332 7 16 470 252 main-sys.c
Tss2_Sys_PolicyOR_Prepare test/fuzz/main-sys.c 67 330 7 18 543 280 main-sys.c
Tss2_Sys_PolicyRestart_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_StirRandom_Prepare test/fuzz/main-sys.c 65 332 7 17 481 256 main-sys.c
Tss2_Sys_VerifySignature_Complete test/fuzz/main-sys.c 61 336 7 18 483 256 main-sys.c
Tss2_Sys_PolicyCpHash_Prepare test/fuzz/main-sys.c 66 331 7 17 510 267 main-sys.c
Tss2_Sys_Import_Prepare test/fuzz/main-sys.c 95 302 10 21 1183 499 main-sys.c
Tss2_Sys_HierarchyControl_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_NV_ReadPublic_Complete test/fuzz/main-sys.c 64 333 7 19 604 303 main-sys.c
Tss2_Sys_PolicySecret_Complete test/fuzz/main-sys.c 62 335 7 18 518 270 main-sys.c
Tss2_Sys_HMAC_Start_Prepare test/fuzz/main-sys.c 66 331 7 17 512 268 main-sys.c
Tss2_Sys_PolicyAuthValue_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_CreatePrimary_Complete test/fuzz/main-sys.c 96 301 10 22 1709 683 main-sys.c
Tss2_Sys_ECDH_KeyGen_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_SelfTest_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_StirRandom_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_MAC_Start_Prepare test/fuzz/main-sys.c 66 331 7 17 512 268 main-sys.c
Tss2_Sys_PolicyDuplicationSelect_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_ZGen_2Phase_Complete test/fuzz/main-sys.c 62 335 7 18 526 273 main-sys.c
Tss2_Sys_GetCapability_Complete test/fuzz/main-sys.c 93 304 8 21 1462 619 main-sys.c
Tss2_Sys_NV_UndefineSpaceSpecial_Prepare test/fuzz/main-sys.c 64 333 7 16 443 242 main-sys.c
Tss2_Sys_PolicyGetDigest_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_TestParms_Prepare test/fuzz/main-sys.c 85 312 9 19 827 367 main-sys.c
Tss2_Sys_VerifySignature_Prepare test/fuzz/main-sys.c 81 316 9 20 756 359 main-sys.c
Tss2_Sys_NV_UndefineSpaceSpecial_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_Rewrap_Complete test/fuzz/main-sys.c 61 336 7 17 491 259 main-sys.c
Tss2_Sys_AC_Send_Prepare test/fuzz/main-sys.c 66 331 7 17 514 269 main-sys.c
Tss2_Sys_NV_DefineSpace_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_IncrementalSelfTest_Prepare test/fuzz/main-sys.c 66 331 7 17 504 265 main-sys.c
Tss2_Sys_ContextSave_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_FirmwareRead_Complete test/fuzz/main-sys.c 60 337 7 17 456 245 main-sys.c
Tss2_Sys_PolicySigned_Prepare test/fuzz/main-sys.c 82 315 9 20 807 379 main-sys.c
Tss2_Sys_RSA_Encrypt_Complete test/fuzz/main-sys.c 60 337 7 17 456 245 main-sys.c
Tss2_Sys_NV_Increment_Prepare test/fuzz/main-sys.c 64 333 7 16 443 242 main-sys.c
Tss2_Sys_Policy_AC_SendSelect_Prepare test/fuzz/main-sys.c 67 330 7 17 549 282 main-sys.c
Tss2_Sys_NV_ReadLock_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_HierarchyChangeAuth_Complete test/fuzz/main-sys.c 58 339 7 14 393 220 main-sys.c
Tss2_Sys_NV_SetBits_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_FlushContext_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_FieldUpgradeData_Complete test/fuzz/main-sys.c 68 329 7 18 550 279 main-sys.c
Tss2_Sys_NV_Read_Prepare test/fuzz/main-sys.c 65 332 7 16 474 254 main-sys.c
Tss2_Sys_ActivateCredential_Complete test/fuzz/main-sys.c 60 337 7 17 456 245 main-sys.c
Tss2_Sys_FieldUpgradeStart_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_PCR_SetAuthValue_Prepare test/fuzz/main-sys.c 66 331 7 17 510 267 main-sys.c
Tss2_Sys_Certify_Prepare test/fuzz/main-sys.c 71 326 7 20 587 295 main-sys.c
Tss2_Sys_Create_Complete test/fuzz/main-sys.c 97 300 10 22 1740 695 main-sys.c
Tss2_Sys_PCR_Extend_Prepare test/fuzz/main-sys.c 75 322 8 19 590 299 main-sys.c
Tss2_Sys_PCR_SetAuthValue_Complete test/fuzz/main-sys.c 58 339 7 14 393 220 main-sys.c
Tss2_Sys_FieldUpgradeStart_Prepare test/fuzz/main-sys.c 81 316 9 20 758 360 main-sys.c
Tss2_Sys_NV_DefineSpace_Prepare test/fuzz/main-sys.c 70 327 7 19 641 319 main-sys.c
Tss2_Sys_PolicyRestart_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_PolicyPCR_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_Hash_Complete test/fuzz/main-sys.c 61 336 7 18 485 257 main-sys.c
Tss2_Sys_ReadPublic_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_NV_Increment_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_ECC_Parameters_Complete test/fuzz/main-sys.c 68 329 7 20 725 337 main-sys.c
Tss2_Sys_GetSessionAuditDigest_Prepare test/fuzz/main-sys.c 71 326 7 20 589 296 main-sys.c
Tss2_Sys_CertifyCreation_Complete test/fuzz/main-sys.c 75 322 9 20 789 365 main-sys.c
Tss2_Sys_NV_WriteLock_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_NV_Write_Prepare test/fuzz/main-sys.c 66 331 7 17 514 269 main-sys.c
Tss2_Sys_SetPrimaryPolicy_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_PolicyTemplate_Complete test/fuzz/main-sys.c 58 339 7 14 393 220 main-sys.c
Tss2_Sys_DictionaryAttackParameters_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_PolicyPhysicalPresence_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_ClockSet_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_GetTestResult_Complete test/fuzz/main-sys.c 60 337 7 17 458 246 main-sys.c
Tss2_Sys_PolicySecret_Prepare test/fuzz/main-sys.c 67 330 7 17 561 287 main-sys.c
Tss2_Sys_PCR_Reset_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_PolicyNvWritten_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_SetAlgorithmSet_Prepare test/fuzz/main-sys.c 64 333 7 16 443 242 main-sys.c
Tss2_Sys_NV_Certify_Complete test/fuzz/main-sys.c 75 322 9 20 789 365 main-sys.c
Tss2_Sys_Sign_Complete test/fuzz/main-sys.c 74 323 9 20 754 351 main-sys.c
Tss2_Sys_Vendor_TCG_Test_Prepare test/fuzz/main-sys.c 65 332 7 17 481 256 main-sys.c
Tss2_Sys_Vendor_TCG_Test_Complete test/fuzz/main-sys.c 60 337 7 17 456 245 main-sys.c
Tss2_Sys_Duplicate_Complete test/fuzz/main-sys.c 62 335 7 17 526 273 main-sys.c
Tss2_Sys_DictionaryAttackLockReset_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_SequenceUpdate_Prepare test/fuzz/main-sys.c 66 331 7 17 510 267 main-sys.c
Tss2_Sys_DictionaryAttackParameters_Prepare test/fuzz/main-sys.c 64 333 7 16 447 244 main-sys.c
Tss2_Sys_PolicyLocality_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_PCR_Allocate_Prepare test/fuzz/main-sys.c 69 328 7 18 591 299 main-sys.c
Tss2_Sys_NV_Extend_Prepare test/fuzz/main-sys.c 66 331 7 17 512 268 main-sys.c
Tss2_Sys_NV_ReadLock_Prepare test/fuzz/main-sys.c 64 333 7 16 443 242 main-sys.c
Tss2_Sys_StartAuthSession_Prepare test/fuzz/main-sys.c 72 325 7 19 653 313 main-sys.c
Tss2_Sys_PolicyPassword_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_ACT_SetTimeout_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_RSA_Decrypt_Complete test/fuzz/main-sys.c 60 337 7 17 456 245 main-sys.c
Tss2_Sys_PolicyNV_Prepare test/fuzz/main-sys.c 66 331 7 17 518 271 main-sys.c
Tss2_Sys_HierarchyChangeAuth_Prepare test/fuzz/main-sys.c 66 331 7 17 510 267 main-sys.c
Tss2_Sys_Unseal_Complete test/fuzz/main-sys.c 60 337 7 17 456 245 main-sys.c
Tss2_Sys_FlushContext_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_CreateLoaded_Complete test/fuzz/main-sys.c 88 309 10 21 1411 567 main-sys.c
Tss2_Sys_CertifyCreation_Prepare test/fuzz/main-sys.c 73 324 7 20 650 321 main-sys.c
Tss2_Sys_Load_Prepare test/fuzz/main-sys.c 93 304 10 21 1094 465 main-sys.c
Tss2_Sys_SetPrimaryPolicy_Prepare test/fuzz/main-sys.c 66 331 7 17 512 268 main-sys.c
Tss2_Sys_EvictControl_Prepare test/fuzz/main-sys.c 64 333 7 16 445 243 main-sys.c
Tss2_Sys_EncryptDecrypt2_Prepare test/fuzz/main-sys.c 68 329 7 17 583 295 main-sys.c
Tss2_Sys_GetTime_Complete test/fuzz/main-sys.c 75 322 9 20 789 365 main-sys.c
Tss2_Sys_AC_GetCapability_Complete test/fuzz/main-sys.c 61 336 7 18 493 259 main-sys.c
Tss2_Sys_Commit_Prepare test/fuzz/main-sys.c 69 328 7 18 611 307 main-sys.c
Tss2_Sys_EvictControl_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_ZGen_2Phase_Prepare test/fuzz/main-sys.c 68 329 7 18 573 293 main-sys.c
Tss2_Sys_Unseal_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_NV_SetBits_Prepare test/fuzz/main-sys.c 66 331 7 16 473 255 main-sys.c
Tss2_Sys_Quote_Complete test/fuzz/main-sys.c 75 322 9 20 789 365 main-sys.c
Tss2_Sys_Startup_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_MakeCredential_Prepare test/fuzz/main-sys.c 67 330 7 17 552 283 main-sys.c
Tss2_Sys_StartAuthSession_Complete test/fuzz/main-sys.c 60 337 7 17 458 246 main-sys.c
Tss2_Sys_Policy_AC_SendSelect_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_ReadClock_Complete test/fuzz/main-sys.c 63 334 7 17 518 271 main-sys.c
Tss2_Sys_TestParms_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_CreatePrimary_Prepare test/fuzz/main-sys.c 101 296 10 22 1337 560 main-sys.c
Tss2_Sys_PolicyNameHash_Prepare test/fuzz/main-sys.c 66 331 7 17 510 267 main-sys.c
Tss2_Sys_Clear_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_PolicySigned_Complete test/fuzz/main-sys.c 62 335 7 18 518 270 main-sys.c
Tss2_Sys_NV_Certify_Prepare test/fuzz/main-sys.c 71 326 7 20 593 298 main-sys.c
Tss2_Sys_NV_ChangeAuth_Prepare test/fuzz/main-sys.c 66 331 7 17 510 267 main-sys.c
Tss2_Sys_ClearControl_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_MAC_Complete test/fuzz/main-sys.c 60 337 7 17 456 245 main-sys.c
Tss2_Sys_PCR_Event_Prepare test/fuzz/main-sys.c 66 331 7 17 510 267 main-sys.c
Tss2_Sys_AC_Send_Complete test/fuzz/main-sys.c 59 338 7 17 423 232 main-sys.c
Tss2_Sys_ContextSave_Complete test/fuzz/main-sys.c 63 334 7 18 523 273 main-sys.c
Tss2_Sys_LoadExternal_Complete test/fuzz/main-sys.c 60 337 7 17 458 246 main-sys.c
Tss2_Sys_GetRandom_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_ECDH_ZGen_Prepare test/fuzz/main-sys.c 68 329 7 18 564 289 main-sys.c
Tss2_Sys_HMAC_Start_Complete test/fuzz/main-sys.c 58 339 7 16 395 221 main-sys.c
Tss2_Sys_ClockRateAdjust_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_ECDH_KeyGen_Complete test/fuzz/main-sys.c 62 335 7 18 526 273 main-sys.c
Tss2_Sys_MAC_Start_Complete test/fuzz/main-sys.c 58 339 7 16 395 221 main-sys.c
Tss2_Sys_EventSequenceComplete_Complete test/fuzz/main-sys.c 69 328 8 19 588 293 main-sys.c
Tss2_Sys_Duplicate_Prepare test/fuzz/main-sys.c 70 327 7 19 580 285 main-sys.c
Tss2_Sys_NV_Read_Complete test/fuzz/main-sys.c 60 337 7 17 456 245 main-sys.c
Tss2_Sys_NV_ChangeAuth_Complete test/fuzz/main-sys.c 58 339 7 14 393 220 main-sys.c
Tss2_Sys_NV_UndefineSpace_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_AC_GetCapability_Prepare test/fuzz/main-sys.c 65 332 7 16 472 253 main-sys.c
Tss2_Sys_ClockSet_Prepare test/fuzz/main-sys.c 66 331 7 16 471 254 main-sys.c
Tss2_Sys_PolicyTicket_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_PolicyCommandCode_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_PolicyTemplate_Prepare test/fuzz/main-sys.c 66 331 7 17 510 267 main-sys.c
Tss2_Sys_GetTime_Prepare test/fuzz/main-sys.c 71 326 7 20 587 295 main-sys.c
Tss2_Sys_PCR_Read_Prepare test/fuzz/main-sys.c 69 328 7 18 587 297 main-sys.c
Tss2_Sys_MakeCredential_Complete test/fuzz/main-sys.c 61 336 7 17 491 259 main-sys.c
Tss2_Sys_MAC_Prepare test/fuzz/main-sys.c 66 331 7 17 512 268 main-sys.c
Tss2_Sys_Quote_Prepare test/fuzz/main-sys.c 76 321 7 21 734 352 main-sys.c
Tss2_Sys_Shutdown_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_PolicyTicket_Prepare test/fuzz/main-sys.c 70 327 7 18 661 326 main-sys.c
Tss2_Sys_EventSequenceComplete_Prepare test/fuzz/main-sys.c 66 331 7 17 512 268 main-sys.c
Tss2_Sys_PolicyNameHash_Complete test/fuzz/main-sys.c 58 339 7 14 393 220 main-sys.c
Tss2_Sys_GetCapability_Prepare test/fuzz/main-sys.c 64 333 7 16 445 243 main-sys.c
Tss2_Sys_PolicyPassword_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_SetCommandCodeAuditStatus_Prepare test/fuzz/main-sys.c 67 330 7 17 539 279 main-sys.c
Tss2_Sys_PolicyNV_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_ECDH_ZGen_Complete test/fuzz/main-sys.c 62 335 7 18 524 272 main-sys.c
Tss2_Sys_ClockRateAdjust_Prepare test/fuzz/main-sys.c 65 332 7 16 470 252 main-sys.c
Tss2_Sys_NV_Extend_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_PolicyCpHash_Complete test/fuzz/main-sys.c 58 339 7 14 393 220 main-sys.c
Tss2_Sys_ChangePPS_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_Startup_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_ContextLoad_Complete test/fuzz/main-sys.c 58 339 7 16 395 221 main-sys.c
Tss2_Sys_SequenceComplete_Prepare test/fuzz/main-sys.c 66 331 7 17 512 268 main-sys.c
Tss2_Sys_Load_Complete test/fuzz/main-sys.c 60 337 7 17 458 246 main-sys.c
Tss2_Sys_ChangeEPS_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_HMAC_Complete test/fuzz/main-sys.c 60 337 7 17 456 245 main-sys.c
Tss2_Sys_PP_Commands_Prepare test/fuzz/main-sys.c 66 331 7 17 510 268 main-sys.c
Tss2_Sys_PolicyPCR_Prepare test/fuzz/main-sys.c 71 326 7 19 660 325 main-sys.c
Tss2_Sys_PCR_SetAuthPolicy_Prepare test/fuzz/main-sys.c 66 331 7 17 514 269 main-sys.c
Tss2_Sys_PolicyAuthValue_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_ECC_Parameters_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_PCR_Allocate_Complete test/fuzz/main-sys.c 59 338 7 16 429 235 main-sys.c
Tss2_Sys_PolicyDuplicationSelect_Prepare test/fuzz/main-sys.c 67 330 7 17 544 280 main-sys.c
Tss2_Sys_GetCommandAuditDigest_Prepare test/fuzz/main-sys.c 71 326 7 20 587 295 main-sys.c
Tss2_Sys_GetCommandAuditDigest_Complete test/fuzz/main-sys.c 75 322 9 20 789 365 main-sys.c
Tss2_Sys_Shutdown_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_PolicyAuthorize_Prepare test/fuzz/main-sys.c 69 328 7 18 619 310 main-sys.c
Tss2_Sys_PolicyCounterTimer_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_NV_GlobalWriteLock_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_ReadPublic_Complete test/fuzz/main-sys.c 87 310 10 21 1376 553 main-sys.c
Tss2_Sys_RSA_Decrypt_Prepare test/fuzz/main-sys.c 72 325 7 20 627 310 main-sys.c
Tss2_Sys_LoadExternal_Prepare test/fuzz/main-sys.c 98 299 10 21 1244 518 main-sys.c
Tss2_Sys_PolicyPhysicalPresence_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_PCR_Reset_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_PolicyCommandCode_Prepare test/fuzz/main-sys.c 64 333 7 16 443 242 main-sys.c
Tss2_Sys_IncrementalSelfTest_Complete test/fuzz/main-sys.c 60 337 7 17 463 247 main-sys.c
Tss2_Sys_ActivateCredential_Prepare test/fuzz/main-sys.c 67 330 7 17 554 284 main-sys.c
Tss2_Sys_PCR_Event_Complete test/fuzz/main-sys.c 69 328 8 19 588 293 main-sys.c
Tss2_Sys_NV_Write_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_FirmwareRead_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_HashSequenceStart_Complete test/fuzz/main-sys.c 58 339 7 16 395 221 main-sys.c
Tss2_Sys_Clear_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_ACT_SetTimeout_Prepare test/fuzz/main-sys.c 64 333 7 16 443 242 main-sys.c
Tss2_Sys_SetCommandCodeAuditStatus_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_Certify_Complete test/fuzz/main-sys.c 75 322 9 20 789 365 main-sys.c
Tss2_Sys_EncryptDecrypt_Prepare test/fuzz/main-sys.c 68 329 7 17 583 295 main-sys.c
Tss2_Sys_PCR_Extend_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_PCR_Read_Complete test/fuzz/main-sys.c 65 332 7 19 644 317 main-sys.c
Tss2_Sys_EncryptDecrypt_Complete test/fuzz/main-sys.c 61 336 7 17 491 259 main-sys.c
Tss2_Sys_NV_WriteLock_Prepare test/fuzz/main-sys.c 64 333 7 16 443 242 main-sys.c
Tss2_Sys_NV_ReadPublic_Prepare test/fuzz/main-sys.c 64 333 7 16 441 241 main-sys.c
Tss2_Sys_PolicyGetDigest_Complete test/fuzz/main-sys.c 60 337 7 17 456 245 main-sys.c
Tss2_Sys_RSA_Encrypt_Prepare test/fuzz/main-sys.c 72 325 7 20 627 310 main-sys.c
Tss2_Sys_Import_Complete test/fuzz/main-sys.c 60 337 7 17 456 245 main-sys.c
Tss2_Sys_NV_UndefineSpace_Prepare test/fuzz/main-sys.c 64 333 7 16 443 242 main-sys.c
Tss2_Sys_ChangePPS_Complete test/fuzz/main-sys.c 58 339 7 16 393 220 main-sys.c
Tss2_Sys_Rewrap_Prepare test/fuzz/main-sys.c 68 329 7 17 596 300 main-sys.c
Tss2_Sys_GetRandom_Complete test/fuzz/main-sys.c 60 337 7 17 456 245 main-sys.c
Tss2_Sys_ObjectChangeAuth_Complete test/fuzz/main-sys.c 60 337 7 17 456 245 main-sys.c
Tss2_Sys_HierarchyControl_Prepare test/fuzz/main-sys.c 65 332 7 16 472 253 main-sys.c

Fuzzer details

Fuzzer: Tss2_Sys_ContextLoad_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05850.0%
gold[1:9]21.72%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+5648.2%
All colors116100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 230 Tss2_Sys_ContextLoad_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ContextLoad.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_ContextLoad_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ContextLoad.c:26

Runtime coverage analysis

Covered functions
39
Functions that are reachable but not covered
30
Reachable functions
69
Percentage of reachable functions covered
56.52%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ContextLoad_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ContextLoad.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 3
src/tss2-mu/tpms-types.c 1
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_DictionaryAttackLockReset_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_DictionaryAttackLockReset_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_DictionaryAttackLockReset.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_DictionaryAttackLockReset_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_DictionaryAttackLockReset.c:26

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_DictionaryAttackLockReset_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_DictionaryAttackLockReset.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyOR_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyOR_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyOR.c:54
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyOR_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyOR.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyAuthorizeNV_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyAuthorizeNV_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyAuthorizeNV.c:61
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyAuthorizeNV_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyAuthorizeNV.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyLocality_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05246.4%
gold[1:9]21.78%
yellow[10:29]00.0%
greenyellow[30:49]5650.0%
lawngreen50+21.78%
All colors112100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 254 Tss2_Sys_PolicyLocality_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyLocality.c:23
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
36
Functions that are reachable but not covered
29
Reachable functions
65
Percentage of reachable functions covered
55.38%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyLocality_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyLocality.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpma-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_SetAuthPolicy_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PCR_SetAuthPolicy_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_SetAuthPolicy.c:81
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PCR_SetAuthPolicy_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_SetAuthPolicy.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ObjectChangeAuth_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04740.1%
gold[1:9]65.12%
yellow[10:29]54.27%
greenyellow[30:49]32.56%
lawngreen50+5647.8%
All colors117100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 420 Tss2_Sys_ObjectChangeAuth_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ObjectChangeAuth.c:24
0 0 None 0 95 Tss2_Sys_ObjectChangeAuth_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ObjectChangeAuth.c:43
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ObjectChangeAuth_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ObjectChangeAuth.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_HMAC_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04741.2%
gold[1:9]65.26%
yellow[10:29]54.38%
greenyellow[30:49]00.0%
lawngreen50+5649.1%
All colors114100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 420 Tss2_Sys_HMAC_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HMAC.c:24
0 0 None 0 170 Tss2_Sys_HMAC_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HMAC.c:40
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 7
test/fuzz/Tss2_Sys_HMAC_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_HMAC.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_GetSessionAuditDigest_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08566.9%
gold[1:9]4132.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.78%
All colors127100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
284 284 2 :

['Tss2_MU_TPMT_SIGNATURE_Unmarshal', 'Tss2_MU_TPM2B_ATTEST_Unmarshal']

284 284 Tss2_Sys_GetSessionAuditDigest_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetSessionAuditDigest.c:92
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 284 382 Tss2_Sys_GetSessionAuditDigest_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetSessionAuditDigest.c:88
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
50
Reachable functions
75
Percentage of reachable functions covered
33.33%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_GetSessionAuditDigest_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_GetSessionAuditDigest.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 5
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_FieldUpgradeData_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04540.1%
gold[1:9]65.35%
yellow[10:29]54.46%
greenyellow[30:49]32.67%
lawngreen50+5347.3%
All colors112100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 270 Tss2_Sys_FieldUpgradeData_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FieldUpgradeData.c:22
0 0 None 0 95 Tss2_Sys_FieldUpgradeData_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FieldUpgradeData.c:29
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_FieldUpgradeData_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FieldUpgradeData.c:26

Runtime coverage analysis

Covered functions
37
Functions that are reachable but not covered
28
Reachable functions
65
Percentage of reachable functions covered
56.92%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_FieldUpgradeData_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_FieldUpgradeData.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_CreateLoaded_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05545.0%
gold[1:9]64.91%
yellow[10:29]00.0%
greenyellow[30:49]54.09%
lawngreen50+5645.9%
All colors122100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 470 Tss2_Sys_CreateLoaded_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreateLoaded.c:24
0 0 None 0 470 Tss2_Sys_CreateLoaded_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreateLoaded.c:27
0 0 None 0 220 Tss2_Sys_CreateLoaded_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreateLoaded.c:40
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
42
Functions that are reachable but not covered
28
Reachable functions
70
Percentage of reachable functions covered
60.0%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 7
test/fuzz/Tss2_Sys_CreateLoaded_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_CreateLoaded.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 3
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyCounterTimer_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04739.8%
gold[1:9]65.08%
yellow[10:29]54.23%
greenyellow[30:49]54.23%
lawngreen50+5546.6%
All colors118100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 495 Tss2_Sys_PolicyCounterTimer_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyCounterTimer.c:25
0 0 None 0 245 Tss2_Sys_PolicyCounterTimer_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyCounterTimer.c:38
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyCounterTimer_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyCounterTimer.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_SetAlgorithmSet_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_SetAlgorithmSet_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SetAlgorithmSet.c:54
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_SetAlgorithmSet_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_SetAlgorithmSet.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_EC_Ephemeral_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06661.1%
gold[1:9]4137.9%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.92%
All colors108100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
192 192 2 :

['Tss2_MU_TPM2B_ECC_POINT_Unmarshal', 'Tss2_MU_UINT16_Unmarshal']

192 192 Tss2_Sys_EC_Ephemeral_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EC_Ephemeral.c:54
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 192 290 Tss2_Sys_EC_Ephemeral_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EC_Ephemeral.c:50
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
37
Reachable functions
62
Percentage of reachable functions covered
40.32%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_EC_Ephemeral_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_EC_Ephemeral.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyAuthorize_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyAuthorize_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyAuthorize.c:103
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyAuthorize_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyAuthorize.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_SequenceUpdate_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04955.6%
gold[1:9]3843.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.13%
All colors88100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_SequenceUpdate_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SequenceUpdate.c:63
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 1
src/tss2-sys/sysapi_util.c 2
test/fuzz/Tss2_Sys_SequenceUpdate_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_SequenceUpdate.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_CertifyX509_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08867.6%
gold[1:9]4131.5%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.76%
All colors130100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
373 373 3 :

['Tss2_MU_TPM2B_DIGEST_Unmarshal', 'Tss2_MU_TPMT_SIGNATURE_Unmarshal', 'Tss2_MU_TPM2B_MAX_BUFFER_Unmarshal']

373 373 Tss2_Sys_CertifyX509_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CertifyX509.c:82
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 373 471 Tss2_Sys_CertifyX509_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CertifyX509.c:78
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
51
Reachable functions
76
Percentage of reachable functions covered
32.89%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_CertifyX509_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_CertifyX509.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 3
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 5
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_SequenceComplete_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06460.3%
gold[1:9]4138.6%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.94%
All colors106100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
202 202 2 :

['Tss2_MU_TPM2B_DIGEST_Unmarshal', 'Tss2_MU_TPMT_TK_HASHCHECK_Unmarshal']

202 202 Tss2_Sys_SequenceComplete_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SequenceComplete.c:78
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 202 300 Tss2_Sys_SequenceComplete_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SequenceComplete.c:74
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
36
Reachable functions
61
Percentage of reachable functions covered
40.98%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_SequenceComplete_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_SequenceComplete.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-mu/tpmt-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyNvWritten_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05246.4%
gold[1:9]21.78%
yellow[10:29]00.0%
greenyellow[30:49]5650.0%
lawngreen50+21.78%
All colors112100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 254 Tss2_Sys_PolicyNvWritten_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyNvWritten.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
36
Functions that are reachable but not covered
29
Reachable functions
65
Percentage of reachable functions covered
55.38%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyNvWritten_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyNvWritten.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Sign_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05844.9%
gold[1:9]64.65%
yellow[10:29]96.97%
greenyellow[30:49]00.0%
lawngreen50+5643.4%
All colors129100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 555 Tss2_Sys_Sign_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Sign.c:25
0 0 None 0 305 Tss2_Sys_Sign_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Sign.c:38
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
43
Functions that are reachable but not covered
29
Reachable functions
72
Percentage of reachable functions covered
59.72%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Sign_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Sign.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_HashSequenceStart_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04539.4%
gold[1:9]65.26%
yellow[10:29]97.89%
greenyellow[30:49]00.0%
lawngreen50+5447.3%
All colors114100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 345 Tss2_Sys_HashSequenceStart_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HashSequenceStart.c:23
0 0 None 0 170 Tss2_Sys_HashSequenceStart_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HashSequenceStart.c:33
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
37
Functions that are reachable but not covered
28
Reachable functions
65
Percentage of reachable functions covered
56.92%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_HashSequenceStart_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_HashSequenceStart.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Create_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08855.0%
gold[1:9]63.75%
yellow[10:29]00.0%
greenyellow[30:49]31.87%
lawngreen50+6339.3%
All colors160100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 1034 Tss2_Sys_Create_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Create.c:26
0 0 None 0 784 Tss2_Sys_Create_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Create.c:43
0 0 None 0 584 Tss2_Sys_Create_Prepare call site: 00102 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Create.c:60
0 0 None 0 227 Tss2_Sys_Create_Prepare call site: 00112 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Create.c:80
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46

Runtime coverage analysis

Covered functions
73
Functions that are reachable but not covered
28
Reachable functions
101
Percentage of reachable functions covered
72.28%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Create_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Create.c 1
src/tss2-mu/base-types.c 4
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 4
src/tss2-mu/tpms-types.c 4
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpma-types.c 1
src/tss2-mu/tpmu-types.c 3
src/tss2-mu/tpml-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Commit_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06861.8%
gold[1:9]4137.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.90%
All colors110100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
424 424 2 :

['Tss2_MU_TPM2B_ECC_POINT_Unmarshal', 'Tss2_MU_UINT16_Unmarshal']

424 424 Tss2_Sys_Commit_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Commit.c:104
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 424 522 Tss2_Sys_Commit_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Commit.c:100
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
37
Reachable functions
62
Percentage of reachable functions covered
40.32%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Commit_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Commit.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyAuthorizeNV_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05145.5%
gold[1:9]21.78%
yellow[10:29]00.0%
greenyellow[30:49]5750.8%
lawngreen50+21.78%
All colors112100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 331 Tss2_Sys_PolicyAuthorizeNV_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyAuthorizeNV.c:24
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyAuthorizeNV_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyAuthorizeNV.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_SelfTest_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_SelfTest_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SelfTest.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_SelfTest_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_SelfTest.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_EncryptDecrypt2_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06360.0%
gold[1:9]4139.0%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.95%
All colors105100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
178 178 2 :

['Tss2_MU_TPM2B_IV_Unmarshal', 'Tss2_MU_TPM2B_MAX_BUFFER_Unmarshal']

178 178 Tss2_Sys_EncryptDecrypt2_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EncryptDecrypt2.c:105
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 178 276 Tss2_Sys_EncryptDecrypt2_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EncryptDecrypt2.c:101
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
36
Reachable functions
61
Percentage of reachable functions covered
40.98%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_EncryptDecrypt2_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_EncryptDecrypt2.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_EC_Ephemeral_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_EC_Ephemeral_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EC_Ephemeral.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_EC_Ephemeral_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EC_Ephemeral.c:26

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_EC_Ephemeral_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_EC_Ephemeral.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ChangeEPS_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_ChangeEPS_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ChangeEPS.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ChangeEPS_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ChangeEPS.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Hash_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04741.2%
gold[1:9]65.26%
yellow[10:29]54.38%
greenyellow[30:49]00.0%
lawngreen50+5649.1%
All colors114100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 420 Tss2_Sys_Hash_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Hash.c:24
0 0 None 0 245 Tss2_Sys_Hash_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Hash.c:34
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 7
test/fuzz/Tss2_Sys_Hash_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Hash.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_GlobalWriteLock_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_NV_GlobalWriteLock_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_GlobalWriteLock.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_NV_GlobalWriteLock_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_GlobalWriteLock.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_CertifyX509_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05644.8%
gold[1:9]64.8%
yellow[10:29]54.0%
greenyellow[30:49]10.8%
lawngreen50+5745.6%
All colors125100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 534 Tss2_Sys_CertifyX509_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CertifyX509.c:26
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_CertifyX509_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CertifyX509.c:34

Runtime coverage analysis

Covered functions
43
Functions that are reachable but not covered
29
Reachable functions
72
Percentage of reachable functions covered
59.72%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 7
test/fuzz/Tss2_Sys_CertifyX509_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_CertifyX509.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PP_Commands_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PP_Commands_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PP_Commands.c:61
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PP_Commands_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PP_Commands.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ClearControl_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05246.4%
gold[1:9]21.78%
yellow[10:29]00.0%
greenyellow[30:49]5650.0%
lawngreen50+21.78%
All colors112100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 254 Tss2_Sys_ClearControl_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ClearControl.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_ClearControl_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ClearControl.c:27

Runtime coverage analysis

Covered functions
36
Functions that are reachable but not covered
29
Reachable functions
65
Percentage of reachable functions covered
55.38%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ClearControl_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ClearControl.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyOR_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04941.5%
gold[1:9]65.08%
yellow[10:29]00.0%
greenyellow[30:49]32.54%
lawngreen50+6050.8%
All colors118100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 295 Tss2_Sys_PolicyOR_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyOR.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00112 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
39
Functions that are reachable but not covered
28
Reachable functions
67
Percentage of reachable functions covered
58.21%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyOR_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyOR.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpml-types.c 1
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyRestart_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyRestart_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyRestart.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyRestart_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyRestart.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_StirRandom_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04540.1%
gold[1:9]65.35%
yellow[10:29]54.46%
greenyellow[30:49]32.67%
lawngreen50+5347.3%
All colors112100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 270 Tss2_Sys_StirRandom_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_StirRandom.c:22
0 0 None 0 95 Tss2_Sys_StirRandom_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_StirRandom.c:29
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
37
Functions that are reachable but not covered
28
Reachable functions
65
Percentage of reachable functions covered
56.92%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_StirRandom_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_StirRandom.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_VerifySignature_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06360.0%
gold[1:9]4139.0%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.95%
All colors105100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
113 113 1 :

['Tss2_MU_TPMT_TK_VERIFIED_Unmarshal']

113 113 Tss2_Sys_VerifySignature_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_VerifySignature.c:77
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 113 211 Tss2_Sys_VerifySignature_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_VerifySignature.c:73
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
36
Reachable functions
61
Percentage of reachable functions covered
40.98%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_VerifySignature_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_VerifySignature.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyCpHash_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04740.5%
gold[1:9]65.17%
yellow[10:29]86.89%
greenyellow[30:49]00.0%
lawngreen50+5547.4%
All colors116100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 345 Tss2_Sys_PolicyCpHash_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyCpHash.c:23
0 0 None 0 95 Tss2_Sys_PolicyCpHash_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyCpHash.c:36
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyCpHash_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyCpHash.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Import_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08353.2%
gold[1:9]95.76%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+6441.0%
All colors156100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 1120 Tss2_Sys_Import_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Import.c:27
0 0 None 0 870 Tss2_Sys_Import_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Import.c:40
0 0 None 0 706 Tss2_Sys_Import_Prepare call site: 00102 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Import.c:56
0 0 None 0 349 Tss2_Sys_Import_Prepare call site: 00106 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Import.c:74
0 0 None 0 185 Tss2_Sys_Import_Prepare call site: 00134 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Import.c:89
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72

Runtime coverage analysis

Covered functions
67
Functions that are reachable but not covered
28
Reachable functions
95
Percentage of reachable functions covered
70.53%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Import_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Import.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 5
src/tss2-mu/tpmt-types.c 3
src/tss2-mu/tpma-types.c 1
src/tss2-mu/tpmu-types.c 4
src/tss2-mu/tpms-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_HierarchyControl_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_HierarchyControl_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HierarchyControl.c:61
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_HierarchyControl_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_HierarchyControl.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_ReadPublic_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red07263.1%
gold[1:9]4135.9%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.87%
All colors114100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
235 235 2 :

['Tss2_MU_TPM2B_NV_PUBLIC_Unmarshal', 'Tss2_MU_TPM2B_NAME_Unmarshal']

235 235 Tss2_Sys_NV_ReadPublic_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_ReadPublic.c:54
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 235 333 Tss2_Sys_NV_ReadPublic_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_ReadPublic.c:50
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
39
Reachable functions
64
Percentage of reachable functions covered
39.06%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_NV_ReadPublic_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_ReadPublic.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 3
src/tss2-mu/tpms-types.c 1
src/tss2-mu/tpma-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicySecret_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06661.1%
gold[1:9]4137.9%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.92%
All colors108100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
202 202 2 :

['Tss2_MU_TPM2B_TIMEOUT_Unmarshal', 'Tss2_MU_TPMT_TK_AUTH_Unmarshal']

202 202 Tss2_Sys_PolicySecret_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySecret.c:109
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 202 300 Tss2_Sys_PolicySecret_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySecret.c:105
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
37
Reachable functions
62
Percentage of reachable functions covered
40.32%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicySecret_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicySecret.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_HMAC_Start_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04741.2%
gold[1:9]65.26%
yellow[10:29]54.38%
greenyellow[30:49]10.87%
lawngreen50+5548.2%
All colors114100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 420 Tss2_Sys_HMAC_Start_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HMAC_Start.c:24
0 0 None 0 170 Tss2_Sys_HMAC_Start_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HMAC_Start.c:40
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 7
test/fuzz/Tss2_Sys_HMAC_Start_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_HMAC_Start.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyAuthValue_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyAuthValue_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyAuthValue.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyAuthValue_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyAuthValue.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_CreatePrimary_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red010670.1%
gold[1:9]4429.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.66%
All colors151100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
917 917 5 :

['Tss2_MU_TPM2B_DIGEST_Unmarshal', 'Tss2_MU_TPM2B_PUBLIC_Unmarshal', 'Tss2_MU_TPM2B_CREATION_DATA_Unmarshal', 'Tss2_MU_TPMT_TK_CREATION_Unmarshal', 'Tss2_MU_TPM2B_NAME_Unmarshal']

917 917 Tss2_Sys_CreatePrimary_Complete call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreatePrimary.c:129
76 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

76 152 CommonComplete call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 917 1091 Tss2_Sys_CreatePrimary_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreatePrimary.c:119
0 0 None 76 154 CommonComplete call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
28
Functions that are reachable but not covered
68
Reachable functions
96
Percentage of reachable functions covered
29.17%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_CreatePrimary_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_CreatePrimary.c 1
src/tss2-mu/base-types.c 4
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 4
src/tss2-mu/tpmt-types.c 3
src/tss2-mu/tpma-types.c 2
src/tss2-mu/tpmu-types.c 3
src/tss2-mu/tpms-types.c 4
src/tss2-mu/tpml-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ECDH_KeyGen_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_ECDH_KeyGen_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECDH_KeyGen.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_ECDH_KeyGen_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECDH_KeyGen.c:26

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ECDH_KeyGen_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ECDH_KeyGen.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_SelfTest_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05046.2%
gold[1:9]21.85%
yellow[10:29]00.0%
greenyellow[30:49]5450.0%
lawngreen50+21.85%
All colors108100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 179 Tss2_Sys_SelfTest_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SelfTest.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_SelfTest_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_SelfTest.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_StirRandom_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05557.2%
gold[1:9]4041.6%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.04%
All colors96100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00081 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00079 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_StirRandom_Complete call site: 00078 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_StirRandom.c:56
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00090 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_StirRandom_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_StirRandom.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_MAC_Start_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04741.2%
gold[1:9]65.26%
yellow[10:29]54.38%
greenyellow[30:49]10.87%
lawngreen50+5548.2%
All colors114100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 420 Tss2_Sys_MAC_Start_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MAC_Start.c:24
0 0 None 0 170 Tss2_Sys_MAC_Start_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MAC_Start.c:40
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 7
test/fuzz/Tss2_Sys_MAC_Start_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_MAC_Start.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyDuplicationSelect_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyDuplicationSelect_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyDuplicationSelect.c:87
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyDuplicationSelect_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyDuplicationSelect.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ZGen_2Phase_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06661.1%
gold[1:9]4137.9%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.92%
All colors108100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
232 232 1 :

['Tss2_MU_TPM2B_ECC_POINT_Unmarshal']

232 232 Tss2_Sys_ZGen_2Phase_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ZGen_2Phase.c:101
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 232 330 Tss2_Sys_ZGen_2Phase_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ZGen_2Phase.c:97
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
37
Reachable functions
62
Percentage of reachable functions covered
40.32%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ZGen_2Phase_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ZGen_2Phase.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_GetCapability_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red07764.7%
gold[1:9]4134.4%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.84%
All colors119100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
621 621 3 :

['Tss2_MU_UINT32_Unmarshal', 'Tss2_MU_UINT8_Unmarshal', 'Tss2_MU_TPMS_CAPABILITY_DATA_Unmarshal']

621 621 Tss2_Sys_GetCapability_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetCapability.c:71
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 621 719 Tss2_Sys_GetCapability_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetCapability.c:67
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
68
Reachable functions
93
Percentage of reachable functions covered
26.88%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_GetCapability_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_GetCapability.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 4
src/tss2-mu/tpms-types.c 2
src/tss2-mu/tpmu-types.c 1
src/tss2-mu/tpml-types.c 1
src/tss2-mu/tpma-types.c 1
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_UndefineSpaceSpecial_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05145.9%
gold[1:9]21.80%
yellow[10:29]00.0%
greenyellow[30:49]5650.4%
lawngreen50+21.80%
All colors111100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 256 Tss2_Sys_NV_UndefineSpaceSpecial_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_UndefineSpaceSpecial.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_UndefineSpaceSpecial_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_UndefineSpaceSpecial.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyGetDigest_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_PolicyGetDigest_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyGetDigest.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyGetDigest_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyGetDigest.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_TestParms_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06753.6%
gold[1:9]21.6%
yellow[10:29]32.4%
greenyellow[30:49]00.0%
lawngreen50+5342.4%
All colors125100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 308 Tss2_Sys_TestParms_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_TestParms.c:22
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
56
Functions that are reachable but not covered
29
Reachable functions
85
Percentage of reachable functions covered
65.88%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_TestParms_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_TestParms.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 3
src/tss2-mu/tpms-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_VerifySignature_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06747.5%
gold[1:9]74.96%
yellow[10:29]32.12%
greenyellow[30:49]85.67%
lawngreen50+5639.7%
All colors141100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 510 Tss2_Sys_VerifySignature_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_VerifySignature.c:24
0 0 None 0 260 Tss2_Sys_VerifySignature_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_VerifySignature.c:37
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
52
Functions that are reachable but not covered
29
Reachable functions
81
Percentage of reachable functions covered
64.2%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_VerifySignature_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_VerifySignature.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 5
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_UndefineSpaceSpecial_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_NV_UndefineSpaceSpecial_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_UndefineSpaceSpecial.c:54
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_NV_UndefineSpaceSpecial_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_UndefineSpaceSpecial.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Rewrap_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06360.0%
gold[1:9]4139.0%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.95%
All colors105100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
178 178 2 :

['Tss2_MU_TPM2B_PRIVATE_Unmarshal', 'Tss2_MU_TPM2B_ENCRYPTED_SECRET_Unmarshal']

178 178 Tss2_Sys_Rewrap_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Rewrap.c:111
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 178 276 Tss2_Sys_Rewrap_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Rewrap.c:107
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
36
Reachable functions
61
Percentage of reachable functions covered
40.98%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Rewrap_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Rewrap.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_AC_Send_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04739.8%
gold[1:9]65.08%
yellow[10:29]54.23%
greenyellow[30:49]32.54%
lawngreen50+5748.3%
All colors118100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 495 Tss2_Sys_AC_Send_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_AC_Send.c:25
0 0 None 0 95 Tss2_Sys_AC_Send_Prepare call site: 00100 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_AC_Send.c:50
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_AC_Send_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_AC_Send.c:29

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_AC_Send_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_AC_Send.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_DefineSpace_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_NV_DefineSpace_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_DefineSpace.c:84
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_NV_DefineSpace_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_DefineSpace.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_IncrementalSelfTest_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04439.6%
gold[1:9]65.40%
yellow[10:29]00.0%
greenyellow[30:49]32.70%
lawngreen50+5852.2%
All colors111100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 206 Tss2_Sys_IncrementalSelfTest_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_IncrementalSelfTest.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00105 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_IncrementalSelfTest_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_IncrementalSelfTest.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpml-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ContextSave_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_ContextSave_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ContextSave.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_ContextSave_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ContextSave.c:26

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ContextSave_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ContextSave.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_FirmwareRead_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
89 89 1 :

['Tss2_MU_TPM2B_MAX_BUFFER_Unmarshal']

89 89 Tss2_Sys_FirmwareRead_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FirmwareRead.c:53
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 89 187 Tss2_Sys_FirmwareRead_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FirmwareRead.c:49
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_FirmwareRead_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_FirmwareRead.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicySigned_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red07147.6%
gold[1:9]74.69%
yellow[10:29]32.01%
greenyellow[30:49]32.01%
lawngreen50+6543.6%
All colors149100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 988 Tss2_Sys_PolicySigned_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySigned.c:28
0 0 None 0 663 Tss2_Sys_PolicySigned_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySigned.c:47
0 0 None 0 499 Tss2_Sys_PolicySigned_Prepare call site: 00103 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySigned.c:63
0 0 None 0 335 Tss2_Sys_PolicySigned_Prepare call site: 00107 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySigned.c:78
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46

Runtime coverage analysis

Covered functions
53
Functions that are reachable but not covered
29
Reachable functions
82
Percentage of reachable functions covered
64.63%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicySigned_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicySigned.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 3
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 5
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_RSA_Encrypt_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
89 89 1 :

['Tss2_MU_TPM2B_PUBLIC_KEY_RSA_Unmarshal']

89 89 Tss2_Sys_RSA_Encrypt_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_RSA_Encrypt.c:93
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 89 187 Tss2_Sys_RSA_Encrypt_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_RSA_Encrypt.c:89
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_RSA_Encrypt_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_RSA_Encrypt.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_Increment_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05145.9%
gold[1:9]21.80%
yellow[10:29]00.0%
greenyellow[30:49]5650.4%
lawngreen50+21.80%
All colors111100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 256 Tss2_Sys_NV_Increment_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Increment.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_Increment_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_Increment.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Policy_AC_SendSelect_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05040.9%
gold[1:9]64.91%
yellow[10:29]54.09%
greenyellow[30:49]64.91%
lawngreen50+5545.0%
All colors122100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 746 Tss2_Sys_Policy_AC_SendSelect_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Policy_AC_SendSelect.c:26
0 0 None 0 496 Tss2_Sys_Policy_AC_SendSelect_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Policy_AC_SendSelect.c:39
0 0 None 0 332 Tss2_Sys_Policy_AC_SendSelect_Prepare call site: 00102 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Policy_AC_SendSelect.c:54
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
39
Functions that are reachable but not covered
28
Reachable functions
67
Percentage of reachable functions covered
58.21%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Policy_AC_SendSelect_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Policy_AC_SendSelect.c 1
src/tss2-mu/base-types.c 4
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_ReadLock_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_NV_ReadLock_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_ReadLock.c:54
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_NV_ReadLock_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_ReadLock.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_HierarchyChangeAuth_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04955.6%
gold[1:9]3843.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.13%
All colors88100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_HierarchyChangeAuth_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HierarchyChangeAuth.c:63
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 1
src/tss2-sys/sysapi_util.c 2
test/fuzz/Tss2_Sys_HierarchyChangeAuth_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_HierarchyChangeAuth.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_SetBits_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_NV_SetBits_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_SetBits.c:61
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_NV_SetBits_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_SetBits.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_FlushContext_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_FlushContext_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FlushContext.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_FlushContext_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FlushContext.c:26

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_FlushContext_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_FlushContext.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_FieldUpgradeData_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red07162.8%
gold[1:9]4136.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.88%
All colors113100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
244 244 1 :

['Tss2_MU_TPMT_HA_Unmarshal']

244 244 Tss2_Sys_FieldUpgradeData_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FieldUpgradeData.c:64
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 244 342 Tss2_Sys_FieldUpgradeData_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FieldUpgradeData.c:60
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
43
Reachable functions
68
Percentage of reachable functions covered
36.76%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_FieldUpgradeData_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_FieldUpgradeData.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 3
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_Read_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05346.0%
gold[1:9]21.73%
yellow[10:29]00.0%
greenyellow[30:49]5850.4%
lawngreen50+21.73%
All colors115100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 406 Tss2_Sys_NV_Read_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Read.c:25
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
36
Functions that are reachable but not covered
29
Reachable functions
65
Percentage of reachable functions covered
55.38%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_Read_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_Read.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ActivateCredential_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
89 89 1 :

['Tss2_MU_TPM2B_DIGEST_Unmarshal']

89 89 Tss2_Sys_ActivateCredential_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ActivateCredential.c:95
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 89 187 Tss2_Sys_ActivateCredential_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ActivateCredential.c:91
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ActivateCredential_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ActivateCredential.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_FieldUpgradeStart_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_FieldUpgradeStart_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FieldUpgradeStart.c:78
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_FieldUpgradeStart_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_FieldUpgradeStart.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_SetAuthValue_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04740.5%
gold[1:9]65.17%
yellow[10:29]54.31%
greenyellow[30:49]32.58%
lawngreen50+5547.4%
All colors116100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 345 Tss2_Sys_PCR_SetAuthValue_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_SetAuthValue.c:23
0 0 None 0 95 Tss2_Sys_PCR_SetAuthValue_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_SetAuthValue.c:36
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PCR_SetAuthValue_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_SetAuthValue.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Certify_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05543.6%
gold[1:9]97.14%
yellow[10:29]53.96%
greenyellow[30:49]00.0%
lawngreen50+5745.2%
All colors126100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 520 Tss2_Sys_Certify_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Certify.c:25
0 0 None 0 195 Tss2_Sys_Certify_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Certify.c:44
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
42
Functions that are reachable but not covered
29
Reachable functions
71
Percentage of reachable functions covered
59.15%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Certify_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Certify.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Create_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red010872.4%
gold[1:9]4026.8%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.67%
All colors149100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
917 917 5 :

['Tss2_MU_TPM2B_DIGEST_Unmarshal', 'Tss2_MU_TPM2B_PUBLIC_Unmarshal', 'Tss2_MU_TPMT_TK_CREATION_Unmarshal', 'Tss2_MU_TPM2B_CREATION_DATA_Unmarshal', 'Tss2_MU_TPM2B_PRIVATE_Unmarshal']

917 917 Tss2_Sys_Create_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Create.c:124
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00081 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 917 1015 Tss2_Sys_Create_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Create.c:120
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
72
Reachable functions
97
Percentage of reachable functions covered
25.77%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 1
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Create_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Create.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 4
src/tss2-mu/tpm2b-types.c 4
src/tss2-mu/tpmt-types.c 3
src/tss2-mu/tpma-types.c 2
src/tss2-mu/tpmu-types.c 3
src/tss2-mu/tpms-types.c 4
src/tss2-mu/tpml-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_Extend_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05542.9%
gold[1:9]64.68%
yellow[10:29]32.34%
greenyellow[30:49]64.68%
lawngreen50+5845.3%
All colors128100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 314 Tss2_Sys_PCR_Extend_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Extend.c:23
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 63 marshal_tab call site: 00110 /src/tpm2-tss/src/tss2-mu/tpmu-types.c:29

Runtime coverage analysis

Covered functions
46
Functions that are reachable but not covered
29
Reachable functions
75
Percentage of reachable functions covered
61.33%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PCR_Extend_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_Extend.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpml-types.c 1
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 3
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_SetAuthValue_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04955.6%
gold[1:9]3843.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.13%
All colors88100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PCR_SetAuthValue_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_SetAuthValue.c:63
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 1
src/tss2-sys/sysapi_util.c 2
test/fuzz/Tss2_Sys_PCR_SetAuthValue_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_SetAuthValue.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_FieldUpgradeStart_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06747.1%
gold[1:9]74.92%
yellow[10:29]32.11%
greenyellow[30:49]85.63%
lawngreen50+5740.1%
All colors142100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 585 Tss2_Sys_FieldUpgradeStart_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FieldUpgradeStart.c:25
0 0 None 0 260 Tss2_Sys_FieldUpgradeStart_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FieldUpgradeStart.c:43
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
52
Functions that are reachable but not covered
29
Reachable functions
81
Percentage of reachable functions covered
64.2%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_FieldUpgradeStart_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_FieldUpgradeStart.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 5
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_DefineSpace_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06046.1%
gold[1:9]64.61%
yellow[10:29]00.0%
greenyellow[30:49]86.15%
lawngreen50+5643.0%
All colors130100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 556 Tss2_Sys_NV_DefineSpace_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_DefineSpace.c:24
0 0 None 0 306 Tss2_Sys_NV_DefineSpace_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_DefineSpace.c:41
0 0 None 0 142 Tss2_Sys_NV_DefineSpace_Prepare call site: 00102 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_DefineSpace.c:57
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
42
Functions that are reachable but not covered
28
Reachable functions
70
Percentage of reachable functions covered
60.0%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_DefineSpace_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_DefineSpace.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 3
src/tss2-mu/tpms-types.c 1
src/tss2-mu/tpma-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyRestart_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_PolicyRestart_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyRestart.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyRestart_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyRestart.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyPCR_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyPCR_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyPCR.c:75
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyPCR_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyPCR.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Hash_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06460.3%
gold[1:9]4138.6%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.94%
All colors106100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
202 202 2 :

['Tss2_MU_TPM2B_DIGEST_Unmarshal', 'Tss2_MU_TPMT_TK_HASHCHECK_Unmarshal']

202 202 Tss2_Sys_Hash_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Hash.c:81
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 202 300 Tss2_Sys_Hash_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Hash.c:77
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
36
Reachable functions
61
Percentage of reachable functions covered
40.98%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Hash_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Hash.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-mu/tpmt-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ReadPublic_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_ReadPublic_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ReadPublic.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ReadPublic_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ReadPublic.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_Increment_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_NV_Increment_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Increment.c:54
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_NV_Increment_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_Increment.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ECC_Parameters_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red07263.1%
gold[1:9]4135.9%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.87%
All colors114100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
181 181 1 :

['Tss2_MU_TPMS_ALGORITHM_DETAIL_ECC_Unmarshal']

181 181 Tss2_Sys_ECC_Parameters_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECC_Parameters.c:53
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 181 279 Tss2_Sys_ECC_Parameters_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECC_Parameters.c:49
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
43
Reachable functions
68
Percentage of reachable functions covered
36.76%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ECC_Parameters_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ECC_Parameters.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpms-types.c 2
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_GetSessionAuditDigest_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05543.3%
gold[1:9]97.08%
yellow[10:29]53.93%
greenyellow[30:49]00.0%
lawngreen50+5845.6%
All colors127100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 595 Tss2_Sys_GetSessionAuditDigest_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetSessionAuditDigest.c:26
0 0 None 0 195 Tss2_Sys_GetSessionAuditDigest_Prepare call site: 00100 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetSessionAuditDigest.c:51
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
42
Functions that are reachable but not covered
29
Reachable functions
71
Percentage of reachable functions covered
59.15%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_GetSessionAuditDigest_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_GetSessionAuditDigest.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_CertifyCreation_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08566.9%
gold[1:9]4132.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.78%
All colors127100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
284 284 2 :

['Tss2_MU_TPMT_SIGNATURE_Unmarshal', 'Tss2_MU_TPM2B_ATTEST_Unmarshal']

284 284 Tss2_Sys_CertifyCreation_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CertifyCreation.c:99
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 284 382 Tss2_Sys_CertifyCreation_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CertifyCreation.c:95
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
50
Reachable functions
75
Percentage of reachable functions covered
33.33%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_CertifyCreation_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_CertifyCreation.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 5
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_WriteLock_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_NV_WriteLock_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_WriteLock.c:54
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_NV_WriteLock_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_WriteLock.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_Write_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04739.8%
gold[1:9]65.08%
yellow[10:29]54.23%
greenyellow[30:49]00.0%
lawngreen50+6050.8%
All colors118100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 495 Tss2_Sys_NV_Write_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Write.c:25
0 0 None 0 170 Tss2_Sys_NV_Write_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Write.c:44
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_Write_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_Write.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_SetPrimaryPolicy_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_SetPrimaryPolicy_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SetPrimaryPolicy.c:74
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_SetPrimaryPolicy_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_SetPrimaryPolicy.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyTemplate_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04955.6%
gold[1:9]3843.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.13%
All colors88100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyTemplate_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyTemplate.c:63
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 1
src/tss2-sys/sysapi_util.c 2
test/fuzz/Tss2_Sys_PolicyTemplate_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyTemplate.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_DictionaryAttackParameters_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_DictionaryAttackParameters_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_DictionaryAttackParameters.c:67
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_DictionaryAttackParameters_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_DictionaryAttackParameters.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyPhysicalPresence_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyPhysicalPresence_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyPhysicalPresence.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyPhysicalPresence_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyPhysicalPresence.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ClockSet_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_ClockSet_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ClockSet.c:53
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ClockSet_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ClockSet.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_GetTestResult_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06159.2%
gold[1:9]4139.8%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.97%
All colors103100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
165 165 2 :

['Tss2_MU_UINT32_Unmarshal', 'Tss2_MU_TPM2B_MAX_BUFFER_Unmarshal']

165 165 Tss2_Sys_GetTestResult_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTestResult.c:47
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 165 263 Tss2_Sys_GetTestResult_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTestResult.c:43
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_GetTestResult_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_GetTestResult.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicySecret_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05141.1%
gold[1:9]64.83%
yellow[10:29]00.0%
greenyellow[30:49]108.06%
lawngreen50+5745.9%
All colors124100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 823 Tss2_Sys_PolicySecret_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySecret.c:27
0 0 None 0 498 Tss2_Sys_PolicySecret_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySecret.c:46
0 0 None 0 334 Tss2_Sys_PolicySecret_Prepare call site: 00103 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySecret.c:62
0 0 None 0 170 Tss2_Sys_PolicySecret_Prepare call site: 00107 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySecret.c:73
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
39
Functions that are reachable but not covered
28
Reachable functions
67
Percentage of reachable functions covered
58.21%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicySecret_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicySecret.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_Reset_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PCR_Reset_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Reset.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PCR_Reset_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_Reset.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyNvWritten_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyNvWritten_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyNvWritten.c:54
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyNvWritten_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyNvWritten.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_SetAlgorithmSet_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05145.9%
gold[1:9]21.80%
yellow[10:29]00.0%
greenyellow[30:49]5650.4%
lawngreen50+21.80%
All colors111100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 256 Tss2_Sys_SetAlgorithmSet_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SetAlgorithmSet.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_SetAlgorithmSet_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_SetAlgorithmSet.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_Certify_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08566.9%
gold[1:9]4132.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.78%
All colors127100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
284 284 2 :

['Tss2_MU_TPMT_SIGNATURE_Unmarshal', 'Tss2_MU_TPM2B_ATTEST_Unmarshal']

284 284 Tss2_Sys_NV_Certify_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Certify.c:106
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 284 382 Tss2_Sys_NV_Certify_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Certify.c:102
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
50
Reachable functions
75
Percentage of reachable functions covered
33.33%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_NV_Certify_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_Certify.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 5
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Sign_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08266.1%
gold[1:9]4133.0%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.80%
All colors124100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
195 195 1 :

['Tss2_MU_TPMT_SIGNATURE_Unmarshal']

195 195 Tss2_Sys_Sign_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Sign.c:84
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 195 293 Tss2_Sys_Sign_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Sign.c:80
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
49
Reachable functions
74
Percentage of reachable functions covered
33.78%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Sign_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Sign.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 5
src/tss2-mu/tpms-types.c 1
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Vendor_TCG_Test_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04540.1%
gold[1:9]65.35%
yellow[10:29]87.14%
greenyellow[30:49]00.0%
lawngreen50+5347.3%
All colors112100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 270 Tss2_Sys_Vendor_TCG_Test_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Vendor_TCG_Test.c:22
0 0 None 0 95 Tss2_Sys_Vendor_TCG_Test_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Vendor_TCG_Test.c:29
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
37
Functions that are reachable but not covered
28
Reachable functions
65
Percentage of reachable functions covered
56.92%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Vendor_TCG_Test_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Vendor_TCG_Test.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Vendor_TCG_Test_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
89 89 1 :

['Tss2_MU_TPM2B_DATA_Unmarshal']

89 89 Tss2_Sys_Vendor_TCG_Test_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Vendor_TCG_Test.c:62
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 89 187 Tss2_Sys_Vendor_TCG_Test_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Vendor_TCG_Test.c:58
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Vendor_TCG_Test_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Vendor_TCG_Test.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Duplicate_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06661.1%
gold[1:9]4137.9%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.92%
All colors108100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
267 267 3 :

['Tss2_MU_TPM2B_PRIVATE_Unmarshal', 'Tss2_MU_TPM2B_DATA_Unmarshal', 'Tss2_MU_TPM2B_ENCRYPTED_SECRET_Unmarshal']

267 267 Tss2_Sys_Duplicate_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Duplicate.c:87
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 267 365 Tss2_Sys_Duplicate_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Duplicate.c:83
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
37
Reachable functions
62
Percentage of reachable functions covered
40.32%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Duplicate_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Duplicate.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 3
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_DictionaryAttackLockReset_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_DictionaryAttackLockReset_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_DictionaryAttackLockReset.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_DictionaryAttackLockReset_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_DictionaryAttackLockReset.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_SequenceUpdate_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04740.5%
gold[1:9]65.17%
yellow[10:29]54.31%
greenyellow[30:49]32.58%
lawngreen50+5547.4%
All colors116100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 345 Tss2_Sys_SequenceUpdate_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SequenceUpdate.c:23
0 0 None 0 95 Tss2_Sys_SequenceUpdate_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SequenceUpdate.c:36
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_SequenceUpdate_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_SequenceUpdate.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_DictionaryAttackParameters_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05145.1%
gold[1:9]21.76%
yellow[10:29]00.0%
greenyellow[30:49]5851.3%
lawngreen50+21.76%
All colors113100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 406 Tss2_Sys_DictionaryAttackParameters_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_DictionaryAttackParameters.c:25
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_DictionaryAttackParameters_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_DictionaryAttackParameters.c:29

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_DictionaryAttackParameters_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_DictionaryAttackParameters.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyLocality_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyLocality_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyLocality.c:54
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyLocality_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyLocality.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_Allocate_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04941.5%
gold[1:9]65.08%
yellow[10:29]32.54%
greenyellow[30:49]00.0%
lawngreen50+6050.8%
All colors118100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 313 Tss2_Sys_PCR_Allocate_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Allocate.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00112 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
41
Functions that are reachable but not covered
28
Reachable functions
69
Percentage of reachable functions covered
59.42%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PCR_Allocate_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_Allocate.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpml-types.c 1
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_Extend_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04740.1%
gold[1:9]65.12%
yellow[10:29]54.27%
greenyellow[30:49]32.56%
lawngreen50+5647.8%
All colors117100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 420 Tss2_Sys_NV_Extend_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Extend.c:24
0 0 None 0 95 Tss2_Sys_NV_Extend_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Extend.c:43
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_Extend_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_Extend.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_ReadLock_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05145.9%
gold[1:9]21.80%
yellow[10:29]00.0%
greenyellow[30:49]5650.4%
lawngreen50+21.80%
All colors111100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 256 Tss2_Sys_NV_ReadLock_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_ReadLock.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_ReadLock_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_ReadLock.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_StartAuthSession_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05743.5%
gold[1:9]107.63%
yellow[10:29]00.0%
greenyellow[30:49]53.81%
lawngreen50+5945.0%
All colors131100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 822 Tss2_Sys_StartAuthSession_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_StartAuthSession.c:28
0 0 None 0 497 Tss2_Sys_StartAuthSession_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_StartAuthSession.c:50
0 0 None 0 333 Tss2_Sys_StartAuthSession_Prepare call site: 00103 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_StartAuthSession.c:66
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
44
Functions that are reachable but not covered
28
Reachable functions
72
Percentage of reachable functions covered
61.11%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_StartAuthSession_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_StartAuthSession.c 1
src/tss2-mu/base-types.c 4
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyPassword_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyPassword_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyPassword.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyPassword_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyPassword.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ACT_SetTimeout_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_ACT_SetTimeout_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ACT_SetTimeout.c:51
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ACT_SetTimeout_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ACT_SetTimeout.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_RSA_Decrypt_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
89 89 1 :

['Tss2_MU_TPM2B_PUBLIC_KEY_RSA_Unmarshal']

89 89 Tss2_Sys_RSA_Decrypt_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_RSA_Decrypt.c:94
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 89 187 Tss2_Sys_RSA_Decrypt_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_RSA_Decrypt.c:90
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_RSA_Decrypt_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_RSA_Decrypt.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyNV_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04739.1%
gold[1:9]65.0%
yellow[10:29]54.16%
greenyellow[30:49]54.16%
lawngreen50+5747.5%
All colors120100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 645 Tss2_Sys_PolicyNV_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyNV.c:27
0 0 None 0 245 Tss2_Sys_PolicyNV_Prepare call site: 00100 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyNV.c:52
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyNV_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyNV.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_HierarchyChangeAuth_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04740.5%
gold[1:9]65.17%
yellow[10:29]54.31%
greenyellow[30:49]32.58%
lawngreen50+5547.4%
All colors116100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 345 Tss2_Sys_HierarchyChangeAuth_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HierarchyChangeAuth.c:23
0 0 None 0 95 Tss2_Sys_HierarchyChangeAuth_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HierarchyChangeAuth.c:36
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_HierarchyChangeAuth_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_HierarchyChangeAuth.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Unseal_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
89 89 1 :

['Tss2_MU_TPM2B_SENSITIVE_DATA_Unmarshal']

89 89 Tss2_Sys_Unseal_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Unseal.c:53
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 89 187 Tss2_Sys_Unseal_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Unseal.c:49
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Unseal_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Unseal.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_FlushContext_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_FlushContext_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FlushContext.c:46
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_FlushContext_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_FlushContext.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_CreateLoaded_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08765.9%
gold[1:9]4433.3%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.75%
All colors132100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
573 573 3 :

['Tss2_MU_TPM2B_PUBLIC_Unmarshal', 'Tss2_MU_TPM2B_PRIVATE_Unmarshal', 'Tss2_MU_TPM2B_NAME_Unmarshal']

573 573 Tss2_Sys_CreateLoaded_Complete call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreateLoaded.c:90
76 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

76 152 CommonComplete call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 573 747 Tss2_Sys_CreateLoaded_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreateLoaded.c:80
0 0 None 76 154 CommonComplete call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
28
Functions that are reachable but not covered
60
Reachable functions
88
Percentage of reachable functions covered
31.82%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_CreateLoaded_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_CreateLoaded.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 4
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpma-types.c 1
src/tss2-mu/tpmu-types.c 3
src/tss2-mu/tpms-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_CertifyCreation_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06045.1%
gold[1:9]64.51%
yellow[10:29]43.00%
greenyellow[30:49]53.75%
lawngreen50+5843.6%
All colors133100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 719 Tss2_Sys_CertifyCreation_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CertifyCreation.c:27
0 0 None 0 394 Tss2_Sys_CertifyCreation_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CertifyCreation.c:46
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
44
Functions that are reachable but not covered
29
Reachable functions
73
Percentage of reachable functions covered
60.27%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_CertifyCreation_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_CertifyCreation.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Load_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red07451.3%
gold[1:9]64.16%
yellow[10:29]32.08%
greenyellow[30:49]00.0%
lawngreen50+6142.3%
All colors144100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 702 Tss2_Sys_Load_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Load.c:24
0 0 None 0 452 Tss2_Sys_Load_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Load.c:37
0 0 None 0 288 Tss2_Sys_Load_Prepare call site: 00102 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Load.c:53
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
65
Functions that are reachable but not covered
28
Reachable functions
93
Percentage of reachable functions covered
69.89%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Load_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Load.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 3
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpma-types.c 1
src/tss2-mu/tpmu-types.c 3
src/tss2-mu/tpms-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_SetPrimaryPolicy_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04741.2%
gold[1:9]65.26%
yellow[10:29]54.38%
greenyellow[30:49]10.87%
lawngreen50+5548.2%
All colors114100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 420 Tss2_Sys_SetPrimaryPolicy_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SetPrimaryPolicy.c:24
0 0 None 0 170 Tss2_Sys_SetPrimaryPolicy_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SetPrimaryPolicy.c:40
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 7
test/fuzz/Tss2_Sys_SetPrimaryPolicy_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_SetPrimaryPolicy.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_EvictControl_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05145.5%
gold[1:9]21.78%
yellow[10:29]00.0%
greenyellow[30:49]5750.8%
lawngreen50+21.78%
All colors112100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 331 Tss2_Sys_EvictControl_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EvictControl.c:24
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_EvictControl_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EvictControl.c:28

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_EvictControl_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_EvictControl.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_EncryptDecrypt2_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05142.5%
gold[1:9]65.0%
yellow[10:29]00.0%
greenyellow[30:49]54.16%
lawngreen50+5848.3%
All colors120100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 657 Tss2_Sys_EncryptDecrypt2_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EncryptDecrypt2.c:26
0 0 None 0 407 Tss2_Sys_EncryptDecrypt2_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EncryptDecrypt2.c:40
0 0 None 0 95 Tss2_Sys_EncryptDecrypt2_Prepare call site: 00107 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EncryptDecrypt2.c:70
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
40
Functions that are reachable but not covered
28
Reachable functions
68
Percentage of reachable functions covered
58.82%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 7
test/fuzz/Tss2_Sys_EncryptDecrypt2_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_EncryptDecrypt2.c 1
src/tss2-mu/base-types.c 4
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_GetTime_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08566.9%
gold[1:9]4132.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.78%
All colors127100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
284 284 2 :

['Tss2_MU_TPMT_SIGNATURE_Unmarshal', 'Tss2_MU_TPM2B_ATTEST_Unmarshal']

284 284 Tss2_Sys_GetTime_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTime.c:84
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 284 382 Tss2_Sys_GetTime_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTime.c:80
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
50
Reachable functions
75
Percentage of reachable functions covered
33.33%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_GetTime_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_GetTime.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 5
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_AC_GetCapability_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06360.0%
gold[1:9]4139.0%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.95%
All colors105100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
176 176 2 :

['Tss2_MU_TPML_AC_CAPABILITIES_Unmarshal', 'Tss2_MU_UINT8_Unmarshal']

176 176 Tss2_Sys_AC_GetCapability_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_AC_GetCapability.c:68
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 176 274 Tss2_Sys_AC_GetCapability_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_AC_GetCapability.c:64
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
36
Reachable functions
61
Percentage of reachable functions covered
40.98%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_AC_GetCapability_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_AC_GetCapability.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpml-types.c 1
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Commit_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05744.5%
gold[1:9]64.68%
yellow[10:29]53.90%
greenyellow[30:49]00.0%
lawngreen50+6046.8%
All colors128100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 695 Tss2_Sys_Commit_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Commit.c:25
0 0 None 0 445 Tss2_Sys_Commit_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Commit.c:38
0 0 None 0 259 Tss2_Sys_Commit_Prepare call site: 00102 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Commit.c:53
0 0 None 0 95 Tss2_Sys_Commit_Prepare call site: 00112 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Commit.c:68
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
41
Functions that are reachable but not covered
28
Reachable functions
69
Percentage of reachable functions covered
59.42%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Commit_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Commit.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 3
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_EvictControl_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_EvictControl_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EvictControl.c:61
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_EvictControl_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_EvictControl.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ZGen_2Phase_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05442.8%
gold[1:9]64.76%
yellow[10:29]53.96%
greenyellow[30:49]53.96%
lawngreen50+5644.4%
All colors126100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 703 Tss2_Sys_ZGen_2Phase_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ZGen_2Phase.c:26
0 0 None 0 453 Tss2_Sys_ZGen_2Phase_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ZGen_2Phase.c:39
0 0 None 0 267 Tss2_Sys_ZGen_2Phase_Prepare call site: 00102 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ZGen_2Phase.c:55
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
40
Functions that are reachable but not covered
28
Reachable functions
68
Percentage of reachable functions covered
58.82%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ZGen_2Phase_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ZGen_2Phase.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Unseal_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_Unseal_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Unseal.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Unseal_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Unseal.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_SetBits_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05346.4%
gold[1:9]21.75%
yellow[10:29]00.0%
greenyellow[30:49]5750.0%
lawngreen50+21.75%
All colors114100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 331 Tss2_Sys_NV_SetBits_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_SetBits.c:24
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
36
Functions that are reachable but not covered
30
Reachable functions
66
Percentage of reachable functions covered
54.55%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_SetBits_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_SetBits.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 3
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Quote_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08566.9%
gold[1:9]4132.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.78%
All colors127100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
284 284 2 :

['Tss2_MU_TPMT_SIGNATURE_Unmarshal', 'Tss2_MU_TPM2B_ATTEST_Unmarshal']

284 284 Tss2_Sys_Quote_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Quote.c:89
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 284 382 Tss2_Sys_Quote_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Quote.c:85
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
50
Reachable functions
75
Percentage of reachable functions covered
33.33%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Quote_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Quote.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 5
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Startup_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_Startup_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Startup.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Startup_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Startup.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_MakeCredential_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05041.6%
gold[1:9]65.0%
yellow[10:29]00.0%
greenyellow[30:49]86.66%
lawngreen50+5646.6%
All colors120100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 509 Tss2_Sys_MakeCredential_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MakeCredential.c:24
0 0 None 0 259 Tss2_Sys_MakeCredential_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MakeCredential.c:37
0 0 None 0 95 Tss2_Sys_MakeCredential_Prepare call site: 00102 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MakeCredential.c:53
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
39
Functions that are reachable but not covered
28
Reachable functions
67
Percentage of reachable functions covered
58.21%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_MakeCredential_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_MakeCredential.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_StartAuthSession_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05856.3%
gold[1:9]4442.7%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.97%
All colors103100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
89 89 1 :

['Tss2_MU_TPM2B_NONCE_Unmarshal']

89 89 Tss2_Sys_StartAuthSession_Complete call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_StartAuthSession.c:126
76 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

76 152 CommonComplete call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 89 263 Tss2_Sys_StartAuthSession_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_StartAuthSession.c:115
0 0 None 76 154 CommonComplete call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
28
Functions that are reachable but not covered
32
Reachable functions
60
Percentage of reachable functions covered
46.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_StartAuthSession_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_StartAuthSession.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Policy_AC_SendSelect_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_Policy_AC_SendSelect_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Policy_AC_SendSelect.c:101
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Policy_AC_SendSelect_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Policy_AC_SendSelect.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ReadClock_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06360.0%
gold[1:9]4139.0%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.95%
All colors105100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
126 126 1 :

['Tss2_MU_TPMS_TIME_INFO_Unmarshal']

126 126 Tss2_Sys_ReadClock_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ReadClock.c:46
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 126 224 Tss2_Sys_ReadClock_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ReadClock.c:42
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
38
Reachable functions
63
Percentage of reachable functions covered
39.68%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ReadClock_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ReadClock.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 3
src/tss2-mu/base-types.c 3
src/tss2-mu/tpms-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_TestParms_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_TestParms_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_TestParms.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_TestParms_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_TestParms.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_CreatePrimary_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08855.0%
gold[1:9]63.75%
yellow[10:29]00.0%
greenyellow[30:49]31.87%
lawngreen50+6339.3%
All colors160100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 1034 Tss2_Sys_CreatePrimary_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreatePrimary.c:26
0 0 None 0 1034 Tss2_Sys_CreatePrimary_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreatePrimary.c:29
0 0 None 0 784 Tss2_Sys_CreatePrimary_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreatePrimary.c:42
0 0 None 0 584 Tss2_Sys_CreatePrimary_Prepare call site: 00102 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreatePrimary.c:58
0 0 None 0 227 Tss2_Sys_CreatePrimary_Prepare call site: 00112 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreatePrimary.c:77
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72

Runtime coverage analysis

Covered functions
73
Functions that are reachable but not covered
28
Reachable functions
101
Percentage of reachable functions covered
72.28%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_CreatePrimary_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_CreatePrimary.c 1
src/tss2-mu/base-types.c 4
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 4
src/tss2-mu/tpms-types.c 4
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpma-types.c 1
src/tss2-mu/tpmu-types.c 3
src/tss2-mu/tpml-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyNameHash_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04740.5%
gold[1:9]65.17%
yellow[10:29]86.89%
greenyellow[30:49]00.0%
lawngreen50+5547.4%
All colors116100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 345 Tss2_Sys_PolicyNameHash_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyNameHash.c:23
0 0 None 0 95 Tss2_Sys_PolicyNameHash_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyNameHash.c:36
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyNameHash_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyNameHash.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Clear_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_Clear_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Clear.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Clear_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Clear.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicySigned_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06661.6%
gold[1:9]4037.3%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.93%
All colors107100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
202 202 2 :

['Tss2_MU_TPM2B_TIMEOUT_Unmarshal', 'Tss2_MU_TPMT_TK_AUTH_Unmarshal']

202 202 Tss2_Sys_PolicySigned_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySigned.c:124
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00081 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 202 300 Tss2_Sys_PolicySigned_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySigned.c:120
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
37
Reachable functions
62
Percentage of reachable functions covered
40.32%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 1
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicySigned_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicySigned.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_Certify_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05542.6%
gold[1:9]64.65%
yellow[10:29]107.75%
greenyellow[30:49]00.0%
lawngreen50+5844.9%
All colors129100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 745 Tss2_Sys_NV_Certify_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Certify.c:28
0 0 None 0 345 Tss2_Sys_NV_Certify_Prepare call site: 00100 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Certify.c:53
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
42
Functions that are reachable but not covered
29
Reachable functions
71
Percentage of reachable functions covered
59.15%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_Certify_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_Certify.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_ChangeAuth_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04740.5%
gold[1:9]65.17%
yellow[10:29]54.31%
greenyellow[30:49]32.58%
lawngreen50+5547.4%
All colors116100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 345 Tss2_Sys_NV_ChangeAuth_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_ChangeAuth.c:23
0 0 None 0 95 Tss2_Sys_NV_ChangeAuth_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_ChangeAuth.c:36
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_ChangeAuth_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_ChangeAuth.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ClearControl_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_ClearControl_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ClearControl.c:54
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ClearControl_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ClearControl.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_MAC_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
89 89 1 :

['Tss2_MU_TPM2B_DIGEST_Unmarshal']

89 89 Tss2_Sys_MAC_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MAC.c:80
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 89 187 Tss2_Sys_MAC_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MAC.c:76
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_MAC_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_MAC.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_Event_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04740.5%
gold[1:9]65.17%
yellow[10:29]54.31%
greenyellow[30:49]32.58%
lawngreen50+5547.4%
All colors116100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 345 Tss2_Sys_PCR_Event_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Event.c:23
0 0 None 0 95 Tss2_Sys_PCR_Event_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Event.c:36
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PCR_Event_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_Event.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_AC_Send_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05857.9%
gold[1:9]4141.0%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.0%
All colors100100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
87 87 1 :

['Tss2_MU_TPMS_AC_OUTPUT_Unmarshal']

87 87 Tss2_Sys_AC_Send_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_AC_Send.c:83
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 87 185 Tss2_Sys_AC_Send_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_AC_Send.c:79
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
34
Reachable functions
59
Percentage of reachable functions covered
42.37%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_AC_Send_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_AC_Send.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ContextSave_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06560.7%
gold[1:9]4138.3%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.93%
All colors107100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
130 130 1 :

['Tss2_MU_TPMS_CONTEXT_Unmarshal']

130 130 Tss2_Sys_ContextSave_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ContextSave.c:53
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 130 228 Tss2_Sys_ContextSave_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ContextSave.c:49
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
38
Reachable functions
63
Percentage of reachable functions covered
39.68%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ContextSave_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ContextSave.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 3
src/tss2-mu/base-types.c 4
src/tss2-mu/tpms-types.c 1
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_LoadExternal_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05856.3%
gold[1:9]4442.7%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.97%
All colors103100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
89 89 1 :

['Tss2_MU_TPM2B_NAME_Unmarshal']

89 89 Tss2_Sys_LoadExternal_Complete call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_LoadExternal.c:100
76 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

76 152 CommonComplete call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 89 263 Tss2_Sys_LoadExternal_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_LoadExternal.c:89
0 0 None 76 154 CommonComplete call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
28
Functions that are reachable but not covered
32
Reachable functions
60
Percentage of reachable functions covered
46.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_LoadExternal_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_LoadExternal.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_GetRandom_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_GetRandom_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetRandom.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_GetRandom_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_GetRandom.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ECDH_ZGen_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05343.4%
gold[1:9]64.91%
yellow[10:29]86.55%
greenyellow[30:49]00.0%
lawngreen50+5545.0%
All colors122100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 367 Tss2_Sys_ECDH_ZGen_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECDH_ZGen.c:23
0 0 None 0 117 Tss2_Sys_ECDH_ZGen_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECDH_ZGen.c:36
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_ECDH_ZGen_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECDH_ZGen.c:27

Runtime coverage analysis

Covered functions
40
Functions that are reachable but not covered
28
Reachable functions
68
Percentage of reachable functions covered
58.82%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ECDH_ZGen_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ECDH_ZGen.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_HMAC_Start_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05354.0%
gold[1:9]4444.8%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.02%
All colors98100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
76 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

76 152 CommonComplete call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 76 154 CommonComplete call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 174 Tss2_Sys_HMAC_Start_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HMAC_Start.c:76
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
28
Functions that are reachable but not covered
30
Reachable functions
58
Percentage of reachable functions covered
48.28%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_HMAC_Start_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_HMAC_Start.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ClockRateAdjust_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_ClockRateAdjust_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ClockRateAdjust.c:53
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ClockRateAdjust_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ClockRateAdjust.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ECDH_KeyGen_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06661.1%
gold[1:9]4137.9%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.92%
All colors108100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
232 232 1 :

['Tss2_MU_TPM2B_ECC_POINT_Unmarshal']

232 232 Tss2_Sys_ECDH_KeyGen_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECDH_KeyGen.c:54
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 232 330 Tss2_Sys_ECDH_KeyGen_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECDH_KeyGen.c:50
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
37
Reachable functions
62
Percentage of reachable functions covered
40.32%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ECDH_KeyGen_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ECDH_KeyGen.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_MAC_Start_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05354.0%
gold[1:9]4444.8%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.02%
All colors98100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
76 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

76 152 CommonComplete call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 76 154 CommonComplete call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 174 Tss2_Sys_MAC_Start_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MAC_Start.c:76
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
28
Functions that are reachable but not covered
30
Reachable functions
58
Percentage of reachable functions covered
48.28%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_MAC_Start_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_MAC_Start.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_EventSequenceComplete_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red07363.4%
gold[1:9]4135.6%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.86%
All colors115100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
150 150 1 :

['Tss2_MU_TPML_DIGEST_VALUES_Unmarshal']

150 150 Tss2_Sys_EventSequenceComplete_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EventSequenceComplete.c:76
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 150 248 Tss2_Sys_EventSequenceComplete_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EventSequenceComplete.c:72
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
44
Reachable functions
69
Percentage of reachable functions covered
36.23%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_EventSequenceComplete_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_EventSequenceComplete.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpml-types.c 1
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 3
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Duplicate_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05041.3%
gold[1:9]97.43%
yellow[10:29]54.13%
greenyellow[30:49]00.0%
lawngreen50+5747.1%
All colors121100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 510 Tss2_Sys_Duplicate_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Duplicate.c:25
0 0 None 0 185 Tss2_Sys_Duplicate_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Duplicate.c:44
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
42
Functions that are reachable but not covered
28
Reachable functions
70
Percentage of reachable functions covered
60.0%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Duplicate_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Duplicate.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_Read_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
89 89 1 :

['Tss2_MU_TPM2B_MAX_NV_BUFFER_Unmarshal']

89 89 Tss2_Sys_NV_Read_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Read.c:74
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 89 187 Tss2_Sys_NV_Read_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Read.c:70
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_NV_Read_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_Read.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_ChangeAuth_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04955.6%
gold[1:9]3843.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.13%
All colors88100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_NV_ChangeAuth_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_ChangeAuth.c:63
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 1
src/tss2-sys/sysapi_util.c 2
test/fuzz/Tss2_Sys_NV_ChangeAuth_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_ChangeAuth.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_UndefineSpace_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_NV_UndefineSpace_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_UndefineSpace.c:54
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_NV_UndefineSpace_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_UndefineSpace.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_AC_GetCapability_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05346.4%
gold[1:9]21.75%
yellow[10:29]00.0%
greenyellow[30:49]5750.0%
lawngreen50+21.75%
All colors114100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 331 Tss2_Sys_AC_GetCapability_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_AC_GetCapability.c:24
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_AC_GetCapability_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_AC_GetCapability.c:28

Runtime coverage analysis

Covered functions
36
Functions that are reachable but not covered
29
Reachable functions
65
Percentage of reachable functions covered
55.38%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_AC_GetCapability_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_AC_GetCapability.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ClockSet_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05346.9%
gold[1:9]21.76%
yellow[10:29]00.0%
greenyellow[30:49]5649.5%
lawngreen50+21.76%
All colors113100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 256 Tss2_Sys_ClockSet_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ClockSet.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_ClockSet_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ClockSet.c:27

Runtime coverage analysis

Covered functions
36
Functions that are reachable but not covered
30
Reachable functions
66
Percentage of reachable functions covered
54.55%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ClockSet_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ClockSet.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 3
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyTicket_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05557.2%
gold[1:9]4041.6%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.04%
All colors96100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00081 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyTicket_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyTicket.c:119
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00090 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 1
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyTicket_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyTicket.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyCommandCode_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyCommandCode_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyCommandCode.c:54
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyCommandCode_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyCommandCode.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyTemplate_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04740.5%
gold[1:9]65.17%
yellow[10:29]54.31%
greenyellow[30:49]32.58%
lawngreen50+5547.4%
All colors116100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 345 Tss2_Sys_PolicyTemplate_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyTemplate.c:23
0 0 None 0 95 Tss2_Sys_PolicyTemplate_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyTemplate.c:36
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyTemplate_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyTemplate.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_GetTime_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05543.6%
gold[1:9]97.14%
yellow[10:29]53.96%
greenyellow[30:49]00.0%
lawngreen50+5745.2%
All colors126100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 520 Tss2_Sys_GetTime_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTime.c:25
0 0 None 0 195 Tss2_Sys_GetTime_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTime.c:44
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
42
Functions that are reachable but not covered
29
Reachable functions
71
Percentage of reachable functions covered
59.15%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_GetTime_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_GetTime.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_Read_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04942.2%
gold[1:9]65.17%
yellow[10:29]32.58%
greenyellow[30:49]00.0%
lawngreen50+5850.0%
All colors116100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 238 Tss2_Sys_PCR_Read_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Read.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00110 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
41
Functions that are reachable but not covered
28
Reachable functions
69
Percentage of reachable functions covered
59.42%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PCR_Read_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_Read.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpml-types.c 1
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_MakeCredential_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06360.0%
gold[1:9]4139.0%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.95%
All colors105100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
178 178 2 :

['Tss2_MU_TPM2B_ID_OBJECT_Unmarshal', 'Tss2_MU_TPM2B_ENCRYPTED_SECRET_Unmarshal']

178 178 Tss2_Sys_MakeCredential_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MakeCredential.c:87
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 178 276 Tss2_Sys_MakeCredential_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MakeCredential.c:83
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
36
Reachable functions
61
Percentage of reachable functions covered
40.98%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_MakeCredential_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_MakeCredential.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_MAC_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04741.2%
gold[1:9]65.26%
yellow[10:29]54.38%
greenyellow[30:49]00.0%
lawngreen50+5649.1%
All colors114100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 420 Tss2_Sys_MAC_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MAC.c:24
0 0 None 0 170 Tss2_Sys_MAC_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MAC.c:40
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 7
test/fuzz/Tss2_Sys_MAC_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_MAC.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Quote_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06246.6%
gold[1:9]64.51%
yellow[10:29]32.25%
greenyellow[30:49]00.0%
lawngreen50+6246.6%
All colors133100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 577 Tss2_Sys_Quote_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Quote.c:25
0 0 None 0 327 Tss2_Sys_Quote_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Quote.c:42
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
47
Functions that are reachable but not covered
29
Reachable functions
76
Percentage of reachable functions covered
61.84%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Quote_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Quote.c 1
src/tss2-mu/base-types.c 4
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 2
src/tss2-mu/tpms-types.c 2
src/tss2-mu/tpml-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Shutdown_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_Shutdown_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Shutdown.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Shutdown_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Shutdown.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyTicket_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05944.6%
gold[1:9]64.54%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+6750.7%
All colors132100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 947 Tss2_Sys_PolicyTicket_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyTicket.c:27
0 0 None 0 697 Tss2_Sys_PolicyTicket_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyTicket.c:40
0 0 None 0 533 Tss2_Sys_PolicyTicket_Prepare call site: 00102 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyTicket.c:56
0 0 None 0 369 Tss2_Sys_PolicyTicket_Prepare call site: 00106 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyTicket.c:71
0 0 None 0 205 Tss2_Sys_PolicyTicket_Prepare call site: 00110 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyTicket.c:86
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46

Runtime coverage analysis

Covered functions
42
Functions that are reachable but not covered
28
Reachable functions
70
Percentage of reachable functions covered
60.0%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyTicket_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyTicket.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 4
src/tss2-mu/tpmt-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_EventSequenceComplete_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04740.1%
gold[1:9]65.12%
yellow[10:29]54.27%
greenyellow[30:49]32.56%
lawngreen50+5647.8%
All colors117100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 420 Tss2_Sys_EventSequenceComplete_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EventSequenceComplete.c:24
0 0 None 0 95 Tss2_Sys_EventSequenceComplete_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EventSequenceComplete.c:43
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_EventSequenceComplete_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EventSequenceComplete.c:28

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_EventSequenceComplete_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_EventSequenceComplete.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyNameHash_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04955.6%
gold[1:9]3843.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.13%
All colors88100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyNameHash_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyNameHash.c:63
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 1
src/tss2-sys/sysapi_util.c 2
test/fuzz/Tss2_Sys_PolicyNameHash_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyNameHash.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_GetCapability_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05145.5%
gold[1:9]21.78%
yellow[10:29]00.0%
greenyellow[30:49]5750.8%
lawngreen50+21.78%
All colors112100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 331 Tss2_Sys_GetCapability_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetCapability.c:26
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetCapability_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetCapability.c:30

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_GetCapability_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_GetCapability.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyPassword_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_PolicyPassword_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyPassword.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyPassword_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyPassword.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_SetCommandCodeAuditStatus_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04639.3%
gold[1:9]65.12%
yellow[10:29]00.0%
greenyellow[30:49]97.69%
lawngreen50+5647.8%
All colors117100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 452 Tss2_Sys_SetCommandCodeAuditStatus_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SetCommandCodeAuditStatus.c:25
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00111 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
39
Functions that are reachable but not covered
28
Reachable functions
67
Percentage of reachable functions covered
58.21%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_SetCommandCodeAuditStatus_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_SetCommandCodeAuditStatus.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpml-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyNV_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyNV_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyNV.c:92
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyNV_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyNV.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ECDH_ZGen_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06560.7%
gold[1:9]4138.3%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.93%
All colors107100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
116 116 1 :

['Tss2_MU_TPM2B_ECC_POINT_Unmarshal']

116 116 Tss2_Sys_ECDH_ZGen_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECDH_ZGen.c:69
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 116 214 Tss2_Sys_ECDH_ZGen_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECDH_ZGen.c:65
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
37
Reachable functions
62
Percentage of reachable functions covered
40.32%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ECDH_ZGen_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ECDH_ZGen.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ClockRateAdjust_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05246.4%
gold[1:9]21.78%
yellow[10:29]00.0%
greenyellow[30:49]5650.0%
lawngreen50+21.78%
All colors112100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 254 Tss2_Sys_ClockRateAdjust_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ClockRateAdjust.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_ClockRateAdjust_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ClockRateAdjust.c:27

Runtime coverage analysis

Covered functions
36
Functions that are reachable but not covered
29
Reachable functions
65
Percentage of reachable functions covered
55.38%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ClockRateAdjust_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ClockRateAdjust.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_Extend_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_NV_Extend_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Extend.c:70
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_NV_Extend_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_Extend.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyCpHash_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04955.6%
gold[1:9]3843.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.13%
All colors88100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00000 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyCpHash_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyCpHash.c:63
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 1
src/tss2-sys/sysapi_util.c 2
test/fuzz/Tss2_Sys_PolicyCpHash_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyCpHash.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ChangePPS_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_ChangePPS_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ChangePPS.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_ChangePPS_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ChangePPS.c:26

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ChangePPS_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ChangePPS.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Startup_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_Startup_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Startup.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Startup_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Startup.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ContextLoad_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05354.0%
gold[1:9]4444.8%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.02%
All colors98100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
76 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

76 152 CommonComplete call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 76 154 CommonComplete call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 174 Tss2_Sys_ContextLoad_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ContextLoad.c:49
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
28
Functions that are reachable but not covered
30
Reachable functions
58
Percentage of reachable functions covered
48.28%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ContextLoad_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ContextLoad.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_SequenceComplete_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04740.1%
gold[1:9]65.12%
yellow[10:29]54.27%
greenyellow[30:49]00.0%
lawngreen50+5950.4%
All colors117100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 420 Tss2_Sys_SequenceComplete_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SequenceComplete.c:24
0 0 None 0 170 Tss2_Sys_SequenceComplete_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SequenceComplete.c:37
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_SequenceComplete_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_SequenceComplete.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Load_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05856.3%
gold[1:9]4442.7%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.97%
All colors103100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
89 89 1 :

['Tss2_MU_TPM2B_NAME_Unmarshal']

89 89 Tss2_Sys_Load_Complete call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Load.c:97
76 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

76 152 CommonComplete call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 89 263 Tss2_Sys_Load_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Load.c:87
0 0 None 76 154 CommonComplete call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
28
Functions that are reachable but not covered
32
Reachable functions
60
Percentage of reachable functions covered
46.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Load_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Load.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ChangeEPS_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_ChangeEPS_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ChangeEPS.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_ChangeEPS_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ChangeEPS.c:26

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ChangeEPS_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ChangeEPS.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_HMAC_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
89 89 1 :

['Tss2_MU_TPM2B_DIGEST_Unmarshal']

89 89 Tss2_Sys_HMAC_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HMAC.c:80
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 89 187 Tss2_Sys_HMAC_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HMAC.c:76
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_HMAC_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_HMAC.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PP_Commands_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04438.5%
gold[1:9]65.26%
yellow[10:29]00.0%
greenyellow[30:49]87.01%
lawngreen50+5649.1%
All colors114100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 377 Tss2_Sys_PP_Commands_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PP_Commands.c:24
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00108 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PP_Commands_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PP_Commands.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpml-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyPCR_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05443.5%
gold[1:9]64.83%
yellow[10:29]00.0%
greenyellow[30:49]32.41%
lawngreen50+6149.1%
All colors124100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 477 Tss2_Sys_PolicyPCR_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyPCR.c:24
0 0 None 0 227 Tss2_Sys_PolicyPCR_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyPCR.c:41
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
43
Functions that are reachable but not covered
28
Reachable functions
71
Percentage of reachable functions covered
60.56%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyPCR_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyPCR.c 1
src/tss2-mu/base-types.c 4
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-mu/tpml-types.c 1
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_SetAuthPolicy_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04739.8%
gold[1:9]65.08%
yellow[10:29]54.23%
greenyellow[30:49]54.23%
lawngreen50+5546.6%
All colors118100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 495 Tss2_Sys_PCR_SetAuthPolicy_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_SetAuthPolicy.c:25
0 0 None 0 245 Tss2_Sys_PCR_SetAuthPolicy_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_SetAuthPolicy.c:41
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
38
Functions that are reachable but not covered
28
Reachable functions
66
Percentage of reachable functions covered
57.58%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PCR_SetAuthPolicy_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_SetAuthPolicy.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyAuthValue_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_PolicyAuthValue_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyAuthValue.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyAuthValue_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyAuthValue.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ECC_Parameters_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_ECC_Parameters_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECC_Parameters.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_ECC_Parameters_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECC_Parameters.c:26

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ECC_Parameters_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ECC_Parameters.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_Allocate_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
302 302 2 :

['Tss2_MU_UINT32_Unmarshal', 'Tss2_MU_UINT8_Unmarshal']

302 302 Tss2_Sys_PCR_Allocate_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Allocate.c:68
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 302 400 Tss2_Sys_PCR_Allocate_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Allocate.c:64
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
34
Reachable functions
59
Percentage of reachable functions covered
42.37%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PCR_Allocate_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_Allocate.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyDuplicationSelect_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red04940.8%
gold[1:9]65.0%
yellow[10:29]54.16%
greenyellow[30:49]54.16%
lawngreen50+5545.8%
All colors120100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 582 Tss2_Sys_PolicyDuplicationSelect_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyDuplicationSelect.c:25
0 0 None 0 332 Tss2_Sys_PolicyDuplicationSelect_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyDuplicationSelect.c:38
0 0 None 0 168 Tss2_Sys_PolicyDuplicationSelect_Prepare call site: 00102 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyDuplicationSelect.c:54
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
39
Functions that are reachable but not covered
28
Reachable functions
67
Percentage of reachable functions covered
58.21%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyDuplicationSelect_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyDuplicationSelect.c 1
src/tss2-mu/base-types.c 4
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_GetCommandAuditDigest_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05543.6%
gold[1:9]97.14%
yellow[10:29]53.96%
greenyellow[30:49]00.0%
lawngreen50+5745.2%
All colors126100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 520 Tss2_Sys_GetCommandAuditDigest_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetCommandAuditDigest.c:25
0 0 None 0 195 Tss2_Sys_GetCommandAuditDigest_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetCommandAuditDigest.c:44
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
42
Functions that are reachable but not covered
29
Reachable functions
71
Percentage of reachable functions covered
59.15%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_GetCommandAuditDigest_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_GetCommandAuditDigest.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 1
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_GetCommandAuditDigest_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08566.9%
gold[1:9]4132.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.78%
All colors127100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
284 284 2 :

['Tss2_MU_TPMT_SIGNATURE_Unmarshal', 'Tss2_MU_TPM2B_ATTEST_Unmarshal']

284 284 Tss2_Sys_GetCommandAuditDigest_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetCommandAuditDigest.c:85
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 284 382 Tss2_Sys_GetCommandAuditDigest_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetCommandAuditDigest.c:81
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
50
Reachable functions
75
Percentage of reachable functions covered
33.33%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_GetCommandAuditDigest_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_GetCommandAuditDigest.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 5
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Shutdown_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_Shutdown_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Shutdown.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Shutdown_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Shutdown.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyAuthorize_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05643.7%
gold[1:9]64.68%
yellow[10:29]00.0%
greenyellow[30:49]53.90%
lawngreen50+6147.6%
All colors128100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 783 Tss2_Sys_PolicyAuthorize_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyAuthorize.c:26
0 0 None 0 533 Tss2_Sys_PolicyAuthorize_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyAuthorize.c:39
0 0 None 0 369 Tss2_Sys_PolicyAuthorize_Prepare call site: 00102 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyAuthorize.c:55
0 0 None 0 205 Tss2_Sys_PolicyAuthorize_Prepare call site: 00106 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyAuthorize.c:70
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
41
Functions that are reachable but not covered
28
Reachable functions
69
Percentage of reachable functions covered
59.42%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyAuthorize_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyAuthorize.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 3
src/tss2-mu/tpmt-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyCounterTimer_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PolicyCounterTimer_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyCounterTimer.c:78
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyCounterTimer_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyCounterTimer.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_GlobalWriteLock_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_NV_GlobalWriteLock_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_GlobalWriteLock.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_GlobalWriteLock_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_GlobalWriteLock.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ReadPublic_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08767.4%
gold[1:9]4131.7%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.77%
All colors129100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
573 573 2 :

['Tss2_MU_TPM2B_PUBLIC_Unmarshal', 'Tss2_MU_TPM2B_NAME_Unmarshal']

573 573 Tss2_Sys_ReadPublic_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ReadPublic.c:55
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 573 671 Tss2_Sys_ReadPublic_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ReadPublic.c:51
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
62
Reachable functions
87
Percentage of reachable functions covered
28.74%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ReadPublic_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ReadPublic.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 3
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpma-types.c 1
src/tss2-mu/tpmu-types.c 3
src/tss2-mu/tpms-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_RSA_Decrypt_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05844.9%
gold[1:9]64.65%
yellow[10:29]86.20%
greenyellow[30:49]10.77%
lawngreen50+5643.4%
All colors129100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 609 Tss2_Sys_RSA_Decrypt_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_RSA_Decrypt.c:25
0 0 None 0 359 Tss2_Sys_RSA_Decrypt_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_RSA_Decrypt.c:38
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 95 Tss2_Sys_RSA_Decrypt_Prepare call site: 00105 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_RSA_Decrypt.c:61
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
44
Functions that are reachable but not covered
28
Reachable functions
72
Percentage of reachable functions covered
61.11%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_RSA_Decrypt_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_RSA_Decrypt.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_LoadExternal_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08554.8%
gold[1:9]63.87%
yellow[10:29]42.58%
greenyellow[30:49]00.0%
lawngreen50+6038.7%
All colors155100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 785 Tss2_Sys_LoadExternal_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_LoadExternal.c:24
0 0 None 0 610 Tss2_Sys_LoadExternal_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_LoadExternal.c:32
0 0 None 0 363 Tss2_Sys_LoadExternal_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_LoadExternal.c:49
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
70
Functions that are reachable but not covered
28
Reachable functions
98
Percentage of reachable functions covered
71.43%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_LoadExternal_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_LoadExternal.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 4
src/tss2-mu/tpmt-types.c 3
src/tss2-mu/tpmu-types.c 4
src/tss2-mu/tpma-types.c 1
src/tss2-mu/tpms-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyPhysicalPresence_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_PolicyPhysicalPresence_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyPhysicalPresence.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyPhysicalPresence_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyPhysicalPresence.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_Reset_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_PCR_Reset_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Reset.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PCR_Reset_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_Reset.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyCommandCode_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05145.9%
gold[1:9]21.80%
yellow[10:29]00.0%
greenyellow[30:49]5650.4%
lawngreen50+21.80%
All colors111100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 256 Tss2_Sys_PolicyCommandCode_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyCommandCode.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_PolicyCommandCode_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyCommandCode.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_IncrementalSelfTest_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05857.9%
gold[1:9]4141.0%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.0%
All colors100100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
104 104 1 :

['Tss2_MU_TPML_ALG_Unmarshal']

104 104 Tss2_Sys_IncrementalSelfTest_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_IncrementalSelfTest.c:53
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 104 202 Tss2_Sys_IncrementalSelfTest_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_IncrementalSelfTest.c:49
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_IncrementalSelfTest_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_IncrementalSelfTest.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-mu/tpml-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ActivateCredential_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05041.3%
gold[1:9]64.95%
yellow[10:29]00.0%
greenyellow[30:49]86.61%
lawngreen50+5747.1%
All colors121100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 584 Tss2_Sys_ActivateCredential_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ActivateCredential.c:25
0 0 None 0 259 Tss2_Sys_ActivateCredential_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ActivateCredential.c:44
0 0 None 0 95 Tss2_Sys_ActivateCredential_Prepare call site: 00103 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ActivateCredential.c:61
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
39
Functions that are reachable but not covered
28
Reachable functions
67
Percentage of reachable functions covered
58.21%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ActivateCredential_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ActivateCredential.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_Event_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red07363.4%
gold[1:9]4135.6%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.86%
All colors115100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
150 150 1 :

['Tss2_MU_TPML_DIGEST_VALUES_Unmarshal']

150 150 Tss2_Sys_PCR_Event_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Event.c:69
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 150 248 Tss2_Sys_PCR_Event_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Event.c:65
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
44
Reachable functions
69
Percentage of reachable functions covered
36.23%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PCR_Event_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_Event.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpml-types.c 1
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 3
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_Write_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_NV_Write_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Write.c:77
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_NV_Write_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_Write.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_FirmwareRead_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_FirmwareRead_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FirmwareRead.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_FirmwareRead_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FirmwareRead.c:26

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_FirmwareRead_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_FirmwareRead.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_HashSequenceStart_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05354.0%
gold[1:9]4444.8%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.02%
All colors98100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
76 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

76 152 CommonComplete call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 76 154 CommonComplete call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 174 Tss2_Sys_HashSequenceStart_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HashSequenceStart.c:69
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44

Runtime coverage analysis

Covered functions
28
Functions that are reachable but not covered
30
Reachable functions
58
Percentage of reachable functions covered
48.28%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_HashSequenceStart_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_HashSequenceStart.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Clear_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_Clear_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Clear.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_Clear_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Clear.c:26

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Clear_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Clear.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ACT_SetTimeout_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05145.9%
gold[1:9]21.80%
yellow[10:29]00.0%
greenyellow[30:49]5650.4%
lawngreen50+21.80%
All colors111100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 256 Tss2_Sys_ACT_SetTimeout_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ACT_SetTimeout.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_ACT_SetTimeout_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ACT_SetTimeout.c:27

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_ACT_SetTimeout_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ACT_SetTimeout.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_SetCommandCodeAuditStatus_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_SetCommandCodeAuditStatus_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SetCommandCodeAuditStatus.c:71
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_SetCommandCodeAuditStatus_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_SetCommandCodeAuditStatus.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Certify_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red08566.9%
gold[1:9]4132.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.78%
All colors127100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
284 284 2 :

['Tss2_MU_TPMT_SIGNATURE_Unmarshal', 'Tss2_MU_TPM2B_ATTEST_Unmarshal']

284 284 Tss2_Sys_Certify_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Certify.c:84
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 284 382 Tss2_Sys_Certify_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Certify.c:80
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
50
Reachable functions
75
Percentage of reachable functions covered
33.33%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Certify_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Certify.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 2
src/tss2-mu/tpmu-types.c 5
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_EncryptDecrypt_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05141.4%
gold[1:9]64.87%
yellow[10:29]54.06%
greenyellow[30:49]32.43%
lawngreen50+5847.1%
All colors123100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 657 Tss2_Sys_EncryptDecrypt_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EncryptDecrypt.c:26
0 0 None 0 259 Tss2_Sys_EncryptDecrypt_Prepare call site: 00101 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EncryptDecrypt.c:51
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_EncryptDecrypt_Prepare call site: 00083 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EncryptDecrypt.c:30

Runtime coverage analysis

Covered functions
40
Functions that are reachable but not covered
28
Reachable functions
68
Percentage of reachable functions covered
58.82%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_EncryptDecrypt_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_EncryptDecrypt.c 1
src/tss2-mu/base-types.c 4
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_Extend_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_PCR_Extend_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Extend.c:54
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PCR_Extend_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_Extend.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PCR_Read_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red07263.1%
gold[1:9]4135.9%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.87%
All colors114100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
326 326 3 :

['Tss2_MU_UINT32_Unmarshal', 'Tss2_MU_TPML_PCR_SELECTION_Unmarshal', 'Tss2_MU_TPML_DIGEST_Unmarshal']

326 326 Tss2_Sys_PCR_Read_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Read.c:56
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 326 424 Tss2_Sys_PCR_Read_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Read.c:52
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
40
Reachable functions
65
Percentage of reachable functions covered
38.46%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PCR_Read_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PCR_Read.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 4
src/tss2-mu/tpml-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_EncryptDecrypt_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06360.0%
gold[1:9]4139.0%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.95%
All colors105100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
178 178 2 :

['Tss2_MU_TPM2B_IV_Unmarshal', 'Tss2_MU_TPM2B_MAX_BUFFER_Unmarshal']

178 178 Tss2_Sys_EncryptDecrypt_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EncryptDecrypt.c:100
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 178 276 Tss2_Sys_EncryptDecrypt_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EncryptDecrypt.c:96
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
36
Reachable functions
61
Percentage of reachable functions covered
40.98%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_EncryptDecrypt_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_EncryptDecrypt.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_WriteLock_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05145.9%
gold[1:9]21.80%
yellow[10:29]00.0%
greenyellow[30:49]5650.4%
lawngreen50+21.80%
All colors111100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 256 Tss2_Sys_NV_WriteLock_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_WriteLock.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_WriteLock_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_WriteLock.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_ReadPublic_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05146.7%
gold[1:9]21.83%
yellow[10:29]00.0%
greenyellow[30:49]5449.5%
lawngreen50+21.83%
All colors109100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 181 Tss2_Sys_NV_ReadPublic_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_ReadPublic.c:22
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_ReadPublic_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_ReadPublic.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_PolicyGetDigest_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
89 89 1 :

['Tss2_MU_TPM2B_DIGEST_Unmarshal']

89 89 Tss2_Sys_PolicyGetDigest_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyGetDigest.c:53
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 89 187 Tss2_Sys_PolicyGetDigest_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyGetDigest.c:49
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_PolicyGetDigest_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_PolicyGetDigest.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_RSA_Encrypt_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05844.9%
gold[1:9]64.65%
yellow[10:29]86.20%
greenyellow[30:49]10.77%
lawngreen50+5643.4%
All colors129100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 609 Tss2_Sys_RSA_Encrypt_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_RSA_Encrypt.c:25
0 0 None 0 359 Tss2_Sys_RSA_Encrypt_Prepare call site: 00096 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_RSA_Encrypt.c:38
0 0 None 0 103 CommonPreparePrologue call site: 00083 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:72
0 0 None 0 95 Tss2_Sys_RSA_Encrypt_Prepare call site: 00105 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_RSA_Encrypt.c:60
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
44
Functions that are reachable but not covered
28
Reachable functions
72
Percentage of reachable functions covered
61.11%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_RSA_Encrypt_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_RSA_Encrypt.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 2
src/tss2-mu/tpmt-types.c 1
src/tss2-mu/tpmu-types.c 2
src/tss2-mu/tpms-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Import_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
89 89 1 :

['Tss2_MU_TPM2B_PRIVATE_Unmarshal']

89 89 Tss2_Sys_Import_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Import.c:130
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 89 187 Tss2_Sys_Import_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Import.c:126
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_Import_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Import.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_NV_UndefineSpace_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05145.9%
gold[1:9]21.80%
yellow[10:29]00.0%
greenyellow[30:49]5650.4%
lawngreen50+21.80%
All colors111100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 256 Tss2_Sys_NV_UndefineSpace_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_UndefineSpace.c:23
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
35
Functions that are reachable but not covered
29
Reachable functions
64
Percentage of reachable functions covered
54.69%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_NV_UndefineSpace_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_NV_UndefineSpace.c 1
src/tss2-mu/base-types.c 2
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ChangePPS_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05556.7%
gold[1:9]4142.2%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+11.03%
All colors97100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 98 Tss2_Sys_ChangePPS_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ChangePPS.c:47
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17
0 0 None 0 0 Tss2_Sys_GetTctiContext call site: 00091 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c:21

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
33
Reachable functions
58
Percentage of reachable functions covered
43.1%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ChangePPS_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ChangePPS.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_Rewrap_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05342.4%
gold[1:9]64.8%
yellow[10:29]00.0%
greenyellow[30:49]54.0%
lawngreen50+6148.8%
All colors125100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 748 Tss2_Sys_Rewrap_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Rewrap.c:26
0 0 None 0 423 Tss2_Sys_Rewrap_Prepare call site: 00099 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Rewrap.c:45
0 0 None 0 259 Tss2_Sys_Rewrap_Prepare call site: 00103 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Rewrap.c:61
0 0 None 0 95 Tss2_Sys_Rewrap_Prepare call site: 00107 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Rewrap.c:76
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38

Runtime coverage analysis

Covered functions
40
Functions that are reachable but not covered
28
Reachable functions
68
Percentage of reachable functions covered
58.82%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_Rewrap_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_Rewrap.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/tpm2b-types.c 3
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_GetRandom_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
89 89 1 :

['Tss2_MU_TPM2B_DIGEST_Unmarshal']

89 89 Tss2_Sys_GetRandom_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetRandom.c:52
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 89 187 Tss2_Sys_GetRandom_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetRandom.c:48
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_GetRandom_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_GetRandom.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_ObjectChangeAuth_Complete

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red06058.8%
gold[1:9]4140.1%
yellow[10:29]00.0%
greenyellow[30:49]00.0%
lawngreen50+10.98%
All colors102100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
152 152 2 :

['Tss2_MU_TPM2_ST_Unmarshal', 'Tss2_MU_UINT32_Unmarshal']

152 152 CommonComplete call site: 00082 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:123
89 89 1 :

['Tss2_MU_TPM2B_PRIVATE_Unmarshal']

89 89 Tss2_Sys_ObjectChangeAuth_Complete call site: 00080 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ObjectChangeAuth.c:76
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 152 154 CommonComplete call site: 00080 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:114
0 0 None 89 187 Tss2_Sys_ObjectChangeAuth_Complete call site: 00079 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ObjectChangeAuth.c:72
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 63 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
25
Functions that are reachable but not covered
35
Reachable functions
60
Percentage of reachable functions covered
41.67%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 10
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 3
test/fuzz/Tss2_Sys_ObjectChangeAuth_Complete.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_ObjectChangeAuth.c 1
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-mu/base-types.c 3
src/tss2-mu/tpm2b-types.c 1
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Fuzzer: Tss2_Sys_HierarchyControl_Prepare

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
ColorRuntime hitcountCallsite countPercentage
red05246.0%
gold[1:9]21.76%
yellow[10:29]00.0%
greenyellow[30:49]5750.4%
lawngreen50+21.76%
All colors113100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
62 62 4 :

['log_stringlevel', 'case_insensitive_strncmp', 'strchr', 'strlen']

62 62 getLogLevel call site: 00017 /src/tpm2-tss/src/util/log.c:251
40 40 2 :

['getLogFile', 'fflush']

40 40 doLog call site: 00016 /src/tpm2-tss/src/util/log.c:214
8 8 1 :

['tcti_type_from_name']

16 16 get_test_opts_from_env call site: 00002 /src/tpm2-tss/test/integration/sys-test-options.c:130
4 4 2 :

['strerror', '__errno_location']

4 4 tcti_fuzzing_init call site: 00058 /src/tpm2-tss/test/integration/sys-context-util.c:160
2 2 1 :

['strtol']

2 2 get_test_opts_from_env call site: 00008 /src/tpm2-tss/test/integration/sys-test-options.c:139
0 0 None 6 6 get_test_opts_from_env call site: 00006 /src/tpm2-tss/test/integration/sys-test-options.c:133
0 0 None 4 4 get_test_opts_from_env call site: 00007 /src/tpm2-tss/test/integration/sys-test-options.c:136
0 0 None 0 329 Tss2_Sys_HierarchyControl_Prepare call site: 00082 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HierarchyControl.c:24
0 0 None 0 77 CopyCommandHeader call site: 00085 /src/tpm2-tss/src/tss2-sys/sysapi_util.c:46
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:38
0 0 None 0 67 Tss2_Sys_Initialize call site: 00068 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c:44
0 0 None 0 0 Tss2_Sys_GetContextSize call site: 00064 /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c:17

Runtime coverage analysis

Covered functions
36
Functions that are reachable but not covered
29
Reachable functions
65
Percentage of reachable functions covered
55.38%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions. This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
test/fuzz/main-sys.c 1
test/integration/sys-test-options.c 3
src/util/log.c 5
test/integration/sys-context-util.c 7
test/fuzz/tcti/tcti-fuzzing.c 11
src/tss2-tcti/tcti-common.c 2
src/tss2-sys/api/Tss2_Sys_GetContextSize.c 1
src/tss2-sys/api/Tss2_Sys_Initialize.c 1
./src/tss2-sys/sysapi_util.h 2
src/tss2-sys/sysapi_util.c 8
test/fuzz/Tss2_Sys_HierarchyControl_Prepare.fuzz.c 1
src/tss2-sys/api/Tss2_Sys_HierarchyControl.c 1
src/tss2-mu/base-types.c 3
/usr/include/x86_64-linux-gnu/bits/byteswap.h 2
src/tss2-sys/api/Tss2_Sys_GetTctiContext.c 1
src/tss2-sys/api/Tss2_Sys_Finalize.c 1

Analyses and suggestions

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name Functions filename Arg count Args Function depth hitcount instr count bb count cyclomatic complexity Reachable functions Incoming references total cyclomatic complexity Unreached complexity
Tss2_MU_TPMS_CAPABILITY_DATA_Marshal /src/tpm2-tss/src/tss2-mu/tpms-types.c 4 ['struct.TPMS_CAPABILITY_DATA *', 'char *', 'size_t ', 'size_t *'] 7 0 131 21 9 55 0 406 198
Tss2_Sys_CreateLoaded /src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreateLoaded.c 10 ['struct._TSS2_SYS_OPAQUE_CONTEXT_BLOB *', 'int ', 'struct.TSS2L_SYS_AUTH_COMMAND *', 'struct.TPM2B_SENSITIVE_CREATE *', 'struct.TPM2B_TEMPLATE *', 'int *', 'struct.TPM2B_PRIVATE *', 'struct.TPM2B_PUBLIC *', 'struct.TPM2B_NAME *', 'struct.TSS2L_SYS_AUTH_RESPONSE *'] 8 0 131 19 9 82 0 707 129
Tss2_MU_TPMS_ATTEST_Unmarshal /src/tpm2-tss/src/tss2-mu/tpms-types.c 4 ['char *', 'size_t ', 'size_t *', 'struct.TPMS_ATTEST *'] 5 0 313 56 22 43 0 366 118
Tss2_MU_TPMS_ATTEST_Marshal /src/tpm2-tss/src/tss2-mu/tpms-types.c 4 ['struct.TPMS_ATTEST *', 'char *', 'size_t ', 'size_t *'] 5 0 214 31 14 44 0 324 102
Tss2_MU_TPM2B_SENSITIVE_Unmarshal /src/tpm2-tss/src/tss2-mu/tpm2b-types.c 4 ['char *', 'size_t ', 'size_t *', 'struct.TPM2B_SENSITIVE *'] 3 0 235 40 16 27 0 186 69

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers
72.6%
533/734
Cyclomatic complexity statically reachable by fuzzers
77.6%
4340 / 5589

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name Functions filename Args Function call depth Reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary.

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
Tss2_MU_TPMU_SYM_MODE_Marshal 57 30 52.63% ['Tss2_Sys_Create_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_LoadExternal_Prepare']
Tss2_MU_TPMU_KDF_SCHEME_Marshal 57 27 47.36% ['Tss2_Sys_Create_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_LoadExternal_Prepare']
Tss2_MU_TPMU_SCHEME_KEYEDHASH_Marshal 57 24 42.10% ['Tss2_Sys_Create_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_LoadExternal_Prepare']
Tss2_MU_TPMU_PUBLIC_ID_Marshal 57 27 47.36% ['Tss2_Sys_Create_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_LoadExternal_Prepare']
Tss2_MU_TPMU_PUBLIC_PARMS_Marshal 57 30 52.63% ['Tss2_Sys_Create_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_LoadExternal_Prepare']
Tss2_Sys_CreatePrimary_Complete 41 11 26.82% ['Tss2_Sys_CreatePrimary_Complete']
Tss2_Sys_GetCapability_Complete 41 8 19.51% ['Tss2_Sys_GetCapability_Complete']
Tss2_Sys_Create_Complete 37 7 18.91% ['Tss2_Sys_Create_Complete']
Tss2_Sys_PCR_Allocate_Complete 31 7 22.58% ['Tss2_Sys_PCR_Allocate_Complete']
Tss2_MU_TPMU_SENSITIVE_COMPOSITE_Marshal 57 30 52.63% ['Tss2_Sys_LoadExternal_Prepare']

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreatePrimary.c ['Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_CreatePrimary_Prepare'] ['Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_CreatePrimary_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_CreatePrimary_Complete.fuzz.c ['Tss2_Sys_CreatePrimary_Complete'] ['Tss2_Sys_CreatePrimary_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_WriteLock_Complete.fuzz.c ['Tss2_Sys_NV_WriteLock_Complete'] ['Tss2_Sys_NV_WriteLock_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_GlobalWriteLock_Prepare.fuzz.c ['Tss2_Sys_NV_GlobalWriteLock_Prepare'] ['Tss2_Sys_NV_GlobalWriteLock_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ClockSet.c ['Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_ClockSet_Prepare'] ['Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_ClockSet_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_SetCommandCodeAuditStatus_Complete.fuzz.c ['Tss2_Sys_SetCommandCodeAuditStatus_Complete'] ['Tss2_Sys_SetCommandCodeAuditStatus_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ClockSet_Complete.fuzz.c ['Tss2_Sys_ClockSet_Complete'] ['Tss2_Sys_ClockSet_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ActivateCredential.c ['Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_ActivateCredential_Prepare'] ['Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_ActivateCredential_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECC_Parameters.c ['Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_ECC_Parameters_Prepare'] ['Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_ECC_Parameters_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_AC_Send.c ['Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_AC_Send_Complete'] ['Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_AC_Send_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_AC_GetCapability_Prepare.fuzz.c ['Tss2_Sys_AC_GetCapability_Prepare'] ['Tss2_Sys_AC_GetCapability_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Sign_Complete.fuzz.c ['Tss2_Sys_Sign_Complete'] ['Tss2_Sys_Sign_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_AC_GetCapability_Complete.fuzz.c ['Tss2_Sys_AC_GetCapability_Complete'] ['Tss2_Sys_AC_GetCapability_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTime.c ['Tss2_Sys_GetTime_Complete', 'Tss2_Sys_GetTime_Prepare'] ['Tss2_Sys_GetTime_Complete', 'Tss2_Sys_GetTime_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Duplicate.c ['Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_Duplicate_Prepare'] ['Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_Duplicate_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyTicket_Complete.fuzz.c ['Tss2_Sys_PolicyTicket_Complete'] ['Tss2_Sys_PolicyTicket_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_SequenceComplete_Complete.fuzz.c ['Tss2_Sys_SequenceComplete_Complete'] ['Tss2_Sys_SequenceComplete_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyAuthValue_Complete.fuzz.c ['Tss2_Sys_PolicyAuthValue_Complete'] ['Tss2_Sys_PolicyAuthValue_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_GetSessionAuditDigest_Prepare.fuzz.c ['Tss2_Sys_GetSessionAuditDigest_Prepare'] ['Tss2_Sys_GetSessionAuditDigest_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_RSA_Decrypt_Complete.fuzz.c ['Tss2_Sys_RSA_Decrypt_Complete'] ['Tss2_Sys_RSA_Decrypt_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Commit_Prepare.fuzz.c ['Tss2_Sys_Commit_Prepare'] ['Tss2_Sys_Commit_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_GetCapability_Prepare.fuzz.c ['Tss2_Sys_GetCapability_Prepare'] ['Tss2_Sys_GetCapability_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_GetCommandAuditDigest_Complete.fuzz.c ['Tss2_Sys_GetCommandAuditDigest_Complete'] ['Tss2_Sys_GetCommandAuditDigest_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_StirRandom_Complete.fuzz.c ['Tss2_Sys_StirRandom_Complete'] ['Tss2_Sys_StirRandom_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Initialize.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_HMAC_Start_Complete.fuzz.c ['Tss2_Sys_HMAC_Start_Complete'] ['Tss2_Sys_HMAC_Start_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_StartAuthSession.c ['Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_StartAuthSession_Complete'] ['Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_StartAuthSession_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyPhysicalPresence.c ['Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Prepare'] ['Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Create_Complete.fuzz.c ['Tss2_Sys_Create_Complete'] ['Tss2_Sys_Create_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_Write_Prepare.fuzz.c ['Tss2_Sys_NV_Write_Prepare'] ['Tss2_Sys_NV_Write_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_SelfTest_Prepare.fuzz.c ['Tss2_Sys_SelfTest_Prepare'] ['Tss2_Sys_SelfTest_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyTemplate_Complete.fuzz.c ['Tss2_Sys_PolicyTemplate_Complete'] ['Tss2_Sys_PolicyTemplate_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_MAC_Prepare.fuzz.c ['Tss2_Sys_MAC_Prepare'] ['Tss2_Sys_MAC_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_HierarchyControl_Prepare.fuzz.c ['Tss2_Sys_HierarchyControl_Prepare'] ['Tss2_Sys_HierarchyControl_Prepare']
/src/tpm2-tss/test/integration/sys-test-options.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FlushContext.c ['Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FlushContext_Complete'] ['Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FlushContext_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Import_Complete.fuzz.c ['Tss2_Sys_Import_Complete'] ['Tss2_Sys_Import_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyGetDigest_Complete.fuzz.c ['Tss2_Sys_PolicyGetDigest_Complete'] ['Tss2_Sys_PolicyGetDigest_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_Read_Complete.fuzz.c ['Tss2_Sys_PCR_Read_Complete'] ['Tss2_Sys_PCR_Read_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_SetAuthPolicy.c ['Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare'] ['Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_RSA_Encrypt.c ['Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare'] ['Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare']
/src/tpm2-tss/src/tss2-mu/tpm2b-types.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Rewrap_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_DictionaryAttackLockReset_Complete.fuzz.c ['Tss2_Sys_DictionaryAttackLockReset_Complete'] ['Tss2_Sys_DictionaryAttackLockReset_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_ChangeAuth_Complete.fuzz.c ['Tss2_Sys_NV_ChangeAuth_Complete'] ['Tss2_Sys_NV_ChangeAuth_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTestResult.c ['Tss2_Sys_GetTestResult_Complete'] ['Tss2_Sys_GetTestResult_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Quote.c ['Tss2_Sys_Quote_Complete', 'Tss2_Sys_Quote_Prepare'] ['Tss2_Sys_Quote_Complete', 'Tss2_Sys_Quote_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_UndefineSpaceSpecial.c ['Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete'] ['Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Startup_Complete.fuzz.c ['Tss2_Sys_Startup_Complete'] ['Tss2_Sys_Startup_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_AC_Send_Prepare.fuzz.c ['Tss2_Sys_AC_Send_Prepare'] ['Tss2_Sys_AC_Send_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_GetSessionAuditDigest_Complete.fuzz.c ['Tss2_Sys_GetSessionAuditDigest_Complete'] ['Tss2_Sys_GetSessionAuditDigest_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySigned.c ['Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_PolicySigned_Complete'] ['Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_PolicySigned_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Unseal_Complete.fuzz.c ['Tss2_Sys_Unseal_Complete'] ['Tss2_Sys_Unseal_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicySecret_Prepare.fuzz.c ['Tss2_Sys_PolicySecret_Prepare'] ['Tss2_Sys_PolicySecret_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_SetAuthPolicy_Prepare.fuzz.c ['Tss2_Sys_PCR_SetAuthPolicy_Prepare'] ['Tss2_Sys_PCR_SetAuthPolicy_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_StartAuthSession_Prepare.fuzz.c ['Tss2_Sys_StartAuthSession_Prepare'] ['Tss2_Sys_StartAuthSession_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ClockRateAdjust_Complete.fuzz.c ['Tss2_Sys_ClockRateAdjust_Complete'] ['Tss2_Sys_ClockRateAdjust_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Certify.c ['Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Certify_Complete'] ['Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Certify_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_FlushContext_Prepare.fuzz.c ['Tss2_Sys_FlushContext_Prepare'] ['Tss2_Sys_FlushContext_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_SetCommandCodeAuditStatus_Prepare.fuzz.c ['Tss2_Sys_SetCommandCodeAuditStatus_Prepare'] ['Tss2_Sys_SetCommandCodeAuditStatus_Prepare']
/src/tpm2-tss/test/fuzz/main-sys.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Reset.c ['Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PCR_Reset_Prepare'] ['Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PCR_Reset_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_SetAlgorithmSet_Prepare.fuzz.c ['Tss2_Sys_SetAlgorithmSet_Prepare'] ['Tss2_Sys_SetAlgorithmSet_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Event.c ['Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_PCR_Event_Complete'] ['Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_PCR_Event_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyCommandCode.c ['Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyCommandCode_Prepare'] ['Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyCommandCode_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyAuthValue.c ['Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_PolicyAuthValue_Prepare'] ['Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_PolicyAuthValue_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_FieldUpgradeData_Complete.fuzz.c ['Tss2_Sys_FieldUpgradeData_Complete'] ['Tss2_Sys_FieldUpgradeData_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CertifyCreation.c ['Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_CertifyCreation_Prepare'] ['Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_CertifyCreation_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Load_Complete.fuzz.c ['Tss2_Sys_Load_Complete'] ['Tss2_Sys_Load_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_Allocate_Complete.fuzz.c ['Tss2_Sys_PCR_Allocate_Complete'] ['Tss2_Sys_PCR_Allocate_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyPhysicalPresence_Complete.fuzz.c ['Tss2_Sys_PolicyPhysicalPresence_Complete'] ['Tss2_Sys_PolicyPhysicalPresence_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_HashSequenceStart_Complete.fuzz.c ['Tss2_Sys_HashSequenceStart_Complete'] ['Tss2_Sys_HashSequenceStart_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyGetDigest_Prepare.fuzz.c ['Tss2_Sys_PolicyGetDigest_Prepare'] ['Tss2_Sys_PolicyGetDigest_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_EncryptDecrypt2_Prepare.fuzz.c ['Tss2_Sys_EncryptDecrypt2_Prepare'] ['Tss2_Sys_EncryptDecrypt2_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECDH_ZGen.c ['Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_ECDH_ZGen_Complete'] ['Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_ECDH_ZGen_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyAuthorize_Complete.fuzz.c ['Tss2_Sys_PolicyAuthorize_Complete'] ['Tss2_Sys_PolicyAuthorize_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_Certify_Complete.fuzz.c ['Tss2_Sys_NV_Certify_Complete'] ['Tss2_Sys_NV_Certify_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_HierarchyControl_Complete.fuzz.c ['Tss2_Sys_HierarchyControl_Complete'] ['Tss2_Sys_HierarchyControl_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyAuthorizeNV_Complete.fuzz.c ['Tss2_Sys_PolicyAuthorizeNV_Complete'] ['Tss2_Sys_PolicyAuthorizeNV_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_Increment_Complete.fuzz.c ['Tss2_Sys_NV_Increment_Complete'] ['Tss2_Sys_NV_Increment_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyAuthValue_Prepare.fuzz.c ['Tss2_Sys_PolicyAuthValue_Prepare'] ['Tss2_Sys_PolicyAuthValue_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_RSA_Encrypt_Prepare.fuzz.c ['Tss2_Sys_RSA_Encrypt_Prepare'] ['Tss2_Sys_RSA_Encrypt_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_SetBits.c ['Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_NV_SetBits_Prepare'] ['Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_NV_SetBits_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ObjectChangeAuth.c ['Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_ObjectChangeAuth_Complete'] ['Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_ObjectChangeAuth_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_WriteLock.c ['Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_WriteLock_Prepare'] ['Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_WriteLock_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_Read_Complete.fuzz.c ['Tss2_Sys_NV_Read_Complete'] ['Tss2_Sys_NV_Read_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicySecret.c ['Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_PolicySecret_Prepare'] ['Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_PolicySecret_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ECDH_ZGen_Complete.fuzz.c ['Tss2_Sys_ECDH_ZGen_Complete'] ['Tss2_Sys_ECDH_ZGen_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EncryptDecrypt.c ['Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_EncryptDecrypt_Complete'] ['Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_EncryptDecrypt_Complete']
/src/tpm2-tss/src/tss2-tcti/tcti-common.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] []
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_DictionaryAttackLockReset.c ['Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Complete'] ['Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyNameHash.c ['Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_PolicyNameHash_Complete'] ['Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_PolicyNameHash_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_Extend_Complete.fuzz.c ['Tss2_Sys_PCR_Extend_Complete'] ['Tss2_Sys_PCR_Extend_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EvictControl.c ['Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EvictControl_Complete'] ['Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EvictControl_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_CertifyX509_Complete.fuzz.c ['Tss2_Sys_CertifyX509_Complete'] ['Tss2_Sys_CertifyX509_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyLocality_Prepare.fuzz.c ['Tss2_Sys_PolicyLocality_Prepare'] ['Tss2_Sys_PolicyLocality_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyPassword_Complete.fuzz.c ['Tss2_Sys_PolicyPassword_Complete'] ['Tss2_Sys_PolicyPassword_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_ReadLock_Complete.fuzz.c ['Tss2_Sys_NV_ReadLock_Complete'] ['Tss2_Sys_NV_ReadLock_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_EvictControl_Complete.fuzz.c ['Tss2_Sys_EvictControl_Complete'] ['Tss2_Sys_EvictControl_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_EventSequenceComplete_Complete.fuzz.c ['Tss2_Sys_EventSequenceComplete_Complete'] ['Tss2_Sys_EventSequenceComplete_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_ChangeAuth.c ['Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_NV_ChangeAuth_Complete'] ['Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_NV_ChangeAuth_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HierarchyChangeAuth.c ['Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_HierarchyChangeAuth_Prepare'] ['Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_HierarchyChangeAuth_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_DefineSpace_Prepare.fuzz.c ['Tss2_Sys_NV_DefineSpace_Prepare'] ['Tss2_Sys_NV_DefineSpace_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicySecret_Complete.fuzz.c ['Tss2_Sys_PolicySecret_Complete'] ['Tss2_Sys_PolicySecret_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_DictionaryAttackLockReset_Prepare.fuzz.c ['Tss2_Sys_DictionaryAttackLockReset_Prepare'] ['Tss2_Sys_DictionaryAttackLockReset_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Execute.c [] []
/src/tpm2-tss/test/fuzz/Tss2_Sys_Quote_Complete.fuzz.c ['Tss2_Sys_Quote_Complete'] ['Tss2_Sys_Quote_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_UndefineSpaceSpecial_Prepare.fuzz.c ['Tss2_Sys_NV_UndefineSpaceSpecial_Prepare'] ['Tss2_Sys_NV_UndefineSpaceSpecial_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SequenceComplete.c ['Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_SequenceComplete_Prepare'] ['Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_SequenceComplete_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyRestart.c ['Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_PolicyRestart_Prepare'] ['Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_PolicyRestart_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Allocate.c ['Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_PCR_Allocate_Complete'] ['Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_PCR_Allocate_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HMAC.c ['Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_HMAC_Complete'] ['Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_HMAC_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyNV_Complete.fuzz.c ['Tss2_Sys_PolicyNV_Complete'] ['Tss2_Sys_PolicyNV_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ContextLoad_Complete.fuzz.c ['Tss2_Sys_ContextLoad_Complete'] ['Tss2_Sys_ContextLoad_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Sign_Prepare.fuzz.c ['Tss2_Sys_Sign_Prepare'] ['Tss2_Sys_Sign_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ZGen_2Phase_Prepare.fuzz.c ['Tss2_Sys_ZGen_2Phase_Prepare'] ['Tss2_Sys_ZGen_2Phase_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_EventSequenceComplete_Prepare.fuzz.c ['Tss2_Sys_EventSequenceComplete_Prepare'] ['Tss2_Sys_EventSequenceComplete_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_LoadExternal.c ['Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_LoadExternal_Prepare'] ['Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_LoadExternal_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_HMAC_Complete.fuzz.c ['Tss2_Sys_HMAC_Complete'] ['Tss2_Sys_HMAC_Complete']
/src/tpm2-tss/src/tss2-mu/tpmt-types.c ['Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare'] ['Tss2_Sys_Sign_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_RSA_Encrypt_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyAuthorizeNV_Prepare.fuzz.c ['Tss2_Sys_PolicyAuthorizeNV_Prepare'] ['Tss2_Sys_PolicyAuthorizeNV_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ReadPublic.c ['Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_ReadPublic_Complete'] ['Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_ReadPublic_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_StirRandom.c ['Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_StirRandom_Complete'] ['Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_StirRandom_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Rewrap_Complete.fuzz.c ['Tss2_Sys_Rewrap_Complete'] ['Tss2_Sys_Rewrap_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_GetCommandAuditDigest_Prepare.fuzz.c ['Tss2_Sys_GetCommandAuditDigest_Prepare'] ['Tss2_Sys_GetCommandAuditDigest_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_SetPrimaryPolicy_Complete.fuzz.c ['Tss2_Sys_SetPrimaryPolicy_Complete'] ['Tss2_Sys_SetPrimaryPolicy_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ClearControl_Prepare.fuzz.c ['Tss2_Sys_ClearControl_Prepare'] ['Tss2_Sys_ClearControl_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Duplicate_Prepare.fuzz.c ['Tss2_Sys_Duplicate_Prepare'] ['Tss2_Sys_Duplicate_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyNvWritten_Complete.fuzz.c ['Tss2_Sys_PolicyNvWritten_Complete'] ['Tss2_Sys_PolicyNvWritten_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_MAC_Start_Complete.fuzz.c ['Tss2_Sys_MAC_Start_Complete'] ['Tss2_Sys_MAC_Start_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_MAC_Complete.fuzz.c ['Tss2_Sys_MAC_Complete'] ['Tss2_Sys_MAC_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Write.c ['Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_NV_Write_Complete'] ['Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_NV_Write_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_Allocate_Prepare.fuzz.c ['Tss2_Sys_PCR_Allocate_Prepare'] ['Tss2_Sys_PCR_Allocate_Prepare']
/src/tpm2-tss/test/integration/sys-context-util.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MakeCredential.c ['Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_MakeCredential_Complete'] ['Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_MakeCredential_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Hash.c ['Tss2_Sys_Hash_Prepare', 'Tss2_Sys_Hash_Complete'] ['Tss2_Sys_Hash_Prepare', 'Tss2_Sys_Hash_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Hash_Prepare.fuzz.c ['Tss2_Sys_Hash_Prepare'] ['Tss2_Sys_Hash_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MAC_Start.c ['Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_MAC_Start_Complete'] ['Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_MAC_Start_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Finalize.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Vendor_TCG_Test_Complete.fuzz.c ['Tss2_Sys_Vendor_TCG_Test_Complete'] ['Tss2_Sys_Vendor_TCG_Test_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ActivateCredential_Complete.fuzz.c ['Tss2_Sys_ActivateCredential_Complete'] ['Tss2_Sys_ActivateCredential_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Import_Prepare.fuzz.c ['Tss2_Sys_Import_Prepare'] ['Tss2_Sys_Import_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_SelfTest_Complete.fuzz.c ['Tss2_Sys_SelfTest_Complete'] ['Tss2_Sys_SelfTest_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Vendor_TCG_Test_Prepare.fuzz.c ['Tss2_Sys_Vendor_TCG_Test_Prepare'] ['Tss2_Sys_Vendor_TCG_Test_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyCounterTimer_Prepare.fuzz.c ['Tss2_Sys_PolicyCounterTimer_Prepare'] ['Tss2_Sys_PolicyCounterTimer_Prepare']
/usr/include/x86_64-linux-gnu/bits/byteswap.h ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] []
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FieldUpgradeStart.c ['Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare'] ['Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyAuthorize.c ['Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_PolicyAuthorize_Prepare'] ['Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_PolicyAuthorize_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_IncrementalSelfTest.c ['Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete'] ['Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyNvWritten_Prepare.fuzz.c ['Tss2_Sys_PolicyNvWritten_Prepare'] ['Tss2_Sys_PolicyNvWritten_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_HMAC_Start_Prepare.fuzz.c ['Tss2_Sys_HMAC_Start_Prepare'] ['Tss2_Sys_HMAC_Start_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_UndefineSpaceSpecial_Complete.fuzz.c ['Tss2_Sys_NV_UndefineSpaceSpecial_Complete'] ['Tss2_Sys_NV_UndefineSpaceSpecial_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EventSequenceComplete.c ['Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_EventSequenceComplete_Prepare'] ['Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_EventSequenceComplete_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_FirmwareRead_Prepare.fuzz.c ['Tss2_Sys_FirmwareRead_Prepare'] ['Tss2_Sys_FirmwareRead_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_VerifySignature_Complete.fuzz.c ['Tss2_Sys_VerifySignature_Complete'] ['Tss2_Sys_VerifySignature_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_SetAlgorithmSet_Complete.fuzz.c ['Tss2_Sys_SetAlgorithmSet_Complete'] ['Tss2_Sys_SetAlgorithmSet_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_SequenceUpdate_Prepare.fuzz.c ['Tss2_Sys_SequenceUpdate_Prepare'] ['Tss2_Sys_SequenceUpdate_Prepare']
/src/tpm2-tss/src/tss2-mu/tpmu-types.c ['Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare'] ['Tss2_Sys_Sign_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_RSA_Encrypt_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EC_Ephemeral.c ['Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare'] ['Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_TestParms_Prepare.fuzz.c ['Tss2_Sys_TestParms_Prepare'] ['Tss2_Sys_TestParms_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_EncryptDecrypt2_Complete.fuzz.c ['Tss2_Sys_EncryptDecrypt2_Complete'] ['Tss2_Sys_EncryptDecrypt2_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyRestart_Complete.fuzz.c ['Tss2_Sys_PolicyRestart_Complete'] ['Tss2_Sys_PolicyRestart_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_RSA_Decrypt.c ['Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare'] ['Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ACT_SetTimeout.c ['Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_ACT_SetTimeout_Prepare'] ['Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_ACT_SetTimeout_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Policy_AC_SendSelect_Complete.fuzz.c ['Tss2_Sys_Policy_AC_SendSelect_Complete'] ['Tss2_Sys_Policy_AC_SendSelect_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Certify_Complete.fuzz.c ['Tss2_Sys_Certify_Complete'] ['Tss2_Sys_Certify_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetSessionAuditDigest.c ['Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare'] ['Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_ReadLock.c ['Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_NV_ReadLock_Prepare'] ['Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_NV_ReadLock_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PP_Commands_Complete.fuzz.c ['Tss2_Sys_PP_Commands_Complete'] ['Tss2_Sys_PP_Commands_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Extend.c ['Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_Extend_Complete'] ['Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_Extend_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyAuthorize_Prepare.fuzz.c ['Tss2_Sys_PolicyAuthorize_Prepare'] ['Tss2_Sys_PolicyAuthorize_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_ChangeAuth_Prepare.fuzz.c ['Tss2_Sys_NV_ChangeAuth_Prepare'] ['Tss2_Sys_NV_ChangeAuth_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_IncrementalSelfTest_Complete.fuzz.c ['Tss2_Sys_IncrementalSelfTest_Complete'] ['Tss2_Sys_IncrementalSelfTest_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Extend.c ['Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_Extend_Complete'] ['Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_Extend_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetRandom.c ['Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_GetRandom_Complete'] ['Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_GetRandom_Complete']
/src/tpm2-tss/src/tss2-mu/tpms-types.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_RSA_Encrypt_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Import.c ['Tss2_Sys_Import_Prepare', 'Tss2_Sys_Import_Complete'] ['Tss2_Sys_Import_Prepare', 'Tss2_Sys_Import_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ECDH_KeyGen_Prepare.fuzz.c ['Tss2_Sys_ECDH_KeyGen_Prepare'] ['Tss2_Sys_ECDH_KeyGen_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_GlobalWriteLock.c ['Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare'] ['Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Load.c ['Tss2_Sys_Load_Prepare', 'Tss2_Sys_Load_Complete'] ['Tss2_Sys_Load_Prepare', 'Tss2_Sys_Load_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_ReadLock_Prepare.fuzz.c ['Tss2_Sys_NV_ReadLock_Prepare'] ['Tss2_Sys_NV_ReadLock_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_GetTime_Prepare.fuzz.c ['Tss2_Sys_GetTime_Prepare'] ['Tss2_Sys_GetTime_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyCpHash_Prepare.fuzz.c ['Tss2_Sys_PolicyCpHash_Prepare'] ['Tss2_Sys_PolicyCpHash_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ContextSave.c ['Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_ContextSave_Complete'] ['Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_ContextSave_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_AC_Send_Complete.fuzz.c ['Tss2_Sys_AC_Send_Complete'] ['Tss2_Sys_AC_Send_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ClockRateAdjust_Prepare.fuzz.c ['Tss2_Sys_ClockRateAdjust_Prepare'] ['Tss2_Sys_ClockRateAdjust_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_AC_GetCapability.c ['Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_AC_GetCapability_Prepare'] ['Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_AC_GetCapability_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyCpHash.c ['Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_PolicyCpHash_Complete'] ['Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_PolicyCpHash_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_MakeCredential_Complete.fuzz.c ['Tss2_Sys_MakeCredential_Complete'] ['Tss2_Sys_MakeCredential_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FirmwareRead.c ['Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_FirmwareRead_Prepare'] ['Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_FirmwareRead_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyOR.c ['Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyOR_Prepare'] ['Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyOR_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_CreatePrimary_Prepare.fuzz.c ['Tss2_Sys_CreatePrimary_Prepare'] ['Tss2_Sys_CreatePrimary_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CreateLoaded.c ['Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_CreateLoaded_Complete'] ['Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_CreateLoaded_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_SetAuthValue.c ['Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete'] ['Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ActivateCredential_Prepare.fuzz.c ['Tss2_Sys_ActivateCredential_Prepare'] ['Tss2_Sys_ActivateCredential_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ChangePPS_Prepare.fuzz.c ['Tss2_Sys_ChangePPS_Prepare'] ['Tss2_Sys_ChangePPS_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HMAC_Start.c ['Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_HMAC_Start_Complete'] ['Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_HMAC_Start_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_Extend_Prepare.fuzz.c ['Tss2_Sys_NV_Extend_Prepare'] ['Tss2_Sys_NV_Extend_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_ReadPublic_Complete.fuzz.c ['Tss2_Sys_NV_ReadPublic_Complete'] ['Tss2_Sys_NV_ReadPublic_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyNvWritten.c ['Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_PolicyNvWritten_Complete'] ['Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_PolicyNvWritten_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ClearControl_Complete.fuzz.c ['Tss2_Sys_ClearControl_Complete'] ['Tss2_Sys_ClearControl_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_GlobalWriteLock_Complete.fuzz.c ['Tss2_Sys_NV_GlobalWriteLock_Complete'] ['Tss2_Sys_NV_GlobalWriteLock_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_FieldUpgradeData_Prepare.fuzz.c ['Tss2_Sys_FieldUpgradeData_Prepare'] ['Tss2_Sys_FieldUpgradeData_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_SetPrimaryPolicy_Prepare.fuzz.c ['Tss2_Sys_SetPrimaryPolicy_Prepare'] ['Tss2_Sys_SetPrimaryPolicy_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyNameHash_Complete.fuzz.c ['Tss2_Sys_PolicyNameHash_Complete'] ['Tss2_Sys_PolicyNameHash_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Hash_Complete.fuzz.c ['Tss2_Sys_Hash_Complete'] ['Tss2_Sys_Hash_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Unseal.c ['Tss2_Sys_Unseal_Complete', 'Tss2_Sys_Unseal_Prepare'] ['Tss2_Sys_Unseal_Complete', 'Tss2_Sys_Unseal_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_DefineSpace.c ['Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_NV_DefineSpace_Prepare'] ['Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_NV_DefineSpace_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Duplicate_Complete.fuzz.c ['Tss2_Sys_Duplicate_Complete'] ['Tss2_Sys_Duplicate_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_Event_Complete.fuzz.c ['Tss2_Sys_PCR_Event_Complete'] ['Tss2_Sys_PCR_Event_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Rewrap.c ['Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_Rewrap_Prepare'] ['Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_Rewrap_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_Extend_Complete.fuzz.c ['Tss2_Sys_NV_Extend_Complete'] ['Tss2_Sys_NV_Extend_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ContextSave_Complete.fuzz.c ['Tss2_Sys_ContextSave_Complete'] ['Tss2_Sys_ContextSave_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_HashSequenceStart_Prepare.fuzz.c ['Tss2_Sys_HashSequenceStart_Prepare'] ['Tss2_Sys_HashSequenceStart_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Rewrap_Prepare.fuzz.c ['Tss2_Sys_Rewrap_Prepare'] ['Tss2_Sys_Rewrap_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyPCR.c ['Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_PolicyPCR_Prepare'] ['Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_PolicyPCR_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_CreateLoaded_Complete.fuzz.c ['Tss2_Sys_CreateLoaded_Complete'] ['Tss2_Sys_CreateLoaded_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyTemplate_Prepare.fuzz.c ['Tss2_Sys_PolicyTemplate_Prepare'] ['Tss2_Sys_PolicyTemplate_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ReadClock.c ['Tss2_Sys_ReadClock_Complete'] ['Tss2_Sys_ReadClock_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_MAC.c ['Tss2_Sys_MAC_Complete', 'Tss2_Sys_MAC_Prepare'] ['Tss2_Sys_MAC_Complete', 'Tss2_Sys_MAC_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ChangePPS.c ['Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_ChangePPS_Complete'] ['Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_ChangePPS_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ECDH_ZGen_Prepare.fuzz.c ['Tss2_Sys_ECDH_ZGen_Prepare'] ['Tss2_Sys_ECDH_ZGen_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyTicket_Prepare.fuzz.c ['Tss2_Sys_PolicyTicket_Prepare'] ['Tss2_Sys_PolicyTicket_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_Reset_Complete.fuzz.c ['Tss2_Sys_PCR_Reset_Complete'] ['Tss2_Sys_PCR_Reset_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyGetDigest.c ['Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete'] ['Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicySigned_Prepare.fuzz.c ['Tss2_Sys_PolicySigned_Prepare'] ['Tss2_Sys_PolicySigned_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ReadPublic_Prepare.fuzz.c ['Tss2_Sys_ReadPublic_Prepare'] ['Tss2_Sys_ReadPublic_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_DictionaryAttackParameters_Complete.fuzz.c ['Tss2_Sys_DictionaryAttackParameters_Complete'] ['Tss2_Sys_DictionaryAttackParameters_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyDuplicationSelect_Prepare.fuzz.c ['Tss2_Sys_PolicyDuplicationSelect_Prepare'] ['Tss2_Sys_PolicyDuplicationSelect_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_SequenceUpdate_Complete.fuzz.c ['Tss2_Sys_SequenceUpdate_Complete'] ['Tss2_Sys_SequenceUpdate_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_DefineSpace_Complete.fuzz.c ['Tss2_Sys_NV_DefineSpace_Complete'] ['Tss2_Sys_NV_DefineSpace_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ContextLoad_Prepare.fuzz.c ['Tss2_Sys_ContextLoad_Prepare'] ['Tss2_Sys_ContextLoad_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Shutdown_Prepare.fuzz.c ['Tss2_Sys_Shutdown_Prepare'] ['Tss2_Sys_Shutdown_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ACT_SetTimeout_Complete.fuzz.c ['Tss2_Sys_ACT_SetTimeout_Complete'] ['Tss2_Sys_ACT_SetTimeout_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Sign.c ['Tss2_Sys_Sign_Prepare', 'Tss2_Sys_Sign_Complete'] ['Tss2_Sys_Sign_Prepare', 'Tss2_Sys_Sign_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Vendor_TCG_Test.c ['Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete'] ['Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetCapability.c ['Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_GetCapability_Prepare'] ['Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_GetCapability_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SetCommandCodeAuditStatus.c ['Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete'] ['Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_UndefineSpace.c ['Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare'] ['Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Increment.c ['Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_NV_Increment_Complete'] ['Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_NV_Increment_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ECC_Parameters_Prepare.fuzz.c ['Tss2_Sys_ECC_Parameters_Prepare'] ['Tss2_Sys_ECC_Parameters_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ZGen_2Phase.c ['Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare'] ['Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SetPrimaryPolicy.c ['Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_SetPrimaryPolicy_Prepare'] ['Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_SetPrimaryPolicy_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_Read_Prepare.fuzz.c ['Tss2_Sys_NV_Read_Prepare'] ['Tss2_Sys_NV_Read_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Create_Prepare.fuzz.c ['Tss2_Sys_Create_Prepare'] ['Tss2_Sys_Create_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Create.c ['Tss2_Sys_Create_Prepare', 'Tss2_Sys_Create_Complete'] ['Tss2_Sys_Create_Prepare', 'Tss2_Sys_Create_Complete']
/src/tpm2-tss/src/tss2-sys/sysapi_util.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Clear_Complete.fuzz.c ['Tss2_Sys_Clear_Complete'] ['Tss2_Sys_Clear_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_TestParms.c ['Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_TestParms_Complete'] ['Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_TestParms_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_Certify_Prepare.fuzz.c ['Tss2_Sys_NV_Certify_Prepare'] ['Tss2_Sys_NV_Certify_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SetCmdAuths.c [] []
/src/tpm2-tss/test/fuzz/Tss2_Sys_CertifyCreation_Complete.fuzz.c ['Tss2_Sys_CertifyCreation_Complete'] ['Tss2_Sys_CertifyCreation_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyPCR_Complete.fuzz.c ['Tss2_Sys_PolicyPCR_Complete'] ['Tss2_Sys_PolicyPCR_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_GetCapability_Complete.fuzz.c ['Tss2_Sys_GetCapability_Complete'] ['Tss2_Sys_GetCapability_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyPassword_Prepare.fuzz.c ['Tss2_Sys_PolicyPassword_Prepare'] ['Tss2_Sys_PolicyPassword_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Shutdown.c ['Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_Shutdown_Prepare'] ['Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_Shutdown_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyCounterTimer.c ['Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete'] ['Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete']
/src/tpm2-tss/./src/tss2-sys/sysapi_util.h ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] []
/src/tpm2-tss/test/fuzz/Tss2_Sys_Policy_AC_SendSelect_Prepare.fuzz.c ['Tss2_Sys_Policy_AC_SendSelect_Prepare'] ['Tss2_Sys_Policy_AC_SendSelect_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_HierarchyChangeAuth_Prepare.fuzz.c ['Tss2_Sys_HierarchyChangeAuth_Prepare'] ['Tss2_Sys_HierarchyChangeAuth_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_Increment_Prepare.fuzz.c ['Tss2_Sys_NV_Increment_Prepare'] ['Tss2_Sys_NV_Increment_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_GetTestResult_Complete.fuzz.c ['Tss2_Sys_GetTestResult_Complete'] ['Tss2_Sys_GetTestResult_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ClockSet_Prepare.fuzz.c ['Tss2_Sys_ClockSet_Prepare'] ['Tss2_Sys_ClockSet_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_EncryptDecrypt2.c ['Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EncryptDecrypt2_Prepare'] ['Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EncryptDecrypt2_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_VerifySignature_Prepare.fuzz.c ['Tss2_Sys_VerifySignature_Prepare'] ['Tss2_Sys_VerifySignature_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_EncryptDecrypt_Complete.fuzz.c ['Tss2_Sys_EncryptDecrypt_Complete'] ['Tss2_Sys_EncryptDecrypt_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_ReadPublic.c ['Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_NV_ReadPublic_Prepare'] ['Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_NV_ReadPublic_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyCommandCode_Complete.fuzz.c ['Tss2_Sys_PolicyCommandCode_Complete'] ['Tss2_Sys_PolicyCommandCode_Complete']
/src/tpm2-tss/test/fuzz/tcti/tcti-fuzzing.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyDuplicationSelect_Complete.fuzz.c ['Tss2_Sys_PolicyDuplicationSelect_Complete'] ['Tss2_Sys_PolicyDuplicationSelect_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_MakeCredential_Prepare.fuzz.c ['Tss2_Sys_MakeCredential_Prepare'] ['Tss2_Sys_MakeCredential_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ECDH_KeyGen.c ['Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_ECDH_KeyGen_Complete'] ['Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_ECDH_KeyGen_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetCommandAuditDigest.c ['Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete'] ['Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_FieldUpgradeStart_Complete.fuzz.c ['Tss2_Sys_FieldUpgradeStart_Complete'] ['Tss2_Sys_FieldUpgradeStart_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ContextSave_Prepare.fuzz.c ['Tss2_Sys_ContextSave_Prepare'] ['Tss2_Sys_ContextSave_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyAuthorizeNV.c ['Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare'] ['Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ClearControl.c ['Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_ClearControl_Complete'] ['Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_ClearControl_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ZGen_2Phase_Complete.fuzz.c ['Tss2_Sys_ZGen_2Phase_Complete'] ['Tss2_Sys_ZGen_2Phase_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Commit_Complete.fuzz.c ['Tss2_Sys_Commit_Complete'] ['Tss2_Sys_Commit_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_HMAC_Prepare.fuzz.c ['Tss2_Sys_HMAC_Prepare'] ['Tss2_Sys_HMAC_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Shutdown_Complete.fuzz.c ['Tss2_Sys_Shutdown_Complete'] ['Tss2_Sys_Shutdown_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyNV_Prepare.fuzz.c ['Tss2_Sys_PolicyNV_Prepare'] ['Tss2_Sys_PolicyNV_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetContextSize.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_Event_Prepare.fuzz.c ['Tss2_Sys_PCR_Event_Prepare'] ['Tss2_Sys_PCR_Event_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetRspAuths.c [] []
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PP_Commands.c ['Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_PP_Commands_Prepare'] ['Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_PP_Commands_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_EvictControl_Prepare.fuzz.c ['Tss2_Sys_EvictControl_Prepare'] ['Tss2_Sys_EvictControl_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_FlushContext_Complete.fuzz.c ['Tss2_Sys_FlushContext_Complete'] ['Tss2_Sys_FlushContext_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Policy_AC_SendSelect.c ['Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Complete'] ['Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyTicket.c ['Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyTicket_Prepare'] ['Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyTicket_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ChangeEPS.c ['Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_ChangeEPS_Prepare'] ['Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_ChangeEPS_Prepare']
/src/tpm2-tss/src/tss2-mu/tpml-types.c ['Tss2_Sys_Create_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_PCR_Read_Complete'] ['Tss2_Sys_Create_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PCR_Read.c ['Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_PCR_Read_Complete'] ['Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_PCR_Read_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_LoadExternal_Prepare.fuzz.c ['Tss2_Sys_LoadExternal_Prepare'] ['Tss2_Sys_LoadExternal_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_CertifyX509.c ['Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_CertifyX509_Prepare'] ['Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_CertifyX509_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_FirmwareRead_Complete.fuzz.c ['Tss2_Sys_FirmwareRead_Complete'] ['Tss2_Sys_FirmwareRead_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_EncryptDecrypt_Prepare.fuzz.c ['Tss2_Sys_EncryptDecrypt_Prepare'] ['Tss2_Sys_EncryptDecrypt_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyLocality.c ['Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PolicyLocality_Complete'] ['Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PolicyLocality_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Certify_Prepare.fuzz.c ['Tss2_Sys_Certify_Prepare'] ['Tss2_Sys_Certify_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_MAC_Start_Prepare.fuzz.c ['Tss2_Sys_MAC_Start_Prepare'] ['Tss2_Sys_MAC_Start_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_RSA_Encrypt_Complete.fuzz.c ['Tss2_Sys_RSA_Encrypt_Complete'] ['Tss2_Sys_RSA_Encrypt_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_CreateLoaded_Prepare.fuzz.c ['Tss2_Sys_CreateLoaded_Prepare'] ['Tss2_Sys_CreateLoaded_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyNV.c ['Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_PolicyNV_Complete'] ['Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_PolicyNV_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyOR_Complete.fuzz.c ['Tss2_Sys_PolicyOR_Complete'] ['Tss2_Sys_PolicyOR_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ACT_SetTimeout_Prepare.fuzz.c ['Tss2_Sys_ACT_SetTimeout_Prepare'] ['Tss2_Sys_ACT_SetTimeout_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ContextLoad.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_ContextLoad_Complete'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_ContextLoad_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicySigned_Complete.fuzz.c ['Tss2_Sys_PolicySigned_Complete'] ['Tss2_Sys_PolicySigned_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_WriteLock_Prepare.fuzz.c ['Tss2_Sys_NV_WriteLock_Prepare'] ['Tss2_Sys_NV_WriteLock_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_FieldUpgradeStart_Prepare.fuzz.c ['Tss2_Sys_FieldUpgradeStart_Prepare'] ['Tss2_Sys_FieldUpgradeStart_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyPCR_Prepare.fuzz.c ['Tss2_Sys_PolicyPCR_Prepare'] ['Tss2_Sys_PolicyPCR_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyNameHash_Prepare.fuzz.c ['Tss2_Sys_PolicyNameHash_Prepare'] ['Tss2_Sys_PolicyNameHash_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyPhysicalPresence_Prepare.fuzz.c ['Tss2_Sys_PolicyPhysicalPresence_Prepare'] ['Tss2_Sys_PolicyPhysicalPresence_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ECDH_KeyGen_Complete.fuzz.c ['Tss2_Sys_ECDH_KeyGen_Complete'] ['Tss2_Sys_ECDH_KeyGen_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyOR_Prepare.fuzz.c ['Tss2_Sys_PolicyOR_Prepare'] ['Tss2_Sys_PolicyOR_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Read.c ['Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_NV_Read_Complete'] ['Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_NV_Read_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SelfTest.c ['Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_SelfTest_Prepare'] ['Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_SelfTest_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_SetBits_Complete.fuzz.c ['Tss2_Sys_NV_SetBits_Complete'] ['Tss2_Sys_NV_SetBits_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_Reset_Prepare.fuzz.c ['Tss2_Sys_PCR_Reset_Prepare'] ['Tss2_Sys_PCR_Reset_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_CertifyCreation_Prepare.fuzz.c ['Tss2_Sys_CertifyCreation_Prepare'] ['Tss2_Sys_CertifyCreation_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Startup.c ['Tss2_Sys_Startup_Prepare', 'Tss2_Sys_Startup_Complete'] ['Tss2_Sys_Startup_Prepare', 'Tss2_Sys_Startup_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ObjectChangeAuth_Prepare.fuzz.c ['Tss2_Sys_ObjectChangeAuth_Prepare'] ['Tss2_Sys_ObjectChangeAuth_Prepare']
/src/tpm2-tss/src/tss2-mu/tpma-types.c ['Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_LoadExternal_Prepare'] ['Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_LoadExternal_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_RSA_Decrypt_Prepare.fuzz.c ['Tss2_Sys_RSA_Decrypt_Prepare'] ['Tss2_Sys_RSA_Decrypt_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_HierarchyChangeAuth_Complete.fuzz.c ['Tss2_Sys_HierarchyChangeAuth_Complete'] ['Tss2_Sys_HierarchyChangeAuth_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_StirRandom_Prepare.fuzz.c ['Tss2_Sys_StirRandom_Prepare'] ['Tss2_Sys_StirRandom_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_ReadPublic_Prepare.fuzz.c ['Tss2_Sys_NV_ReadPublic_Prepare'] ['Tss2_Sys_NV_ReadPublic_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Clear_Prepare.fuzz.c ['Tss2_Sys_Clear_Prepare'] ['Tss2_Sys_Clear_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_IncrementalSelfTest_Prepare.fuzz.c ['Tss2_Sys_IncrementalSelfTest_Prepare'] ['Tss2_Sys_IncrementalSelfTest_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_Extend_Prepare.fuzz.c ['Tss2_Sys_PCR_Extend_Prepare'] ['Tss2_Sys_PCR_Extend_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ECC_Parameters_Complete.fuzz.c ['Tss2_Sys_ECC_Parameters_Complete'] ['Tss2_Sys_ECC_Parameters_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_DictionaryAttackParameters.c ['Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_DictionaryAttackParameters_Prepare'] ['Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_DictionaryAttackParameters_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_EC_Ephemeral_Prepare.fuzz.c ['Tss2_Sys_EC_Ephemeral_Prepare'] ['Tss2_Sys_EC_Ephemeral_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Commit.c ['Tss2_Sys_Commit_Complete', 'Tss2_Sys_Commit_Prepare'] ['Tss2_Sys_Commit_Complete', 'Tss2_Sys_Commit_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ObjectChangeAuth_Complete.fuzz.c ['Tss2_Sys_ObjectChangeAuth_Complete'] ['Tss2_Sys_ObjectChangeAuth_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Unseal_Prepare.fuzz.c ['Tss2_Sys_Unseal_Prepare'] ['Tss2_Sys_Unseal_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_GetRandom_Prepare.fuzz.c ['Tss2_Sys_GetRandom_Prepare'] ['Tss2_Sys_GetRandom_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ChangeEPS_Complete.fuzz.c ['Tss2_Sys_ChangeEPS_Complete'] ['Tss2_Sys_ChangeEPS_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyLocality_Complete.fuzz.c ['Tss2_Sys_PolicyLocality_Complete'] ['Tss2_Sys_PolicyLocality_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_StartAuthSession_Complete.fuzz.c ['Tss2_Sys_StartAuthSession_Complete'] ['Tss2_Sys_StartAuthSession_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyCounterTimer_Complete.fuzz.c ['Tss2_Sys_PolicyCounterTimer_Complete'] ['Tss2_Sys_PolicyCounterTimer_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyRestart_Prepare.fuzz.c ['Tss2_Sys_PolicyRestart_Prepare'] ['Tss2_Sys_PolicyRestart_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Startup_Prepare.fuzz.c ['Tss2_Sys_Startup_Prepare'] ['Tss2_Sys_Startup_Prepare']
/src/tpm2-tss/src/util/log.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_HierarchyControl_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_UndefineSpace_Prepare.fuzz.c ['Tss2_Sys_NV_UndefineSpace_Prepare'] ['Tss2_Sys_NV_UndefineSpace_Prepare']
/src/tpm2-tss/src/tss2-mu/base-types.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_HierarchyControl_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SetAlgorithmSet.c ['Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare'] ['Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyDuplicationSelect.c ['Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare'] ['Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_GetTime_Complete.fuzz.c ['Tss2_Sys_GetTime_Complete'] ['Tss2_Sys_GetTime_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Quote_Prepare.fuzz.c ['Tss2_Sys_Quote_Prepare'] ['Tss2_Sys_Quote_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_SetAuthPolicy_Complete.fuzz.c ['Tss2_Sys_PCR_SetAuthPolicy_Complete'] ['Tss2_Sys_PCR_SetAuthPolicy_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_VerifySignature.c ['Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_VerifySignature_Prepare'] ['Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_VerifySignature_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_LoadExternal_Complete.fuzz.c ['Tss2_Sys_LoadExternal_Complete'] ['Tss2_Sys_LoadExternal_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_NV_Certify.c ['Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_NV_Certify_Prepare'] ['Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_NV_Certify_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_DictionaryAttackParameters_Prepare.fuzz.c ['Tss2_Sys_DictionaryAttackParameters_Prepare'] ['Tss2_Sys_DictionaryAttackParameters_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_SequenceComplete_Prepare.fuzz.c ['Tss2_Sys_SequenceComplete_Prepare'] ['Tss2_Sys_SequenceComplete_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_SetAuthValue_Prepare.fuzz.c ['Tss2_Sys_PCR_SetAuthValue_Prepare'] ['Tss2_Sys_PCR_SetAuthValue_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_EC_Ephemeral_Complete.fuzz.c ['Tss2_Sys_EC_Ephemeral_Complete'] ['Tss2_Sys_EC_Ephemeral_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_Load_Prepare.fuzz.c ['Tss2_Sys_Load_Prepare'] ['Tss2_Sys_Load_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_GetTctiContext.c ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] ['Tss2_Sys_ContextLoad_Prepare', 'Tss2_Sys_DictionaryAttackLockReset_Prepare', 'Tss2_Sys_PolicyOR_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Complete', 'Tss2_Sys_PolicyLocality_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Complete', 'Tss2_Sys_ObjectChangeAuth_Prepare', 'Tss2_Sys_HMAC_Prepare', 'Tss2_Sys_GetSessionAuditDigest_Complete', 'Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_CreateLoaded_Prepare', 'Tss2_Sys_PolicyCounterTimer_Prepare', 'Tss2_Sys_SetAlgorithmSet_Complete', 'Tss2_Sys_EC_Ephemeral_Complete', 'Tss2_Sys_PolicyAuthorize_Complete', 'Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_CertifyX509_Complete', 'Tss2_Sys_SequenceComplete_Complete', 'Tss2_Sys_PolicyNvWritten_Prepare', 'Tss2_Sys_Sign_Prepare', 'Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_Create_Prepare', 'Tss2_Sys_Commit_Complete', 'Tss2_Sys_PolicyAuthorizeNV_Prepare', 'Tss2_Sys_SelfTest_Complete', 'Tss2_Sys_EncryptDecrypt2_Complete', 'Tss2_Sys_EC_Ephemeral_Prepare', 'Tss2_Sys_ChangeEPS_Complete', 'Tss2_Sys_Hash_Prepare', 'Tss2_Sys_NV_GlobalWriteLock_Complete', 'Tss2_Sys_CertifyX509_Prepare', 'Tss2_Sys_PP_Commands_Complete', 'Tss2_Sys_ClearControl_Prepare', 'Tss2_Sys_PolicyOR_Prepare', 'Tss2_Sys_PolicyRestart_Complete', 'Tss2_Sys_StirRandom_Prepare', 'Tss2_Sys_VerifySignature_Complete', 'Tss2_Sys_PolicyCpHash_Prepare', 'Tss2_Sys_Import_Prepare', 'Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_NV_ReadPublic_Complete', 'Tss2_Sys_PolicySecret_Complete', 'Tss2_Sys_HMAC_Start_Prepare', 'Tss2_Sys_PolicyAuthValue_Complete', 'Tss2_Sys_CreatePrimary_Complete', 'Tss2_Sys_ECDH_KeyGen_Prepare', 'Tss2_Sys_SelfTest_Prepare', 'Tss2_Sys_StirRandom_Complete', 'Tss2_Sys_MAC_Start_Prepare', 'Tss2_Sys_PolicyDuplicationSelect_Complete', 'Tss2_Sys_ZGen_2Phase_Complete', 'Tss2_Sys_GetCapability_Complete', 'Tss2_Sys_NV_UndefineSpaceSpecial_Prepare', 'Tss2_Sys_PolicyGetDigest_Prepare', 'Tss2_Sys_TestParms_Prepare', 'Tss2_Sys_VerifySignature_Prepare', 'Tss2_Sys_NV_UndefineSpaceSpecial_Complete', 'Tss2_Sys_Rewrap_Complete', 'Tss2_Sys_AC_Send_Prepare', 'Tss2_Sys_NV_DefineSpace_Complete', 'Tss2_Sys_IncrementalSelfTest_Prepare', 'Tss2_Sys_ContextSave_Prepare', 'Tss2_Sys_FirmwareRead_Complete', 'Tss2_Sys_PolicySigned_Prepare', 'Tss2_Sys_RSA_Encrypt_Complete', 'Tss2_Sys_NV_Increment_Prepare', 'Tss2_Sys_Policy_AC_SendSelect_Prepare', 'Tss2_Sys_NV_ReadLock_Complete', 'Tss2_Sys_HierarchyChangeAuth_Complete', 'Tss2_Sys_NV_SetBits_Complete', 'Tss2_Sys_FlushContext_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete', 'Tss2_Sys_NV_Read_Prepare', 'Tss2_Sys_ActivateCredential_Complete', 'Tss2_Sys_FieldUpgradeStart_Complete', 'Tss2_Sys_PCR_SetAuthValue_Prepare', 'Tss2_Sys_Certify_Prepare', 'Tss2_Sys_Create_Complete', 'Tss2_Sys_PCR_Extend_Prepare', 'Tss2_Sys_PCR_SetAuthValue_Complete', 'Tss2_Sys_FieldUpgradeStart_Prepare', 'Tss2_Sys_NV_DefineSpace_Prepare', 'Tss2_Sys_PolicyRestart_Prepare', 'Tss2_Sys_PolicyPCR_Complete', 'Tss2_Sys_Hash_Complete', 'Tss2_Sys_ReadPublic_Prepare', 'Tss2_Sys_NV_Increment_Complete', 'Tss2_Sys_ECC_Parameters_Complete', 'Tss2_Sys_GetSessionAuditDigest_Prepare', 'Tss2_Sys_CertifyCreation_Complete', 'Tss2_Sys_NV_WriteLock_Complete', 'Tss2_Sys_NV_Write_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Complete', 'Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_DictionaryAttackParameters_Complete', 'Tss2_Sys_PolicyPhysicalPresence_Complete', 'Tss2_Sys_ClockSet_Complete', 'Tss2_Sys_GetTestResult_Complete', 'Tss2_Sys_PolicySecret_Prepare', 'Tss2_Sys_PCR_Reset_Complete', 'Tss2_Sys_PolicyNvWritten_Complete', 'Tss2_Sys_SetAlgorithmSet_Prepare', 'Tss2_Sys_NV_Certify_Complete', 'Tss2_Sys_Sign_Complete', 'Tss2_Sys_Vendor_TCG_Test_Prepare', 'Tss2_Sys_Vendor_TCG_Test_Complete', 'Tss2_Sys_Duplicate_Complete', 'Tss2_Sys_DictionaryAttackLockReset_Complete', 'Tss2_Sys_SequenceUpdate_Prepare', 'Tss2_Sys_DictionaryAttackParameters_Prepare', 'Tss2_Sys_PolicyLocality_Complete', 'Tss2_Sys_PCR_Allocate_Prepare', 'Tss2_Sys_NV_Extend_Prepare', 'Tss2_Sys_NV_ReadLock_Prepare', 'Tss2_Sys_StartAuthSession_Prepare', 'Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_ACT_SetTimeout_Complete', 'Tss2_Sys_RSA_Decrypt_Complete', 'Tss2_Sys_PolicyNV_Prepare', 'Tss2_Sys_HierarchyChangeAuth_Prepare', 'Tss2_Sys_Unseal_Complete', 'Tss2_Sys_FlushContext_Complete', 'Tss2_Sys_CreateLoaded_Complete', 'Tss2_Sys_CertifyCreation_Prepare', 'Tss2_Sys_Load_Prepare', 'Tss2_Sys_SetPrimaryPolicy_Prepare', 'Tss2_Sys_EvictControl_Prepare', 'Tss2_Sys_EncryptDecrypt2_Prepare', 'Tss2_Sys_GetTime_Complete', 'Tss2_Sys_AC_GetCapability_Complete', 'Tss2_Sys_Commit_Prepare', 'Tss2_Sys_EvictControl_Complete', 'Tss2_Sys_ZGen_2Phase_Prepare', 'Tss2_Sys_Unseal_Prepare', 'Tss2_Sys_NV_SetBits_Prepare', 'Tss2_Sys_Quote_Complete', 'Tss2_Sys_Startup_Prepare', 'Tss2_Sys_MakeCredential_Prepare', 'Tss2_Sys_StartAuthSession_Complete', 'Tss2_Sys_Policy_AC_SendSelect_Complete', 'Tss2_Sys_ReadClock_Complete', 'Tss2_Sys_TestParms_Complete', 'Tss2_Sys_CreatePrimary_Prepare', 'Tss2_Sys_PolicyNameHash_Prepare', 'Tss2_Sys_Clear_Complete', 'Tss2_Sys_PolicySigned_Complete', 'Tss2_Sys_NV_Certify_Prepare', 'Tss2_Sys_NV_ChangeAuth_Prepare', 'Tss2_Sys_ClearControl_Complete', 'Tss2_Sys_MAC_Complete', 'Tss2_Sys_PCR_Event_Prepare', 'Tss2_Sys_AC_Send_Complete', 'Tss2_Sys_ContextSave_Complete', 'Tss2_Sys_LoadExternal_Complete', 'Tss2_Sys_GetRandom_Prepare', 'Tss2_Sys_ECDH_ZGen_Prepare', 'Tss2_Sys_HMAC_Start_Complete', 'Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ECDH_KeyGen_Complete', 'Tss2_Sys_MAC_Start_Complete', 'Tss2_Sys_EventSequenceComplete_Complete', 'Tss2_Sys_Duplicate_Prepare', 'Tss2_Sys_NV_Read_Complete', 'Tss2_Sys_NV_ChangeAuth_Complete', 'Tss2_Sys_NV_UndefineSpace_Complete', 'Tss2_Sys_AC_GetCapability_Prepare', 'Tss2_Sys_ClockSet_Prepare', 'Tss2_Sys_PolicyTicket_Complete', 'Tss2_Sys_PolicyCommandCode_Complete', 'Tss2_Sys_PolicyTemplate_Prepare', 'Tss2_Sys_GetTime_Prepare', 'Tss2_Sys_PCR_Read_Prepare', 'Tss2_Sys_MakeCredential_Complete', 'Tss2_Sys_MAC_Prepare', 'Tss2_Sys_Quote_Prepare', 'Tss2_Sys_Shutdown_Complete', 'Tss2_Sys_PolicyTicket_Prepare', 'Tss2_Sys_EventSequenceComplete_Prepare', 'Tss2_Sys_PolicyNameHash_Complete', 'Tss2_Sys_GetCapability_Prepare', 'Tss2_Sys_PolicyPassword_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Prepare', 'Tss2_Sys_PolicyNV_Complete', 'Tss2_Sys_ECDH_ZGen_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare', 'Tss2_Sys_NV_Extend_Complete', 'Tss2_Sys_PolicyCpHash_Complete', 'Tss2_Sys_ChangePPS_Prepare', 'Tss2_Sys_Startup_Complete', 'Tss2_Sys_ContextLoad_Complete', 'Tss2_Sys_SequenceComplete_Prepare', 'Tss2_Sys_Load_Complete', 'Tss2_Sys_ChangeEPS_Prepare', 'Tss2_Sys_HMAC_Complete', 'Tss2_Sys_PP_Commands_Prepare', 'Tss2_Sys_PolicyPCR_Prepare', 'Tss2_Sys_PCR_SetAuthPolicy_Prepare', 'Tss2_Sys_PolicyAuthValue_Prepare', 'Tss2_Sys_ECC_Parameters_Prepare', 'Tss2_Sys_PCR_Allocate_Complete', 'Tss2_Sys_PolicyDuplicationSelect_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Prepare', 'Tss2_Sys_GetCommandAuditDigest_Complete', 'Tss2_Sys_Shutdown_Prepare', 'Tss2_Sys_PolicyAuthorize_Prepare', 'Tss2_Sys_PolicyCounterTimer_Complete', 'Tss2_Sys_NV_GlobalWriteLock_Prepare', 'Tss2_Sys_ReadPublic_Complete', 'Tss2_Sys_RSA_Decrypt_Prepare', 'Tss2_Sys_LoadExternal_Prepare', 'Tss2_Sys_PolicyPhysicalPresence_Prepare', 'Tss2_Sys_PCR_Reset_Prepare', 'Tss2_Sys_PolicyCommandCode_Prepare', 'Tss2_Sys_IncrementalSelfTest_Complete', 'Tss2_Sys_ActivateCredential_Prepare', 'Tss2_Sys_PCR_Event_Complete', 'Tss2_Sys_NV_Write_Complete', 'Tss2_Sys_FirmwareRead_Prepare', 'Tss2_Sys_HashSequenceStart_Complete', 'Tss2_Sys_Clear_Prepare', 'Tss2_Sys_ACT_SetTimeout_Prepare', 'Tss2_Sys_SetCommandCodeAuditStatus_Complete', 'Tss2_Sys_Certify_Complete', 'Tss2_Sys_EncryptDecrypt_Prepare', 'Tss2_Sys_PCR_Extend_Complete', 'Tss2_Sys_PCR_Read_Complete', 'Tss2_Sys_EncryptDecrypt_Complete', 'Tss2_Sys_NV_WriteLock_Prepare', 'Tss2_Sys_NV_ReadPublic_Prepare', 'Tss2_Sys_PolicyGetDigest_Complete', 'Tss2_Sys_RSA_Encrypt_Prepare', 'Tss2_Sys_Import_Complete', 'Tss2_Sys_NV_UndefineSpace_Prepare', 'Tss2_Sys_ChangePPS_Complete', 'Tss2_Sys_Rewrap_Prepare', 'Tss2_Sys_GetRandom_Complete', 'Tss2_Sys_ObjectChangeAuth_Complete', 'Tss2_Sys_HierarchyControl_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ReadPublic_Complete.fuzz.c ['Tss2_Sys_ReadPublic_Complete'] ['Tss2_Sys_ReadPublic_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ChangeEPS_Prepare.fuzz.c ['Tss2_Sys_ChangeEPS_Prepare'] ['Tss2_Sys_ChangeEPS_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HashSequenceStart.c ['Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_HashSequenceStart_Complete'] ['Tss2_Sys_HashSequenceStart_Prepare', 'Tss2_Sys_HashSequenceStart_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_FieldUpgradeData.c ['Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete'] ['Tss2_Sys_FieldUpgradeData_Prepare', 'Tss2_Sys_FieldUpgradeData_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_SetBits_Prepare.fuzz.c ['Tss2_Sys_NV_SetBits_Prepare'] ['Tss2_Sys_NV_SetBits_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_HierarchyControl.c ['Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_HierarchyControl_Prepare'] ['Tss2_Sys_HierarchyControl_Complete', 'Tss2_Sys_HierarchyControl_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PP_Commands_Prepare.fuzz.c ['Tss2_Sys_PP_Commands_Prepare'] ['Tss2_Sys_PP_Commands_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_GetRandom_Complete.fuzz.c ['Tss2_Sys_GetRandom_Complete'] ['Tss2_Sys_GetRandom_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_Read_Prepare.fuzz.c ['Tss2_Sys_PCR_Read_Prepare'] ['Tss2_Sys_PCR_Read_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_SequenceUpdate.c ['Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_SequenceUpdate_Prepare'] ['Tss2_Sys_SequenceUpdate_Complete', 'Tss2_Sys_SequenceUpdate_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_CertifyX509_Prepare.fuzz.c ['Tss2_Sys_CertifyX509_Prepare'] ['Tss2_Sys_CertifyX509_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyTemplate.c ['Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_PolicyTemplate_Prepare'] ['Tss2_Sys_PolicyTemplate_Complete', 'Tss2_Sys_PolicyTemplate_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyCommandCode_Prepare.fuzz.c ['Tss2_Sys_PolicyCommandCode_Prepare'] ['Tss2_Sys_PolicyCommandCode_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_UndefineSpace_Complete.fuzz.c ['Tss2_Sys_NV_UndefineSpace_Complete'] ['Tss2_Sys_NV_UndefineSpace_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ChangePPS_Complete.fuzz.c ['Tss2_Sys_ChangePPS_Complete'] ['Tss2_Sys_ChangePPS_Complete']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_Clear.c ['Tss2_Sys_Clear_Complete', 'Tss2_Sys_Clear_Prepare'] ['Tss2_Sys_Clear_Complete', 'Tss2_Sys_Clear_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_ClockRateAdjust.c ['Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare'] ['Tss2_Sys_ClockRateAdjust_Complete', 'Tss2_Sys_ClockRateAdjust_Prepare']
/src/tpm2-tss/src/tss2-sys/api/Tss2_Sys_PolicyPassword.c ['Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_PolicyPassword_Prepare'] ['Tss2_Sys_PolicyPassword_Complete', 'Tss2_Sys_PolicyPassword_Prepare']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PCR_SetAuthValue_Complete.fuzz.c ['Tss2_Sys_PCR_SetAuthValue_Complete'] ['Tss2_Sys_PCR_SetAuthValue_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_NV_Write_Complete.fuzz.c ['Tss2_Sys_NV_Write_Complete'] ['Tss2_Sys_NV_Write_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_TestParms_Complete.fuzz.c ['Tss2_Sys_TestParms_Complete'] ['Tss2_Sys_TestParms_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_ReadClock_Complete.fuzz.c ['Tss2_Sys_ReadClock_Complete'] ['Tss2_Sys_ReadClock_Complete']
/src/tpm2-tss/test/fuzz/Tss2_Sys_PolicyCpHash_Complete.fuzz.c ['Tss2_Sys_PolicyCpHash_Complete'] ['Tss2_Sys_PolicyCpHash_Complete']

Directories in report

Directory
/usr/include/x86_64-linux-gnu/bits/
/src/tpm2-tss/src/tss2-sys/
/src/tpm2-tss/./src/tss2-sys/
/src/tpm2-tss/test/integration/
/src/tpm2-tss/src/tss2-tcti/
/src/tpm2-tss/src/tss2-sys/api/
/src/tpm2-tss/test/fuzz/
/src/tpm2-tss/test/fuzz/tcti/
/src/tpm2-tss/src/util/
/src/tpm2-tss/src/tss2-mu/

Metadata section

This sections shows the raw data that is used to produce this report. This is mainly used for further processing and developer debugging.

Fuzzer Calltree file Program data file Coverage file
Tss2_Sys_ContextLoad_Prepare fuzzerLogFile-0-MO6E6L7dvE.data fuzzerLogFile-0-MO6E6L7dvE.data.yaml Tss2_Sys_ContextLoad_Prepare.covreport
Tss2_Sys_DictionaryAttackLockReset_Prepare fuzzerLogFile-0-uYWfGrq1Ne.data fuzzerLogFile-0-uYWfGrq1Ne.data.yaml Tss2_Sys_DictionaryAttackLockReset_Prepare.covreport
Tss2_Sys_PolicyOR_Complete fuzzerLogFile-0-wzfyKC7FwM.data fuzzerLogFile-0-wzfyKC7FwM.data.yaml Tss2_Sys_PolicyOR_Complete.covreport
Tss2_Sys_PolicyAuthorizeNV_Complete fuzzerLogFile-0-tUX99DRrTn.data fuzzerLogFile-0-tUX99DRrTn.data.yaml Tss2_Sys_PolicyAuthorizeNV_Complete.covreport
Tss2_Sys_PolicyLocality_Prepare fuzzerLogFile-0-hS04dp29BF.data fuzzerLogFile-0-hS04dp29BF.data.yaml Tss2_Sys_PolicyLocality_Prepare.covreport
Tss2_Sys_PCR_SetAuthPolicy_Complete fuzzerLogFile-0-5oBf0aI9s6.data fuzzerLogFile-0-5oBf0aI9s6.data.yaml Tss2_Sys_PCR_SetAuthPolicy_Complete.covreport
Tss2_Sys_ObjectChangeAuth_Prepare fuzzerLogFile-0-yzaYeJC7XM.data fuzzerLogFile-0-yzaYeJC7XM.data.yaml Tss2_Sys_ObjectChangeAuth_Prepare.covreport
Tss2_Sys_HMAC_Prepare fuzzerLogFile-0-e5g8ZcdNA5.data fuzzerLogFile-0-e5g8ZcdNA5.data.yaml Tss2_Sys_HMAC_Prepare.covreport
Tss2_Sys_GetSessionAuditDigest_Complete fuzzerLogFile-0-5lXCUoUT00.data fuzzerLogFile-0-5lXCUoUT00.data.yaml Tss2_Sys_GetSessionAuditDigest_Complete.covreport
Tss2_Sys_FieldUpgradeData_Prepare fuzzerLogFile-0-or2914Sv2t.data fuzzerLogFile-0-or2914Sv2t.data.yaml Tss2_Sys_FieldUpgradeData_Prepare.covreport
Tss2_Sys_CreateLoaded_Prepare fuzzerLogFile-0-9E5X0d8TFR.data fuzzerLogFile-0-9E5X0d8TFR.data.yaml Tss2_Sys_CreateLoaded_Prepare.covreport
Tss2_Sys_PolicyCounterTimer_Prepare fuzzerLogFile-0-2rQNuy1KVN.data fuzzerLogFile-0-2rQNuy1KVN.data.yaml Tss2_Sys_PolicyCounterTimer_Prepare.covreport
Tss2_Sys_SetAlgorithmSet_Complete fuzzerLogFile-0-5NOzzvv1IT.data fuzzerLogFile-0-5NOzzvv1IT.data.yaml Tss2_Sys_SetAlgorithmSet_Complete.covreport
Tss2_Sys_EC_Ephemeral_Complete fuzzerLogFile-0-xYwRCyaW8x.data fuzzerLogFile-0-xYwRCyaW8x.data.yaml Tss2_Sys_EC_Ephemeral_Complete.covreport
Tss2_Sys_PolicyAuthorize_Complete fuzzerLogFile-0-cFIBlVyash.data fuzzerLogFile-0-cFIBlVyash.data.yaml Tss2_Sys_PolicyAuthorize_Complete.covreport
Tss2_Sys_SequenceUpdate_Complete fuzzerLogFile-0-5M45HKbn7P.data fuzzerLogFile-0-5M45HKbn7P.data.yaml Tss2_Sys_SequenceUpdate_Complete.covreport
Tss2_Sys_CertifyX509_Complete fuzzerLogFile-0-8J7dv9T7KK.data fuzzerLogFile-0-8J7dv9T7KK.data.yaml Tss2_Sys_CertifyX509_Complete.covreport
Tss2_Sys_SequenceComplete_Complete fuzzerLogFile-0-FMNzClWxDH.data fuzzerLogFile-0-FMNzClWxDH.data.yaml Tss2_Sys_SequenceComplete_Complete.covreport
Tss2_Sys_PolicyNvWritten_Prepare fuzzerLogFile-0-dFx7A0q48G.data fuzzerLogFile-0-dFx7A0q48G.data.yaml Tss2_Sys_PolicyNvWritten_Prepare.covreport
Tss2_Sys_Sign_Prepare fuzzerLogFile-0-UCOT6ZAA6q.data fuzzerLogFile-0-UCOT6ZAA6q.data.yaml Tss2_Sys_Sign_Prepare.covreport
Tss2_Sys_HashSequenceStart_Prepare fuzzerLogFile-0-fH6SxAKVxF.data fuzzerLogFile-0-fH6SxAKVxF.data.yaml Tss2_Sys_HashSequenceStart_Prepare.covreport
Tss2_Sys_Create_Prepare fuzzerLogFile-0-DJa30y16Ro.data fuzzerLogFile-0-DJa30y16Ro.data.yaml Tss2_Sys_Create_Prepare.covreport
Tss2_Sys_Commit_Complete fuzzerLogFile-0-dGRajb5XIo.data fuzzerLogFile-0-dGRajb5XIo.data.yaml Tss2_Sys_Commit_Complete.covreport
Tss2_Sys_PolicyAuthorizeNV_Prepare fuzzerLogFile-0-sjVeLdi7P2.data fuzzerLogFile-0-sjVeLdi7P2.data.yaml Tss2_Sys_PolicyAuthorizeNV_Prepare.covreport
Tss2_Sys_SelfTest_Complete fuzzerLogFile-0-IRvIWoWnyQ.data fuzzerLogFile-0-IRvIWoWnyQ.data.yaml Tss2_Sys_SelfTest_Complete.covreport
Tss2_Sys_EncryptDecrypt2_Complete fuzzerLogFile-0-rb1l4MUA74.data fuzzerLogFile-0-rb1l4MUA74.data.yaml Tss2_Sys_EncryptDecrypt2_Complete.covreport
Tss2_Sys_EC_Ephemeral_Prepare fuzzerLogFile-0-qSgbxfgH3q.data fuzzerLogFile-0-qSgbxfgH3q.data.yaml Tss2_Sys_EC_Ephemeral_Prepare.covreport
Tss2_Sys_ChangeEPS_Complete fuzzerLogFile-0-UA1LgJTTUF.data fuzzerLogFile-0-UA1LgJTTUF.data.yaml Tss2_Sys_ChangeEPS_Complete.covreport
Tss2_Sys_Hash_Prepare fuzzerLogFile-0-FLzT0R3irW.data fuzzerLogFile-0-FLzT0R3irW.data.yaml Tss2_Sys_Hash_Prepare.covreport
Tss2_Sys_NV_GlobalWriteLock_Complete fuzzerLogFile-0-gfReJ4Mnub.data fuzzerLogFile-0-gfReJ4Mnub.data.yaml Tss2_Sys_NV_GlobalWriteLock_Complete.covreport
Tss2_Sys_CertifyX509_Prepare fuzzerLogFile-0-54PjrWOnH6.data fuzzerLogFile-0-54PjrWOnH6.data.yaml Tss2_Sys_CertifyX509_Prepare.covreport
Tss2_Sys_PP_Commands_Complete fuzzerLogFile-0-bECJ0JcUBY.data fuzzerLogFile-0-bECJ0JcUBY.data.yaml Tss2_Sys_PP_Commands_Complete.covreport
Tss2_Sys_ClearControl_Prepare fuzzerLogFile-0-Dhosy6aI45.data fuzzerLogFile-0-Dhosy6aI45.data.yaml Tss2_Sys_ClearControl_Prepare.covreport
Tss2_Sys_PolicyOR_Prepare fuzzerLogFile-0-Bk1qhJTq0m.data fuzzerLogFile-0-Bk1qhJTq0m.data.yaml Tss2_Sys_PolicyOR_Prepare.covreport
Tss2_Sys_PolicyRestart_Complete fuzzerLogFile-0-yNWV2M2yOv.data fuzzerLogFile-0-yNWV2M2yOv.data.yaml Tss2_Sys_PolicyRestart_Complete.covreport
Tss2_Sys_StirRandom_Prepare fuzzerLogFile-0-yCFGCB2WsL.data fuzzerLogFile-0-yCFGCB2WsL.data.yaml Tss2_Sys_StirRandom_Prepare.covreport
Tss2_Sys_VerifySignature_Complete fuzzerLogFile-0-Pa244g4aIG.data fuzzerLogFile-0-Pa244g4aIG.data.yaml Tss2_Sys_VerifySignature_Complete.covreport
Tss2_Sys_PolicyCpHash_Prepare fuzzerLogFile-0-jc2pBmNebe.data fuzzerLogFile-0-jc2pBmNebe.data.yaml Tss2_Sys_PolicyCpHash_Prepare.covreport
Tss2_Sys_Import_Prepare fuzzerLogFile-0-SxTzQGvtJ2.data fuzzerLogFile-0-SxTzQGvtJ2.data.yaml Tss2_Sys_Import_Prepare.covreport
Tss2_Sys_HierarchyControl_Complete fuzzerLogFile-0-WIMNXo440h.data fuzzerLogFile-0-WIMNXo440h.data.yaml Tss2_Sys_HierarchyControl_Complete.covreport
Tss2_Sys_NV_ReadPublic_Complete fuzzerLogFile-0-yE4taCUX6z.data fuzzerLogFile-0-yE4taCUX6z.data.yaml Tss2_Sys_NV_ReadPublic_Complete.covreport
Tss2_Sys_PolicySecret_Complete fuzzerLogFile-0-6QGmGIZ4Lu.data fuzzerLogFile-0-6QGmGIZ4Lu.data.yaml Tss2_Sys_PolicySecret_Complete.covreport
Tss2_Sys_HMAC_Start_Prepare fuzzerLogFile-0-ZaVjRBl37X.data fuzzerLogFile-0-ZaVjRBl37X.data.yaml Tss2_Sys_HMAC_Start_Prepare.covreport
Tss2_Sys_PolicyAuthValue_Complete fuzzerLogFile-0-Viqux7vVCN.data fuzzerLogFile-0-Viqux7vVCN.data.yaml Tss2_Sys_PolicyAuthValue_Complete.covreport
Tss2_Sys_CreatePrimary_Complete fuzzerLogFile-0-V9MlYmQc2F.data fuzzerLogFile-0-V9MlYmQc2F.data.yaml Tss2_Sys_CreatePrimary_Complete.covreport
Tss2_Sys_ECDH_KeyGen_Prepare fuzzerLogFile-0-zJlwu7c6IK.data fuzzerLogFile-0-zJlwu7c6IK.data.yaml Tss2_Sys_ECDH_KeyGen_Prepare.covreport
Tss2_Sys_SelfTest_Prepare fuzzerLogFile-0-t1gz7hkqQp.data fuzzerLogFile-0-t1gz7hkqQp.data.yaml Tss2_Sys_SelfTest_Prepare.covreport
Tss2_Sys_StirRandom_Complete fuzzerLogFile-0-EeVOac4BdK.data fuzzerLogFile-0-EeVOac4BdK.data.yaml Tss2_Sys_StirRandom_Complete.covreport
Tss2_Sys_MAC_Start_Prepare fuzzerLogFile-0-oAA6wLQM6r.data fuzzerLogFile-0-oAA6wLQM6r.data.yaml Tss2_Sys_MAC_Start_Prepare.covreport
Tss2_Sys_PolicyDuplicationSelect_Complete fuzzerLogFile-0-eqpHEmRKmi.data fuzzerLogFile-0-eqpHEmRKmi.data.yaml Tss2_Sys_PolicyDuplicationSelect_Complete.covreport
Tss2_Sys_ZGen_2Phase_Complete fuzzerLogFile-0-YmRnNOiTmp.data fuzzerLogFile-0-YmRnNOiTmp.data.yaml Tss2_Sys_ZGen_2Phase_Complete.covreport
Tss2_Sys_GetCapability_Complete fuzzerLogFile-0-23RjWALN5A.data fuzzerLogFile-0-23RjWALN5A.data.yaml Tss2_Sys_GetCapability_Complete.covreport
Tss2_Sys_NV_UndefineSpaceSpecial_Prepare fuzzerLogFile-0-1gcvES7grU.data fuzzerLogFile-0-1gcvES7grU.data.yaml Tss2_Sys_NV_UndefineSpaceSpecial_Prepare.covreport
Tss2_Sys_PolicyGetDigest_Prepare fuzzerLogFile-0-f3UFMI8X7V.data fuzzerLogFile-0-f3UFMI8X7V.data.yaml Tss2_Sys_PolicyGetDigest_Prepare.covreport
Tss2_Sys_TestParms_Prepare fuzzerLogFile-0-drZTsumGhP.data fuzzerLogFile-0-drZTsumGhP.data.yaml Tss2_Sys_TestParms_Prepare.covreport
Tss2_Sys_VerifySignature_Prepare fuzzerLogFile-0-qo35jvg693.data fuzzerLogFile-0-qo35jvg693.data.yaml Tss2_Sys_VerifySignature_Prepare.covreport
Tss2_Sys_NV_UndefineSpaceSpecial_Complete fuzzerLogFile-0-VwIPVEpI89.data fuzzerLogFile-0-VwIPVEpI89.data.yaml Tss2_Sys_NV_UndefineSpaceSpecial_Complete.covreport
Tss2_Sys_Rewrap_Complete fuzzerLogFile-0-x4vD2lmkJD.data fuzzerLogFile-0-x4vD2lmkJD.data.yaml Tss2_Sys_Rewrap_Complete.covreport
Tss2_Sys_AC_Send_Prepare fuzzerLogFile-0-InTcj0wAzA.data fuzzerLogFile-0-InTcj0wAzA.data.yaml Tss2_Sys_AC_Send_Prepare.covreport
Tss2_Sys_NV_DefineSpace_Complete fuzzerLogFile-0-F84RvzPeTy.data fuzzerLogFile-0-F84RvzPeTy.data.yaml Tss2_Sys_NV_DefineSpace_Complete.covreport
Tss2_Sys_IncrementalSelfTest_Prepare fuzzerLogFile-0-6aKy3JSDDD.data fuzzerLogFile-0-6aKy3JSDDD.data.yaml Tss2_Sys_IncrementalSelfTest_Prepare.covreport
Tss2_Sys_ContextSave_Prepare fuzzerLogFile-0-sIoDzF8c3Y.data fuzzerLogFile-0-sIoDzF8c3Y.data.yaml Tss2_Sys_ContextSave_Prepare.covreport
Tss2_Sys_FirmwareRead_Complete fuzzerLogFile-0-2yGZ5Jqqx9.data fuzzerLogFile-0-2yGZ5Jqqx9.data.yaml Tss2_Sys_FirmwareRead_Complete.covreport
Tss2_Sys_PolicySigned_Prepare fuzzerLogFile-0-o51s6q8VG0.data fuzzerLogFile-0-o51s6q8VG0.data.yaml Tss2_Sys_PolicySigned_Prepare.covreport
Tss2_Sys_RSA_Encrypt_Complete fuzzerLogFile-0-8r6toEsQq7.data fuzzerLogFile-0-8r6toEsQq7.data.yaml Tss2_Sys_RSA_Encrypt_Complete.covreport
Tss2_Sys_NV_Increment_Prepare fuzzerLogFile-0-oqxqosJTjk.data fuzzerLogFile-0-oqxqosJTjk.data.yaml Tss2_Sys_NV_Increment_Prepare.covreport
Tss2_Sys_Policy_AC_SendSelect_Prepare fuzzerLogFile-0-jrJmXeeejq.data fuzzerLogFile-0-jrJmXeeejq.data.yaml Tss2_Sys_Policy_AC_SendSelect_Prepare.covreport
Tss2_Sys_NV_ReadLock_Complete fuzzerLogFile-0-ZxyysY7gq7.data fuzzerLogFile-0-ZxyysY7gq7.data.yaml Tss2_Sys_NV_ReadLock_Complete.covreport
Tss2_Sys_HierarchyChangeAuth_Complete fuzzerLogFile-0-GtzwIYGSae.data fuzzerLogFile-0-GtzwIYGSae.data.yaml Tss2_Sys_HierarchyChangeAuth_Complete.covreport
Tss2_Sys_NV_SetBits_Complete fuzzerLogFile-0-gnziL3KzwR.data fuzzerLogFile-0-gnziL3KzwR.data.yaml Tss2_Sys_NV_SetBits_Complete.covreport
Tss2_Sys_FlushContext_Prepare fuzzerLogFile-0-IoXw1wtzQe.data fuzzerLogFile-0-IoXw1wtzQe.data.yaml Tss2_Sys_FlushContext_Prepare.covreport
Tss2_Sys_FieldUpgradeData_Complete fuzzerLogFile-0-ylg48rmSiv.data fuzzerLogFile-0-ylg48rmSiv.data.yaml Tss2_Sys_FieldUpgradeData_Complete.covreport
Tss2_Sys_NV_Read_Prepare fuzzerLogFile-0-imDscGfBmo.data fuzzerLogFile-0-imDscGfBmo.data.yaml Tss2_Sys_NV_Read_Prepare.covreport
Tss2_Sys_ActivateCredential_Complete fuzzerLogFile-0-cLB3yqoiBS.data fuzzerLogFile-0-cLB3yqoiBS.data.yaml Tss2_Sys_ActivateCredential_Complete.covreport
Tss2_Sys_FieldUpgradeStart_Complete fuzzerLogFile-0-VwiAgQuWjy.data fuzzerLogFile-0-VwiAgQuWjy.data.yaml Tss2_Sys_FieldUpgradeStart_Complete.covreport
Tss2_Sys_PCR_SetAuthValue_Prepare fuzzerLogFile-0-3k2Kqa2EGo.data fuzzerLogFile-0-3k2Kqa2EGo.data.yaml Tss2_Sys_PCR_SetAuthValue_Prepare.covreport
Tss2_Sys_Certify_Prepare fuzzerLogFile-0-e4RS8xoLzo.data fuzzerLogFile-0-e4RS8xoLzo.data.yaml Tss2_Sys_Certify_Prepare.covreport
Tss2_Sys_Create_Complete fuzzerLogFile-0-35aw3Oo8CQ.data fuzzerLogFile-0-35aw3Oo8CQ.data.yaml Tss2_Sys_Create_Complete.covreport
Tss2_Sys_PCR_Extend_Prepare fuzzerLogFile-0-uQ50Dndt0m.data fuzzerLogFile-0-uQ50Dndt0m.data.yaml Tss2_Sys_PCR_Extend_Prepare.covreport
Tss2_Sys_PCR_SetAuthValue_Complete fuzzerLogFile-0-4NAGAVMdjy.data fuzzerLogFile-0-4NAGAVMdjy.data.yaml Tss2_Sys_PCR_SetAuthValue_Complete.covreport
Tss2_Sys_FieldUpgradeStart_Prepare fuzzerLogFile-0-mOxUW0sGDQ.data fuzzerLogFile-0-mOxUW0sGDQ.data.yaml Tss2_Sys_FieldUpgradeStart_Prepare.covreport
Tss2_Sys_NV_DefineSpace_Prepare fuzzerLogFile-0-qSJJZ3VZlv.data fuzzerLogFile-0-qSJJZ3VZlv.data.yaml Tss2_Sys_NV_DefineSpace_Prepare.covreport
Tss2_Sys_PolicyRestart_Prepare fuzzerLogFile-0-OSxs8KhMeS.data fuzzerLogFile-0-OSxs8KhMeS.data.yaml Tss2_Sys_PolicyRestart_Prepare.covreport
Tss2_Sys_PolicyPCR_Complete fuzzerLogFile-0-Fkh2GGeb6r.data fuzzerLogFile-0-Fkh2GGeb6r.data.yaml Tss2_Sys_PolicyPCR_Complete.covreport
Tss2_Sys_Hash_Complete fuzzerLogFile-0-KZ6Qi4SOhI.data fuzzerLogFile-0-KZ6Qi4SOhI.data.yaml Tss2_Sys_Hash_Complete.covreport
Tss2_Sys_ReadPublic_Prepare fuzzerLogFile-0-EqjI1TCkVI.data fuzzerLogFile-0-EqjI1TCkVI.data.yaml Tss2_Sys_ReadPublic_Prepare.covreport
Tss2_Sys_NV_Increment_Complete fuzzerLogFile-0-28raZuFlRm.data fuzzerLogFile-0-28raZuFlRm.data.yaml Tss2_Sys_NV_Increment_Complete.covreport
Tss2_Sys_ECC_Parameters_Complete fuzzerLogFile-0-4NaBmONpqH.data fuzzerLogFile-0-4NaBmONpqH.data.yaml Tss2_Sys_ECC_Parameters_Complete.covreport
Tss2_Sys_GetSessionAuditDigest_Prepare fuzzerLogFile-0-MZbildC89I.data fuzzerLogFile-0-MZbildC89I.data.yaml Tss2_Sys_GetSessionAuditDigest_Prepare.covreport
Tss2_Sys_CertifyCreation_Complete fuzzerLogFile-0-luGv9V3gvw.data fuzzerLogFile-0-luGv9V3gvw.data.yaml Tss2_Sys_CertifyCreation_Complete.covreport
Tss2_Sys_NV_WriteLock_Complete fuzzerLogFile-0-uOHANNbulJ.data fuzzerLogFile-0-uOHANNbulJ.data.yaml Tss2_Sys_NV_WriteLock_Complete.covreport
Tss2_Sys_NV_Write_Prepare fuzzerLogFile-0-6ucuQhXtGC.data fuzzerLogFile-0-6ucuQhXtGC.data.yaml Tss2_Sys_NV_Write_Prepare.covreport
Tss2_Sys_SetPrimaryPolicy_Complete fuzzerLogFile-0-7NeXRt6rRB.data fuzzerLogFile-0-7NeXRt6rRB.data.yaml Tss2_Sys_SetPrimaryPolicy_Complete.covreport
Tss2_Sys_PolicyTemplate_Complete fuzzerLogFile-0-35A9BhB8E2.data fuzzerLogFile-0-35A9BhB8E2.data.yaml Tss2_Sys_PolicyTemplate_Complete.covreport
Tss2_Sys_DictionaryAttackParameters_Complete fuzzerLogFile-0-CFFegART0y.data fuzzerLogFile-0-CFFegART0y.data.yaml Tss2_Sys_DictionaryAttackParameters_Complete.covreport
Tss2_Sys_PolicyPhysicalPresence_Complete fuzzerLogFile-0-GfAxMQNhTp.data fuzzerLogFile-0-GfAxMQNhTp.data.yaml Tss2_Sys_PolicyPhysicalPresence_Complete.covreport
Tss2_Sys_ClockSet_Complete fuzzerLogFile-0-u1gFI7lRre.data fuzzerLogFile-0-u1gFI7lRre.data.yaml Tss2_Sys_ClockSet_Complete.covreport
Tss2_Sys_GetTestResult_Complete fuzzerLogFile-0-qo1irdnmAD.data fuzzerLogFile-0-qo1irdnmAD.data.yaml Tss2_Sys_GetTestResult_Complete.covreport
Tss2_Sys_PolicySecret_Prepare fuzzerLogFile-0-YnzI04nxr8.data fuzzerLogFile-0-YnzI04nxr8.data.yaml Tss2_Sys_PolicySecret_Prepare.covreport
Tss2_Sys_PCR_Reset_Complete fuzzerLogFile-0-3oFoRgcA0P.data fuzzerLogFile-0-3oFoRgcA0P.data.yaml Tss2_Sys_PCR_Reset_Complete.covreport
Tss2_Sys_PolicyNvWritten_Complete fuzzerLogFile-0-xU4VSPyqyO.data fuzzerLogFile-0-xU4VSPyqyO.data.yaml Tss2_Sys_PolicyNvWritten_Complete.covreport
Tss2_Sys_SetAlgorithmSet_Prepare fuzzerLogFile-0-cUvXuvK3GD.data fuzzerLogFile-0-cUvXuvK3GD.data.yaml Tss2_Sys_SetAlgorithmSet_Prepare.covreport
Tss2_Sys_NV_Certify_Complete fuzzerLogFile-0-pvrqyoldZC.data fuzzerLogFile-0-pvrqyoldZC.data.yaml Tss2_Sys_NV_Certify_Complete.covreport
Tss2_Sys_Sign_Complete fuzzerLogFile-0-QwuS4v37W3.data fuzzerLogFile-0-QwuS4v37W3.data.yaml Tss2_Sys_Sign_Complete.covreport
Tss2_Sys_Vendor_TCG_Test_Prepare fuzzerLogFile-0-SvEGYd3rBt.data fuzzerLogFile-0-SvEGYd3rBt.data.yaml Tss2_Sys_Vendor_TCG_Test_Prepare.covreport
Tss2_Sys_Vendor_TCG_Test_Complete fuzzerLogFile-0-MyhTqzH3ho.data fuzzerLogFile-0-MyhTqzH3ho.data.yaml Tss2_Sys_Vendor_TCG_Test_Complete.covreport
Tss2_Sys_Duplicate_Complete fuzzerLogFile-0-rxmqk2tKi4.data fuzzerLogFile-0-rxmqk2tKi4.data.yaml Tss2_Sys_Duplicate_Complete.covreport
Tss2_Sys_DictionaryAttackLockReset_Complete fuzzerLogFile-0-7HCf0vMtOc.data fuzzerLogFile-0-7HCf0vMtOc.data.yaml Tss2_Sys_DictionaryAttackLockReset_Complete.covreport
Tss2_Sys_SequenceUpdate_Prepare fuzzerLogFile-0-n1o0IvXeIN.data fuzzerLogFile-0-n1o0IvXeIN.data.yaml Tss2_Sys_SequenceUpdate_Prepare.covreport
Tss2_Sys_DictionaryAttackParameters_Prepare fuzzerLogFile-0-fDeyIt0xrd.data fuzzerLogFile-0-fDeyIt0xrd.data.yaml Tss2_Sys_DictionaryAttackParameters_Prepare.covreport
Tss2_Sys_PolicyLocality_Complete fuzzerLogFile-0-aWPp8qQWuT.data fuzzerLogFile-0-aWPp8qQWuT.data.yaml Tss2_Sys_PolicyLocality_Complete.covreport
Tss2_Sys_PCR_Allocate_Prepare fuzzerLogFile-0-TORC04uNPx.data fuzzerLogFile-0-TORC04uNPx.data.yaml Tss2_Sys_PCR_Allocate_Prepare.covreport
Tss2_Sys_NV_Extend_Prepare fuzzerLogFile-0-OF8FKK6GRV.data fuzzerLogFile-0-OF8FKK6GRV.data.yaml Tss2_Sys_NV_Extend_Prepare.covreport
Tss2_Sys_NV_ReadLock_Prepare fuzzerLogFile-0-pMMWEzltGR.data fuzzerLogFile-0-pMMWEzltGR.data.yaml Tss2_Sys_NV_ReadLock_Prepare.covreport
Tss2_Sys_StartAuthSession_Prepare fuzzerLogFile-0-o2mwzBLslD.data fuzzerLogFile-0-o2mwzBLslD.data.yaml Tss2_Sys_StartAuthSession_Prepare.covreport
Tss2_Sys_PolicyPassword_Complete fuzzerLogFile-0-iVhF02uceP.data fuzzerLogFile-0-iVhF02uceP.data.yaml Tss2_Sys_PolicyPassword_Complete.covreport
Tss2_Sys_ACT_SetTimeout_Complete fuzzerLogFile-0-SP70mW8Kyt.data fuzzerLogFile-0-SP70mW8Kyt.data.yaml Tss2_Sys_ACT_SetTimeout_Complete.covreport
Tss2_Sys_RSA_Decrypt_Complete fuzzerLogFile-0-VJSl4FXqre.data fuzzerLogFile-0-VJSl4FXqre.data.yaml Tss2_Sys_RSA_Decrypt_Complete.covreport
Tss2_Sys_PolicyNV_Prepare fuzzerLogFile-0-Ybx1dUNBJ0.data fuzzerLogFile-0-Ybx1dUNBJ0.data.yaml Tss2_Sys_PolicyNV_Prepare.covreport
Tss2_Sys_HierarchyChangeAuth_Prepare fuzzerLogFile-0-yMt6CdG2sR.data fuzzerLogFile-0-yMt6CdG2sR.data.yaml Tss2_Sys_HierarchyChangeAuth_Prepare.covreport
Tss2_Sys_Unseal_Complete fuzzerLogFile-0-86TOzlNj3L.data fuzzerLogFile-0-86TOzlNj3L.data.yaml Tss2_Sys_Unseal_Complete.covreport
Tss2_Sys_FlushContext_Complete fuzzerLogFile-0-hZuvWBAbwx.data fuzzerLogFile-0-hZuvWBAbwx.data.yaml Tss2_Sys_FlushContext_Complete.covreport
Tss2_Sys_CreateLoaded_Complete fuzzerLogFile-0-FbjYU5WmAb.data fuzzerLogFile-0-FbjYU5WmAb.data.yaml Tss2_Sys_CreateLoaded_Complete.covreport
Tss2_Sys_CertifyCreation_Prepare fuzzerLogFile-0-lmYPtFfzA0.data fuzzerLogFile-0-lmYPtFfzA0.data.yaml Tss2_Sys_CertifyCreation_Prepare.covreport
Tss2_Sys_Load_Prepare fuzzerLogFile-0-nlNgzvQiLv.data fuzzerLogFile-0-nlNgzvQiLv.data.yaml Tss2_Sys_Load_Prepare.covreport
Tss2_Sys_SetPrimaryPolicy_Prepare fuzzerLogFile-0-F8RvOhXlQR.data fuzzerLogFile-0-F8RvOhXlQR.data.yaml Tss2_Sys_SetPrimaryPolicy_Prepare.covreport
Tss2_Sys_EvictControl_Prepare fuzzerLogFile-0-E0tRXkKrmq.data fuzzerLogFile-0-E0tRXkKrmq.data.yaml Tss2_Sys_EvictControl_Prepare.covreport
Tss2_Sys_EncryptDecrypt2_Prepare fuzzerLogFile-0-z4yGzivPyW.data fuzzerLogFile-0-z4yGzivPyW.data.yaml Tss2_Sys_EncryptDecrypt2_Prepare.covreport
Tss2_Sys_GetTime_Complete fuzzerLogFile-0-slzaYLsgSw.data fuzzerLogFile-0-slzaYLsgSw.data.yaml Tss2_Sys_GetTime_Complete.covreport
Tss2_Sys_AC_GetCapability_Complete fuzzerLogFile-0-qJpTYviTqk.data fuzzerLogFile-0-qJpTYviTqk.data.yaml Tss2_Sys_AC_GetCapability_Complete.covreport
Tss2_Sys_Commit_Prepare fuzzerLogFile-0-ieRx1gh3v0.data fuzzerLogFile-0-ieRx1gh3v0.data.yaml Tss2_Sys_Commit_Prepare.covreport
Tss2_Sys_EvictControl_Complete fuzzerLogFile-0-XhBue5aciD.data fuzzerLogFile-0-XhBue5aciD.data.yaml Tss2_Sys_EvictControl_Complete.covreport
Tss2_Sys_ZGen_2Phase_Prepare fuzzerLogFile-0-Mb3IdSlruM.data fuzzerLogFile-0-Mb3IdSlruM.data.yaml Tss2_Sys_ZGen_2Phase_Prepare.covreport
Tss2_Sys_Unseal_Prepare fuzzerLogFile-0-Y5UexhUqRC.data fuzzerLogFile-0-Y5UexhUqRC.data.yaml Tss2_Sys_Unseal_Prepare.covreport
Tss2_Sys_NV_SetBits_Prepare fuzzerLogFile-0-1mv6KvFUk2.data fuzzerLogFile-0-1mv6KvFUk2.data.yaml Tss2_Sys_NV_SetBits_Prepare.covreport
Tss2_Sys_Quote_Complete fuzzerLogFile-0-N1CqMZc53c.data fuzzerLogFile-0-N1CqMZc53c.data.yaml Tss2_Sys_Quote_Complete.covreport
Tss2_Sys_Startup_Prepare fuzzerLogFile-0-AX00b66MZY.data fuzzerLogFile-0-AX00b66MZY.data.yaml Tss2_Sys_Startup_Prepare.covreport
Tss2_Sys_MakeCredential_Prepare fuzzerLogFile-0-E53LpGLLLj.data fuzzerLogFile-0-E53LpGLLLj.data.yaml Tss2_Sys_MakeCredential_Prepare.covreport
Tss2_Sys_StartAuthSession_Complete fuzzerLogFile-0-GtGrUTo3ap.data fuzzerLogFile-0-GtGrUTo3ap.data.yaml Tss2_Sys_StartAuthSession_Complete.covreport
Tss2_Sys_Policy_AC_SendSelect_Complete fuzzerLogFile-0-PD0NALoCFj.data fuzzerLogFile-0-PD0NALoCFj.data.yaml Tss2_Sys_Policy_AC_SendSelect_Complete.covreport
Tss2_Sys_ReadClock_Complete fuzzerLogFile-0-8jU4LI886s.data fuzzerLogFile-0-8jU4LI886s.data.yaml Tss2_Sys_ReadClock_Complete.covreport
Tss2_Sys_TestParms_Complete fuzzerLogFile-0-arvqzrEDWA.data fuzzerLogFile-0-arvqzrEDWA.data.yaml Tss2_Sys_TestParms_Complete.covreport
Tss2_Sys_CreatePrimary_Prepare fuzzerLogFile-0-CsH0b8xVhH.data fuzzerLogFile-0-CsH0b8xVhH.data.yaml Tss2_Sys_CreatePrimary_Prepare.covreport
Tss2_Sys_PolicyNameHash_Prepare fuzzerLogFile-0-bD7E0rsC8b.data fuzzerLogFile-0-bD7E0rsC8b.data.yaml Tss2_Sys_PolicyNameHash_Prepare.covreport
Tss2_Sys_Clear_Complete fuzzerLogFile-0-DCMbO5xr2F.data fuzzerLogFile-0-DCMbO5xr2F.data.yaml Tss2_Sys_Clear_Complete.covreport
Tss2_Sys_PolicySigned_Complete fuzzerLogFile-0-9nAvsqeZnN.data fuzzerLogFile-0-9nAvsqeZnN.data.yaml Tss2_Sys_PolicySigned_Complete.covreport
Tss2_Sys_NV_Certify_Prepare fuzzerLogFile-0-QZ3W3XPVoy.data fuzzerLogFile-0-QZ3W3XPVoy.data.yaml Tss2_Sys_NV_Certify_Prepare.covreport
Tss2_Sys_NV_ChangeAuth_Prepare fuzzerLogFile-0-H1B0eJyI9j.data fuzzerLogFile-0-H1B0eJyI9j.data.yaml Tss2_Sys_NV_ChangeAuth_Prepare.covreport
Tss2_Sys_ClearControl_Complete fuzzerLogFile-0-WvPlN0qKJj.data fuzzerLogFile-0-WvPlN0qKJj.data.yaml Tss2_Sys_ClearControl_Complete.covreport
Tss2_Sys_MAC_Complete fuzzerLogFile-0-QPOhHcIQrc.data fuzzerLogFile-0-QPOhHcIQrc.data.yaml Tss2_Sys_MAC_Complete.covreport
Tss2_Sys_PCR_Event_Prepare fuzzerLogFile-0-vx4hekfPk4.data fuzzerLogFile-0-vx4hekfPk4.data.yaml Tss2_Sys_PCR_Event_Prepare.covreport
Tss2_Sys_AC_Send_Complete fuzzerLogFile-0-mUKTPHJH7m.data fuzzerLogFile-0-mUKTPHJH7m.data.yaml Tss2_Sys_AC_Send_Complete.covreport
Tss2_Sys_ContextSave_Complete fuzzerLogFile-0-WubsqX93sf.data fuzzerLogFile-0-WubsqX93sf.data.yaml Tss2_Sys_ContextSave_Complete.covreport
Tss2_Sys_LoadExternal_Complete fuzzerLogFile-0-P1g0SsU44f.data fuzzerLogFile-0-P1g0SsU44f.data.yaml Tss2_Sys_LoadExternal_Complete.covreport
Tss2_Sys_GetRandom_Prepare fuzzerLogFile-0-mEfHthXlus.data fuzzerLogFile-0-mEfHthXlus.data.yaml Tss2_Sys_GetRandom_Prepare.covreport
Tss2_Sys_ECDH_ZGen_Prepare fuzzerLogFile-0-AXEvEgPtA2.data fuzzerLogFile-0-AXEvEgPtA2.data.yaml Tss2_Sys_ECDH_ZGen_Prepare.covreport
Tss2_Sys_HMAC_Start_Complete fuzzerLogFile-0-CzldJXnsVR.data fuzzerLogFile-0-CzldJXnsVR.data.yaml Tss2_Sys_HMAC_Start_Complete.covreport
Tss2_Sys_ClockRateAdjust_Complete fuzzerLogFile-0-sppqJAqGUj.data fuzzerLogFile-0-sppqJAqGUj.data.yaml Tss2_Sys_ClockRateAdjust_Complete.covreport
Tss2_Sys_ECDH_KeyGen_Complete fuzzerLogFile-0-t85Se8KZGt.data fuzzerLogFile-0-t85Se8KZGt.data.yaml Tss2_Sys_ECDH_KeyGen_Complete.covreport
Tss2_Sys_MAC_Start_Complete fuzzerLogFile-0-L7eb1SMaSb.data fuzzerLogFile-0-L7eb1SMaSb.data.yaml Tss2_Sys_MAC_Start_Complete.covreport
Tss2_Sys_EventSequenceComplete_Complete fuzzerLogFile-0-DHMCOd5Zn2.data fuzzerLogFile-0-DHMCOd5Zn2.data.yaml Tss2_Sys_EventSequenceComplete_Complete.covreport
Tss2_Sys_Duplicate_Prepare fuzzerLogFile-0-9DffkhesLM.data fuzzerLogFile-0-9DffkhesLM.data.yaml Tss2_Sys_Duplicate_Prepare.covreport
Tss2_Sys_NV_Read_Complete fuzzerLogFile-0-yUh9DHWPxq.data fuzzerLogFile-0-yUh9DHWPxq.data.yaml Tss2_Sys_NV_Read_Complete.covreport
Tss2_Sys_NV_ChangeAuth_Complete fuzzerLogFile-0-34cYgZFbww.data fuzzerLogFile-0-34cYgZFbww.data.yaml Tss2_Sys_NV_ChangeAuth_Complete.covreport
Tss2_Sys_NV_UndefineSpace_Complete fuzzerLogFile-0-VukUqEBI47.data fuzzerLogFile-0-VukUqEBI47.data.yaml Tss2_Sys_NV_UndefineSpace_Complete.covreport
Tss2_Sys_AC_GetCapability_Prepare fuzzerLogFile-0-5jmZCDz7mJ.data fuzzerLogFile-0-5jmZCDz7mJ.data.yaml Tss2_Sys_AC_GetCapability_Prepare.covreport
Tss2_Sys_ClockSet_Prepare fuzzerLogFile-0-b16P6cEYF9.data fuzzerLogFile-0-b16P6cEYF9.data.yaml Tss2_Sys_ClockSet_Prepare.covreport
Tss2_Sys_PolicyTicket_Complete fuzzerLogFile-0-JQj2Bk6WHY.data fuzzerLogFile-0-JQj2Bk6WHY.data.yaml Tss2_Sys_PolicyTicket_Complete.covreport
Tss2_Sys_PolicyCommandCode_Complete fuzzerLogFile-0-hRl9IzcWg5.data fuzzerLogFile-0-hRl9IzcWg5.data.yaml Tss2_Sys_PolicyCommandCode_Complete.covreport
Tss2_Sys_PolicyTemplate_Prepare fuzzerLogFile-0-craM7oaT3l.data fuzzerLogFile-0-craM7oaT3l.data.yaml Tss2_Sys_PolicyTemplate_Prepare.covreport
Tss2_Sys_GetTime_Prepare fuzzerLogFile-0-SiWIJQzQx4.data fuzzerLogFile-0-SiWIJQzQx4.data.yaml Tss2_Sys_GetTime_Prepare.covreport
Tss2_Sys_PCR_Read_Prepare fuzzerLogFile-0-wf52T2p7uj.data fuzzerLogFile-0-wf52T2p7uj.data.yaml Tss2_Sys_PCR_Read_Prepare.covreport
Tss2_Sys_MakeCredential_Complete fuzzerLogFile-0-rlaQ1sX3VQ.data fuzzerLogFile-0-rlaQ1sX3VQ.data.yaml Tss2_Sys_MakeCredential_Complete.covreport
Tss2_Sys_MAC_Prepare fuzzerLogFile-0-wyIvOCxzOX.data fuzzerLogFile-0-wyIvOCxzOX.data.yaml Tss2_Sys_MAC_Prepare.covreport
Tss2_Sys_Quote_Prepare fuzzerLogFile-0-6otSEEb0By.data fuzzerLogFile-0-6otSEEb0By.data.yaml Tss2_Sys_Quote_Prepare.covreport
Tss2_Sys_Shutdown_Complete fuzzerLogFile-0-gKohw7VJYh.data fuzzerLogFile-0-gKohw7VJYh.data.yaml Tss2_Sys_Shutdown_Complete.covreport
Tss2_Sys_PolicyTicket_Prepare fuzzerLogFile-0-b7Q2VMopvd.data fuzzerLogFile-0-b7Q2VMopvd.data.yaml Tss2_Sys_PolicyTicket_Prepare.covreport
Tss2_Sys_EventSequenceComplete_Prepare fuzzerLogFile-0-aUCQoqMtVV.data fuzzerLogFile-0-aUCQoqMtVV.data.yaml Tss2_Sys_EventSequenceComplete_Prepare.covreport
Tss2_Sys_PolicyNameHash_Complete fuzzerLogFile-0-ORxmeiWNty.data fuzzerLogFile-0-ORxmeiWNty.data.yaml Tss2_Sys_PolicyNameHash_Complete.covreport
Tss2_Sys_GetCapability_Prepare fuzzerLogFile-0-9DOniXXGAx.data fuzzerLogFile-0-9DOniXXGAx.data.yaml Tss2_Sys_GetCapability_Prepare.covreport
Tss2_Sys_PolicyPassword_Prepare fuzzerLogFile-0-8D1HBqmNbw.data fuzzerLogFile-0-8D1HBqmNbw.data.yaml Tss2_Sys_PolicyPassword_Prepare.covreport
Tss2_Sys_SetCommandCodeAuditStatus_Prepare fuzzerLogFile-0-MREGeWzHL6.data fuzzerLogFile-0-MREGeWzHL6.data.yaml Tss2_Sys_SetCommandCodeAuditStatus_Prepare.covreport
Tss2_Sys_PolicyNV_Complete fuzzerLogFile-0-X3ILMixrES.data fuzzerLogFile-0-X3ILMixrES.data.yaml Tss2_Sys_PolicyNV_Complete.covreport
Tss2_Sys_ECDH_ZGen_Complete fuzzerLogFile-0-yc16yr8G3h.data fuzzerLogFile-0-yc16yr8G3h.data.yaml Tss2_Sys_ECDH_ZGen_Complete.covreport
Tss2_Sys_ClockRateAdjust_Prepare fuzzerLogFile-0-u0OM3gkNyk.data fuzzerLogFile-0-u0OM3gkNyk.data.yaml Tss2_Sys_ClockRateAdjust_Prepare.covreport
Tss2_Sys_NV_Extend_Complete fuzzerLogFile-0-Nml1Tpjw89.data fuzzerLogFile-0-Nml1Tpjw89.data.yaml Tss2_Sys_NV_Extend_Complete.covreport
Tss2_Sys_PolicyCpHash_Complete fuzzerLogFile-0-EmyH8qYmfo.data fuzzerLogFile-0-EmyH8qYmfo.data.yaml Tss2_Sys_PolicyCpHash_Complete.covreport
Tss2_Sys_ChangePPS_Prepare fuzzerLogFile-0-pRc0lalwbE.data fuzzerLogFile-0-pRc0lalwbE.data.yaml Tss2_Sys_ChangePPS_Prepare.covreport
Tss2_Sys_Startup_Complete fuzzerLogFile-0-UODsahscyz.data fuzzerLogFile-0-UODsahscyz.data.yaml Tss2_Sys_Startup_Complete.covreport
Tss2_Sys_ContextLoad_Complete fuzzerLogFile-0-O6LDHuBlet.data fuzzerLogFile-0-O6LDHuBlet.data.yaml Tss2_Sys_ContextLoad_Complete.covreport
Tss2_Sys_SequenceComplete_Prepare fuzzerLogFile-0-jSVb7jXWpV.data fuzzerLogFile-0-jSVb7jXWpV.data.yaml Tss2_Sys_SequenceComplete_Prepare.covreport
Tss2_Sys_Load_Complete fuzzerLogFile-0-N0qaQiv6W0.data fuzzerLogFile-0-N0qaQiv6W0.data.yaml Tss2_Sys_Load_Complete.covreport
Tss2_Sys_ChangeEPS_Prepare fuzzerLogFile-0-Eooh27NEMG.data fuzzerLogFile-0-Eooh27NEMG.data.yaml Tss2_Sys_ChangeEPS_Prepare.covreport
Tss2_Sys_HMAC_Complete fuzzerLogFile-0-1ScrNePUaI.data fuzzerLogFile-0-1ScrNePUaI.data.yaml Tss2_Sys_HMAC_Complete.covreport
Tss2_Sys_PP_Commands_Prepare fuzzerLogFile-0-Os7r1IrjhE.data fuzzerLogFile-0-Os7r1IrjhE.data.yaml Tss2_Sys_PP_Commands_Prepare.covreport
Tss2_Sys_PolicyPCR_Prepare fuzzerLogFile-0-nTuwuFjUET.data fuzzerLogFile-0-nTuwuFjUET.data.yaml Tss2_Sys_PolicyPCR_Prepare.covreport
Tss2_Sys_PCR_SetAuthPolicy_Prepare fuzzerLogFile-0-OQ5GIsClXp.data fuzzerLogFile-0-OQ5GIsClXp.data.yaml Tss2_Sys_PCR_SetAuthPolicy_Prepare.covreport
Tss2_Sys_PolicyAuthValue_Prepare fuzzerLogFile-0-X4w8NCtweP.data fuzzerLogFile-0-X4w8NCtweP.data.yaml Tss2_Sys_PolicyAuthValue_Prepare.covreport
Tss2_Sys_ECC_Parameters_Prepare fuzzerLogFile-0-hiBHUpILgK.data fuzzerLogFile-0-hiBHUpILgK.data.yaml Tss2_Sys_ECC_Parameters_Prepare.covreport
Tss2_Sys_PCR_Allocate_Complete fuzzerLogFile-0-FlDDDjZ8Sl.data fuzzerLogFile-0-FlDDDjZ8Sl.data.yaml Tss2_Sys_PCR_Allocate_Complete.covreport
Tss2_Sys_PolicyDuplicationSelect_Prepare fuzzerLogFile-0-tT0eB9Oksz.data fuzzerLogFile-0-tT0eB9Oksz.data.yaml Tss2_Sys_PolicyDuplicationSelect_Prepare.covreport
Tss2_Sys_GetCommandAuditDigest_Prepare fuzzerLogFile-0-xrno16RoCC.data fuzzerLogFile-0-xrno16RoCC.data.yaml Tss2_Sys_GetCommandAuditDigest_Prepare.covreport
Tss2_Sys_GetCommandAuditDigest_Complete fuzzerLogFile-0-MX6pgJlPJx.data fuzzerLogFile-0-MX6pgJlPJx.data.yaml Tss2_Sys_GetCommandAuditDigest_Complete.covreport
Tss2_Sys_Shutdown_Prepare fuzzerLogFile-0-oMWgXMRLFq.data fuzzerLogFile-0-oMWgXMRLFq.data.yaml Tss2_Sys_Shutdown_Prepare.covreport
Tss2_Sys_PolicyAuthorize_Prepare fuzzerLogFile-0-oe5j1E8uGh.data fuzzerLogFile-0-oe5j1E8uGh.data.yaml Tss2_Sys_PolicyAuthorize_Prepare.covreport
Tss2_Sys_PolicyCounterTimer_Complete fuzzerLogFile-0-RvLXxYuwxG.data fuzzerLogFile-0-RvLXxYuwxG.data.yaml Tss2_Sys_PolicyCounterTimer_Complete.covreport
Tss2_Sys_NV_GlobalWriteLock_Prepare fuzzerLogFile-0-hKBa7DsYlb.data fuzzerLogFile-0-hKBa7DsYlb.data.yaml Tss2_Sys_NV_GlobalWriteLock_Prepare.covreport
Tss2_Sys_ReadPublic_Complete fuzzerLogFile-0-9nRIWIzN3t.data fuzzerLogFile-0-9nRIWIzN3t.data.yaml Tss2_Sys_ReadPublic_Complete.covreport
Tss2_Sys_RSA_Decrypt_Prepare fuzzerLogFile-0-It2OIphXkk.data fuzzerLogFile-0-It2OIphXkk.data.yaml Tss2_Sys_RSA_Decrypt_Prepare.covreport
Tss2_Sys_LoadExternal_Prepare fuzzerLogFile-0-CFE2kfmqNm.data fuzzerLogFile-0-CFE2kfmqNm.data.yaml Tss2_Sys_LoadExternal_Prepare.covreport
Tss2_Sys_PolicyPhysicalPresence_Prepare fuzzerLogFile-0-TM6RM1he7i.data fuzzerLogFile-0-TM6RM1he7i.data.yaml Tss2_Sys_PolicyPhysicalPresence_Prepare.covreport
Tss2_Sys_PCR_Reset_Prepare fuzzerLogFile-0-dDLaJHDD8H.data fuzzerLogFile-0-dDLaJHDD8H.data.yaml Tss2_Sys_PCR_Reset_Prepare.covreport
Tss2_Sys_PolicyCommandCode_Prepare fuzzerLogFile-0-OsiUxCTfUT.data fuzzerLogFile-0-OsiUxCTfUT.data.yaml Tss2_Sys_PolicyCommandCode_Prepare.covreport
Tss2_Sys_IncrementalSelfTest_Complete fuzzerLogFile-0-loksYMpgr6.data fuzzerLogFile-0-loksYMpgr6.data.yaml Tss2_Sys_IncrementalSelfTest_Complete.covreport
Tss2_Sys_ActivateCredential_Prepare fuzzerLogFile-0-ZyJFLBbohX.data fuzzerLogFile-0-ZyJFLBbohX.data.yaml Tss2_Sys_ActivateCredential_Prepare.covreport
Tss2_Sys_PCR_Event_Complete fuzzerLogFile-0-FVg7K0YIs2.data fuzzerLogFile-0-FVg7K0YIs2.data.yaml Tss2_Sys_PCR_Event_Complete.covreport
Tss2_Sys_NV_Write_Complete fuzzerLogFile-0-VSDYH6LpC2.data fuzzerLogFile-0-VSDYH6LpC2.data.yaml Tss2_Sys_NV_Write_Complete.covreport
Tss2_Sys_FirmwareRead_Prepare fuzzerLogFile-0-Akq2vibWi3.data fuzzerLogFile-0-Akq2vibWi3.data.yaml Tss2_Sys_FirmwareRead_Prepare.covreport
Tss2_Sys_HashSequenceStart_Complete fuzzerLogFile-0-GzyP35xFdG.data fuzzerLogFile-0-GzyP35xFdG.data.yaml Tss2_Sys_HashSequenceStart_Complete.covreport
Tss2_Sys_Clear_Prepare fuzzerLogFile-0-SHp3RFMYPg.data fuzzerLogFile-0-SHp3RFMYPg.data.yaml Tss2_Sys_Clear_Prepare.covreport
Tss2_Sys_ACT_SetTimeout_Prepare fuzzerLogFile-0-r5BEdP1Zd5.data fuzzerLogFile-0-r5BEdP1Zd5.data.yaml Tss2_Sys_ACT_SetTimeout_Prepare.covreport
Tss2_Sys_SetCommandCodeAuditStatus_Complete fuzzerLogFile-0-xvcAaJDrgo.data fuzzerLogFile-0-xvcAaJDrgo.data.yaml Tss2_Sys_SetCommandCodeAuditStatus_Complete.covreport
Tss2_Sys_Certify_Complete fuzzerLogFile-0-rGCefW0xP6.data fuzzerLogFile-0-rGCefW0xP6.data.yaml Tss2_Sys_Certify_Complete.covreport
Tss2_Sys_EncryptDecrypt_Prepare fuzzerLogFile-0-OcOVKoG70W.data fuzzerLogFile-0-OcOVKoG70W.data.yaml Tss2_Sys_EncryptDecrypt_Prepare.covreport
Tss2_Sys_PCR_Extend_Complete fuzzerLogFile-0-og9ZUPdUO9.data fuzzerLogFile-0-og9ZUPdUO9.data.yaml Tss2_Sys_PCR_Extend_Complete.covreport
Tss2_Sys_PCR_Read_Complete fuzzerLogFile-0-ucFXXoOKJJ.data fuzzerLogFile-0-ucFXXoOKJJ.data.yaml Tss2_Sys_PCR_Read_Complete.covreport
Tss2_Sys_EncryptDecrypt_Complete fuzzerLogFile-0-FGv6VKmbT5.data fuzzerLogFile-0-FGv6VKmbT5.data.yaml Tss2_Sys_EncryptDecrypt_Complete.covreport
Tss2_Sys_NV_WriteLock_Prepare fuzzerLogFile-0-0xImwdwIzj.data fuzzerLogFile-0-0xImwdwIzj.data.yaml Tss2_Sys_NV_WriteLock_Prepare.covreport
Tss2_Sys_NV_ReadPublic_Prepare fuzzerLogFile-0-aU0cwKY7x7.data fuzzerLogFile-0-aU0cwKY7x7.data.yaml Tss2_Sys_NV_ReadPublic_Prepare.covreport
Tss2_Sys_PolicyGetDigest_Complete fuzzerLogFile-0-v8DEcXvOmL.data fuzzerLogFile-0-v8DEcXvOmL.data.yaml Tss2_Sys_PolicyGetDigest_Complete.covreport
Tss2_Sys_RSA_Encrypt_Prepare fuzzerLogFile-0-WQrrL8AwEc.data fuzzerLogFile-0-WQrrL8AwEc.data.yaml Tss2_Sys_RSA_Encrypt_Prepare.covreport
Tss2_Sys_Import_Complete fuzzerLogFile-0-lmtMJSVgXF.data fuzzerLogFile-0-lmtMJSVgXF.data.yaml Tss2_Sys_Import_Complete.covreport
Tss2_Sys_NV_UndefineSpace_Prepare fuzzerLogFile-0-Ks1tnqPj5Z.data fuzzerLogFile-0-Ks1tnqPj5Z.data.yaml Tss2_Sys_NV_UndefineSpace_Prepare.covreport
Tss2_Sys_ChangePPS_Complete fuzzerLogFile-0-bilVesA5Vg.data fuzzerLogFile-0-bilVesA5Vg.data.yaml Tss2_Sys_ChangePPS_Complete.covreport
Tss2_Sys_Rewrap_Prepare fuzzerLogFile-0-kfFtkdXNiA.data fuzzerLogFile-0-kfFtkdXNiA.data.yaml Tss2_Sys_Rewrap_Prepare.covreport
Tss2_Sys_GetRandom_Complete fuzzerLogFile-0-qVBMr4w9JI.data fuzzerLogFile-0-qVBMr4w9JI.data.yaml Tss2_Sys_GetRandom_Complete.covreport
Tss2_Sys_ObjectChangeAuth_Complete fuzzerLogFile-0-PLBOlhO2jv.data fuzzerLogFile-0-PLBOlhO2jv.data.yaml Tss2_Sys_ObjectChangeAuth_Complete.covreport
Tss2_Sys_HierarchyControl_Prepare fuzzerLogFile-0-3NFMgwXxVb.data fuzzerLogFile-0-3NFMgwXxVb.data.yaml Tss2_Sys_HierarchyControl_Prepare.covreport
Target sink Callsite location Reached by fuzzer Function call path Covered by fuzzer Possible branch blockers