High level conclusions

Fuzzers reach 21.43% of cyclomatic complexity.

Fuzzers reach 22.90% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

979 / 4274

Cyclomatic complexity statically reachable by fuzzers

11244 / 52447

Runtime code coverage of functions

1616 / 4274

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: xmlsec_keyload_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	319	37.0%
gold	[1:9]	437	50.6%
yellow	[10:29]	19	2.20%
greenyellow	[30:49]	27	3.13%
lawngreen	50+	60	6.96%
All colors	862	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
77	660	xmlSecKeySetValue	call site: 00660	xmlSecKeyEnsureData
30	830	xmlSecOpenSSLAppKeyCertLoadMemory	call site: 00830	xmlSecOpenSSLAppKeyCertAdopt
22	774	xmlSecOpenSSLAppKeyFromCertLoadBIO	call site: 00774	xmlSecKeyEnsureData
14	244	do_init	call site: 00244	xmlSecShutdown
14	618	xmlSecOpenSSLAppPkcs12LoadBIO	call site: 00618	xmlSecOpenSSLCreateKey
12	71	xmlSecIORegisterDefaultCallbacks	call site: 00071	xmlSecIOFileExtractFilename
12	111	xmlSecIORegisterDefaultCallbacks	call site: 00111	xmlSecIOShutdown
11	213	xmlNewMutex	call site: 00213	xmlGetLastError
9	59	xmlSecPtrListEnsureSize	call site: 00059	xmlSecIOCallbackDestroy
8	8	xmlInitRandom	call site: 00008	xmlAbort
7	103	xmlSecIORegisterDefaultCallbacks	call site: 00103	xmlSecError
6	264	xmlSecOpenSSLAppInit	call site: 00264	xmlSecShutdown

Runtime coverage analysis

Covered functions

204

Functions that are reachable but not covered

126

Reachable functions

232

Percentage of reachable functions covered

45.69%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
xmlsec/apps/oss-fuzz/xmlsec_keyload_target.c	4
libxml2/threads.c	8
libxml2/dict.c	4
libxml2/error.c	5
libxml2/xmlmemory.c	1
libxml2/globals.c	8
libxml2/encoding.c	1
libxml2/xpath.c	2
libxml2/xmlIO.c	1
libxml2/catalog.c	1
libxml2/xmlschemastypes.c	1
libxml2/relaxng.c	1
xmlsecxmlsec.c	3
xmlsecerrors.c	9
xmlsecio.c	11
xmlseclist.c	10
libxml2/xmlstring.c	5
libxml2/uri.c	2
xmlseckeysdata.c	8
xmlseckeyinfo.c	7
xmlsectransforms.c	4
xmlsecbase64.c	1
xmlsecenveloped.c	1
xmlsecc14n.c	6
xmlsecxpath.c	4
xmlsecrelationship.c	1
xmlsecxslt.c	3
libxslt/libxslt/security.c	6
libxslt/libxslt/extensions.c	1
libxslt/libxslt/xsltutils.c	2
libxml2/tree.c	2
libxml2/parserInternals.c	1
xmlsecopenssl/app.c	12
xmlsecopenssl/crypto.c	7
xmlsecdl.c	1
xmlseckeys.c	9
xmlsecopenssl/evp.c	8
xmlsecbuffer.c	1
xmlsecopenssl/x509.c	8

Fuzzer: xmlsec_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1239	46.1%
gold	[1:9]	155	5.77%
yellow	[10:29]	29	1.07%
greenyellow	[30:49]	16	0.59%
lawngreen	50+	1247	46.4%
All colors	2686	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
206	2034	xmlBuildURISafe	call site: 02034	xmlCatalogXMLResolve
62	1971	xmlSplitQName4	call site: 01971	xmlParseXMLCatalogNodeList
54	869	xmlNewInputFromString	call site: 00869	xmlLoadResource
50	936	xmlHashLookup	call site: 00936	xmlParseXMLCatalogFile
36	1810	xmlCopyNamespace	call site: 01810	xmlCopyDtd
32	2425	xmlExpandPEsInEntityValue	call site: 02425	xmlLoadEntityContent
22	1636	nodePush	call site: 01636	xmlParseTextDecl
21	2246	xmlSkipBlankCharsPE	call site: 02246	xmlSkipBlankCharsPE
20	1490	xmlCtxtParseContentInternal	call site: 01490	xmlNewElem
19	1905	xmlNodeGetContent	call site: 01905	xmlBufGetNodeContent
18	1363	xmlParseAttValue	call site: 01363	xmlSkipBlankChars
17	1608	xmlFreeNode	call site: 01608	xmlNodeParseAttValue

Runtime coverage analysis

Covered functions

511

Functions that are reachable but not covered

222

Reachable functions

673

Percentage of reachable functions covered

67.01%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
xmlsec/apps/oss-fuzz/xmlsec_target.c	3
libxml2/threads.c	10
libxml2/dict.c	21
libxml2/error.c	17
libxml2/xmlmemory.c	1
libxml2/globals.c	20
libxml2/encoding.c	15
libxml2/xpath.c	2
libxml2/xmlIO.c	15
libxml2/catalog.c	38
libxml2/xmlschemastypes.c	1
libxml2/relaxng.c	1
xmlsecxmlsec.c	3
xmlsecerrors.c	3
xmlsecio.c	11
xmlseclist.c	5
libxml2/xmlstring.c	17
libxml2/uri.c	35
xmlseckeysdata.c	5
xmlseckeyinfo.c	7
xmlsectransforms.c	4
xmlsecbase64.c	1
xmlsecenveloped.c	1
xmlsecc14n.c	6
xmlsecxpath.c	4
xmlsecrelationship.c	1
xmlsecxslt.c	3
libxslt/libxslt/security.c	6
libxslt/libxslt/extensions.c	1
libxslt/libxslt/xsltutils.c	2
libxml2/tree.c	65
libxml2/parserInternals.c	41
xmlsecbuffer.c	11
xmlsecparser.c	3
libxml2/parser.c	141
libxml2/SAX2.c	6
libxml2/buf.c	19
libxml2/hash.c	27
libxml2/./include/private/memory.h	1
libxml2/HTMLparser.c	2
libxml2/chvalid.c	1
libxml2/./include/private/parser.h	2
libxml2/entities.c	10
libxml2/valid.c	40
libxml2/list.c	3
libxml2/xmlregexp.c	4

Fuzzer: xmlsec_relationship_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1403	48.6%
gold	[1:9]	157	5.44%
yellow	[10:29]	34	1.17%
greenyellow	[30:49]	26	0.90%
lawngreen	50+	1266	43.8%
All colors	2886	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
211	2673	find_relationships	call site: 02673	xmlDocCopyNode
150	2050	xmlBuildURISafe	call site: 02050	xmlCatalogXMLResolve
54	829	xmlNewInputFromString	call site: 00829	xmlLoadResource
36	896	xmlHashLookup	call site: 00896	xmlParseXMLCatalogFile
36	1770	xmlCopyNamespace	call site: 01770	xmlCopyDtd
33	1961	xmlStrncat	call site: 01961	xmlParseXMLCatalogOneNode
33	2016	xmlResolvePath	call site: 02016	xmlParseURISafe
32	2385	xmlExpandPEsInEntityValue	call site: 02385	xmlLoadEntityContent
27	1931	xmlSplitQName4	call site: 01931	xmlParseXMLCatalogNodeList
23	1595	nodePush	call site: 01595	xmlParseTextDecl
21	2206	xmlSkipBlankCharsPE	call site: 02206	xmlSkipBlankCharsPE
20	1450	xmlCtxtParseContentInternal	call site: 01450	xmlNewElem

Runtime coverage analysis

Covered functions

523

Functions that are reachable but not covered

261

Reachable functions

723

Percentage of reachable functions covered

63.9%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
xmlsec/apps/oss-fuzz/xmlsec_relationship_target.c	5
libxml2/threads.c	10
libxml2/dict.c	21
libxml2/error.c	17
libxml2/xmlmemory.c	1
libxml2/globals.c	20
libxml2/encoding.c	15
libxml2/xpath.c	4
libxml2/xmlIO.c	15
libxml2/catalog.c	38
libxml2/xmlschemastypes.c	1
libxml2/relaxng.c	1
xmlsecxmlsec.c	3
xmlsecerrors.c	4
xmlsecio.c	11
xmlseclist.c	10
libxml2/xmlstring.c	18
libxml2/uri.c	35
xmlseckeysdata.c	5
xmlseckeyinfo.c	7
xmlsectransforms.c	27
xmlsecbase64.c	1
xmlsecenveloped.c	1
xmlsecc14n.c	7
xmlsecxpath.c	4
xmlsecrelationship.c	1
xmlsecxslt.c	3
libxslt/libxslt/security.c	6
libxslt/libxslt/extensions.c	1
libxslt/libxslt/xsltutils.c	2
libxml2/tree.c	74
libxml2/parserInternals.c	41
xmlsecparser.c	2
libxml2/parser.c	142
libxml2/SAX2.c	6
libxml2/buf.c	19
libxml2/hash.c	27
libxml2/HTMLparser.c	2
libxml2/./include/private/memory.h	1
libxml2/chvalid.c	1
libxml2/./include/private/parser.h	2
libxml2/entities.c	10
libxml2/valid.c	40
libxml2/list.c	3
libxml2/xmlregexp.c	4
xmlsecxmltree.c	5
xmlsecbuffer.c	7
xmlsecnodeset.c	2
xmlsecmembuf.c	3

Fuzzer: xmlsec_keyinfo_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1278	40.0%
gold	[1:9]	434	13.6%
yellow	[10:29]	38	1.19%
greenyellow	[30:49]	23	0.72%
lawngreen	50+	1416	44.4%
All colors	3189	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
150	2392	xmlBuildURISafe	call site: 02392	xmlCatalogXMLResolve
54	1171	xmlNewInputFromString	call site: 01171	xmlLoadResource
36	2112	xmlCopyNamespace	call site: 02112	xmlCopyDtd
33	2358	xmlResolvePath	call site: 02358	xmlParseURISafe
32	2727	xmlExpandPEsInEntityValue	call site: 02727	xmlLoadEntityContent
28	1238	xmlHashLookup	call site: 01238	xmlParseXMLCatalogFile
27	2303	xmlStrncat	call site: 02303	xmlParseXMLCatalogOneNode
24	2545	xmlParsePERefInternal	call site: 02545	xmlSkipBlankCharsPE
23	1937	nodePush	call site: 01937	xmlParseTextDecl
18	1665	xmlParseAttValue	call site: 01665	xmlSkipBlankChars
18	2277	xmlGetPropNodeValueInternal	call site: 02277	xmlParseXMLCatalogNodeList
17	1910	xmlFreeNode	call site: 01910	xmlNodeParseAttValue

Runtime coverage analysis

Covered functions

1033

Functions that are reachable but not covered

220

Reachable functions

766

Percentage of reachable functions covered

71.28%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
xmlsec/apps/oss-fuzz/xmlsec_keyinfo_target.c	5
libxml2/threads.c	10
libxml2/dict.c	21
libxml2/error.c	17
libxml2/xmlmemory.c	1
libxml2/globals.c	20
libxml2/encoding.c	15
libxml2/xpath.c	4
libxml2/xmlIO.c	17
libxml2/catalog.c	38
libxml2/xmlschemastypes.c	1
libxml2/relaxng.c	1
xmlsecxmlsec.c	3
xmlsecerrors.c	9
xmlsecio.c	11
xmlseclist.c	11
libxml2/xmlstring.c	17
libxml2/uri.c	35
xmlseckeysdata.c	15
xmlseckeyinfo.c	13
xmlsectransforms.c	11
xmlsecbase64.c	2
xmlsecenveloped.c	1
xmlsecc14n.c	6
xmlsecxpath.c	4
xmlsecrelationship.c	1
xmlsecxslt.c	3
libxslt/libxslt/security.c	6
libxslt/libxslt/extensions.c	1
libxslt/libxslt/xsltutils.c	2
libxml2/tree.c	68
libxml2/parserInternals.c	41
xmlsecopenssl/app.c	4
xmlsecopenssl/crypto.c	8
xmlsecdl.c	1
xmlseckeysmngr.c	8
xmlsecopenssl/keysstore.c	1
xmlsecbuffer.c	4
xmlsecopenssl/x509vfy.c	1
xmlsecparser.c	1
libxml2/parser.c	142
libxml2/SAX2.c	6
libxml2/buf.c	19
libxml2/hash.c	27
libxml2/HTMLparser.c	2
libxml2/./include/private/memory.h	1
libxml2/chvalid.c	1
libxml2/./include/private/parser.h	2
libxml2/entities.c	10
libxml2/valid.c	42
libxml2/list.c	3
libxml2/xmlregexp.c	4
xmlsecxmltree.c	8
xmlseckeys.c	12
xmlsecnodeset.c	1
xmlsecxmlenc.c	4
xmlsecopenssl/symkeys.c	1

Fuzzer: xmlsec_dsig_verify_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1606	41.6%
gold	[1:9]	490	12.7%
yellow	[10:29]	50	1.29%
greenyellow	[30:49]	17	0.44%
lawngreen	50+	1694	43.9%
All colors	3857	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
113	2530	xmlHashAddEntry3	call site: 02530	xmlFetchXMLCatalogFile
63	2466	xmlBuildURISafe	call site: 02466	xmlCatalogXMLResolve
56	3582	xmlSecTransformCtxExecute	call site: 03582	xmlSecTransformCtxUriExecute
54	1245	xmlNewInputFromString	call site: 01245	xmlLoadResource
36	1312	xmlHashLookup	call site: 01312	xmlParseXMLCatalogFile
36	2186	xmlCopyNamespace	call site: 02186	xmlCopyDtd
34	2799	xmlParseStringPEReference	call site: 02799	xmlLoadEntityContent
33	2432	xmlResolvePath	call site: 02432	xmlParseURISafe
26	3821	xmlSecDSigCtxProcessSignatureNode	call site: 03821	xmlSecDSigCtxProcessReferences
23	2011	nodePush	call site: 02011	xmlParseTextDecl
18	1739	xmlParseAttValue	call site: 01739	xmlSkipBlankChars
17	1984	xmlFreeNode	call site: 01984	xmlNodeParseAttValue

Runtime coverage analysis

Covered functions

1361

Functions that are reachable but not covered

260

Reachable functions

894

Percentage of reachable functions covered

70.92%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
xmlsec/apps/oss-fuzz/xmlsec_dsig_verify_target.c	4
libxml2/threads.c	10
libxml2/dict.c	21
libxml2/error.c	17
libxml2/xmlmemory.c	1
libxml2/globals.c	20
libxml2/encoding.c	15
libxml2/xpath.c	20
libxml2/xmlIO.c	17
libxml2/catalog.c	38
libxml2/xmlschemastypes.c	1
libxml2/relaxng.c	1
xmlsecxmlsec.c	4
xmlsecerrors.c	9
xmlsecio.c	16
xmlseclist.c	12
libxml2/xmlstring.c	19
libxml2/uri.c	35
xmlseckeysdata.c	15
xmlseckeyinfo.c	11
xmlsectransforms.c	39
xmlsecbase64.c	15
xmlsecenveloped.c	1
xmlsecc14n.c	7
xmlsecxpath.c	13
xmlsecrelationship.c	1
xmlsecxslt.c	3
libxslt/libxslt/security.c	6
libxslt/libxslt/extensions.c	1
libxslt/libxslt/xsltutils.c	2
libxml2/tree.c	71
libxml2/parserInternals.c	41
xmlsecopenssl/app.c	7
xmlsecopenssl/crypto.c	10
xmlsecdl.c	1
xmlseckeysmngr.c	8
xmlsecopenssl/keysstore.c	1
xmlsecbuffer.c	12
xmlsecopenssl/x509vfy.c	3
xmlsecopenssl/x509.c	1
xmlsecparser.c	2
libxml2/parser.c	142
libxml2/SAX2.c	6
libxml2/buf.c	19
libxml2/hash.c	28
libxml2/HTMLparser.c	2
libxml2/./include/private/memory.h	1
libxml2/chvalid.c	1
libxml2/./include/private/parser.h	2
libxml2/entities.c	10
libxml2/valid.c	42
libxml2/list.c	3
libxml2/xmlregexp.c	4
xmlsecxmltree.c	9
xmlsecxmldsig.c	18
xmlseckeys.c	11
xmlsecnodeset.c	3
xmlsecxmlenc.c	4
xmlsecmembuf.c	3

Fuzzer: xmlsec_enc_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1906	44.9%
gold	[1:9]	510	12.0%
yellow	[10:29]	49	1.15%
greenyellow	[30:49]	22	0.51%
lawngreen	50+	1749	41.2%
All colors	4236	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
234	3951	xmlCtxtReset	call site: 03951	htmlCtxtParseContentInternal
177	2808	xmlBuildURISafe	call site: 02808	xmlCatalogXMLResolve
88	1695	xmlNewInputFromString	call site: 01695	xmlLoadResource
74	885	xmlSecOpenSSLAppKeyLoadBIO	call site: 00885	xmlSecOpenSSLAppPkcs12LoadBIO
66	3838	xmlSecTransformCtxExecute	call site: 03838	xmlSecTransformCtxUriExecute
34	3140	xmlParseStringPEReference	call site: 03140	xmlLoadEntityContent
33	2774	xmlResolvePath	call site: 02774	xmlParseURISafe
25	1083	xmlSecOpenSSLX509CertLoadBIO	call site: 01083	xmlSecKeyEnsureData
25	4198	xmlAddPrevSibling	call site: 04198	xmlInsertProp
23	2353	nodePush	call site: 02353	xmlParseTextDecl
20	2323	xmlNewText	call site: 02323	xmlNodeParseAttValue
18	2180	xmlParseAttValue	call site: 02180	xmlSkipBlankChars

Runtime coverage analysis

Covered functions

1275

Functions that are reachable but not covered

317

Reachable functions

984

Percentage of reachable functions covered

67.78%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
xmlsec/apps/oss-fuzz/xmlsec_enc_target.c	9
libxml2/threads.c	10
libxml2/dict.c	21
libxml2/error.c	17
libxml2/xmlmemory.c	1
libxml2/globals.c	20
libxml2/encoding.c	15
libxml2/xpath.c	20
libxml2/xmlIO.c	17
libxml2/catalog.c	38
libxml2/xmlschemastypes.c	1
libxml2/relaxng.c	1
xmlsecxmlsec.c	4
xmlsecerrors.c	9
xmlsecio.c	16
xmlseclist.c	12
libxml2/xmlstring.c	20
libxml2/uri.c	35
xmlseckeysdata.c	15
xmlseckeyinfo.c	10
xmlsectransforms.c	38
xmlsecbase64.c	2
xmlsecenveloped.c	1
xmlsecc14n.c	7
xmlsecxpath.c	13
xmlsecrelationship.c	1
xmlsecxslt.c	3
libxslt/libxslt/security.c	6
libxslt/libxslt/extensions.c	1
libxslt/libxslt/xsltutils.c	2
libxml2/tree.c	75
libxml2/parserInternals.c	42
xmlsecopenssl/app.c	11
xmlsecopenssl/crypto.c	10
xmlsecdl.c	1
xmlseckeysmngr.c	11
xmlsecopenssl/keysstore.c	3
xmlsecbuffer.c	10
xmlsecopenssl/x509vfy.c	1
xmlsecopenssl/symkeys.c	2
xmlseckeys.c	21
xmlsecnodeset.c	3
libxml2/valid.c	42
libxml2/hash.c	28
libxml2/list.c	3
libxml2/xmlregexp.c	4
libxml2/entities.c	10
xmlsecxmlenc.c	13
xmlsecopenssl/evp.c	5
xmlsecopenssl/x509.c	7
xmlsecparser.c	2
libxml2/parser.c	146
libxml2/SAX2.c	7
libxml2/buf.c	19
libxml2/HTMLparser.c	47
libxml2/./include/private/memory.h	1
libxml2/chvalid.c	1
libxml2/./include/private/parser.h	2
xmlsecxmltree.c	11
xmlsecmembuf.c	3
libxml2/HTMLtree.c	1

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
xmlSchemaValidateStream	/src/libxml2/xmlschemas.c	5	['N/A', 'N/A', 'int', 'N/A', 'N/A']	60	0	141	24	10	1192	0	16297	9017
xmlSecXsltPushBin	/src/xmlsec/src/xslt.c	5	['N/A', 'N/A', 'size_t', 'int', 'N/A']	34	0	853	214	90	1185	0	14706	7064
xsltLoadStylesheetPI	/src/libxslt/libxslt/xslt.c	1	['N/A']	30	0	398	68	26	857	0	10178	2342
xmlTextReaderRelaxNGValidate	/src/libxml2/xmlreader.c	2	['N/A', 'N/A']	55	0	18	3	2	981	0	12769	1712
xmlTextReaderNextTree	/src/libxml2/xmlreader.c	1	['N/A']	68	0	191	24	11	982	3	12644	1253
xmlSecOpenSSLKeyDataX509XmlRead	/src/xmlsec/src/openssl/x509.c	4	['N/A', 'N/A', 'N/A', 'N/A']	14	0	74	18	9	287	0	1842	1070
xmlSecTransformC14NPushXml	/src/xmlsec/src/c14n.c	3	['N/A', 'N/A', 'N/A']	19	0	680	180	78	317	0	3212	641

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

2564 / 4274

Cyclomatic complexity statically reachable by fuzzers

34122 / 52447

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

xmlsec/apps/oss-fuzz/xmlsec_keyload_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['xmlSecKeySetValue', 'xmlSecOpenSSLAppKeyCertLoadMemory', 'xmlSecOpenSSLAppKeyFromCertLoadBIO', 'do_init', 'xmlSecOpenSSLAppPkcs12LoadBIO', 'xmlSecIORegisterDefaultCallbacks', 'xmlNewMutex', 'xmlSecPtrListEnsureSize', 'xmlInitRandom']

xmlsec/apps/oss-fuzz/xmlsec_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['xmlBuildURISafe', 'xmlSplitQName4', 'xmlNewInputFromString', 'xmlHashLookup', 'xmlCopyNamespace', 'xmlExpandPEsInEntityValue', 'nodePush', 'xmlSkipBlankCharsPE', 'xmlCtxtParseContentInternal', 'xmlNodeGetContent']

xmlsec/apps/oss-fuzz/xmlsec_relationship_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['find_relationships', 'xmlBuildURISafe', 'xmlNewInputFromString', 'xmlHashLookup', 'xmlCopyNamespace', 'xmlStrncat', 'xmlResolvePath', 'xmlExpandPEsInEntityValue', 'xmlSplitQName4', 'nodePush']

xmlsec/apps/oss-fuzz/xmlsec_keyinfo_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['xmlBuildURISafe', 'xmlNewInputFromString', 'xmlCopyNamespace', 'xmlResolvePath', 'xmlExpandPEsInEntityValue', 'xmlHashLookup', 'xmlStrncat', 'xmlParsePERefInternal', 'nodePush', 'xmlParseAttValue']

xmlsec/apps/oss-fuzz/xmlsec_dsig_verify_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['xmlHashAddEntry3', 'xmlBuildURISafe', 'xmlSecTransformCtxExecute', 'xmlNewInputFromString', 'xmlHashLookup', 'xmlCopyNamespace', 'xmlParseStringPEReference', 'xmlResolvePath', 'xmlSecDSigCtxProcessSignatureNode', 'nodePush']

xmlsec/apps/oss-fuzz/xmlsec_enc_target.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['xmlCtxtReset', 'xmlBuildURISafe', 'xmlNewInputFromString', 'xmlSecOpenSSLAppKeyLoadBIO', 'xmlSecTransformCtxExecute', 'xmlParseStringPEReference', 'xmlResolvePath', 'xmlSecOpenSSLX509CertLoadBIO', 'xmlAddPrevSibling', 'nodePush']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
xmlSecKeyDataIdsRegisterDefault	33	12	36.36%	['xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_keyload_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_fuzzer']
xmlSecOpenSSLAppKeyFromCertLoadBIO	55	19	34.54%	['xmlsec_keyload_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecTransformIdsRegisterDefault	61	19	31.14%	['xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_keyload_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_fuzzer']
xmlSecCheckVersionExt	31	14	45.16%	['xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_keyload_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_fuzzer']
xmlSAX2ExternalSubset	76	6	7.894%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xmlSAX2StartElementNs	193	98	50.77%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xmlSAX2AttributeNs	144	68	47.22%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xmlSAX2TextNode	62	21	33.87%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xmlErrString	321	140	43.61%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xmlBuildURISafe	237	37	15.61%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xmlDoErrValid	35	16	45.71%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecBufferSetMaxSize	57	30	52.63%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecParseMemory	53	28	52.83%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_fuzzer']
xmlCheckLanguageID	103	13	12.62%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xmlNormalizePath	59	5	8.474%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xmlC14NProcessNode	122	63	51.63%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlNodeListGetStringInternal	48	10	20.83%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlBufGetNodeContent	31	13	41.93%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xmlGetPropNodeInternal	92	45	48.91%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xmlOutputBufferWriteQuotedString	36	11	30.55%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlOutputBufferFlush	44	23	52.27%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlXPathObjectCopy	38	17	44.73%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlXPathCacheObjectCopy	31	16	51.61%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlXPtrEval	54	28	51.85%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecTransformC14NExecute	70	38	54.28%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecKeyInfoCtxCreateEncCtx	54	29	53.70%	['xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecKeyDataAgreementMethodXmlRead	61	22	36.06%	['xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecPtrListCopy	56	17	30.35%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecOpenSSLVerifyAndAdoptX509KeyData	96	26	27.08%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecOpenSSLKeyDataRawX509CertBinRead	40	14	35.0%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecOpenSSLX509StoreInitialize	63	31	49.20%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecTransformCtxPrepare	44	23	52.27%	['xmlsec_relationship_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
htmlSetMetaEncoding	39	21	53.84%	['xmlsec_dsig_verify_fuzzer']
htmlParseMetaEncoding	40	7	17.5%	['xmlsec_dsig_verify_fuzzer']
xmlC14NFixupBaseAttr	67	23	34.32%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
xmlDictAddQString	53	19	35.84%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xmlNodeAddContentLen	31	11	35.48%	['xmlsec_dsig_verify_fuzzer']
xmlNodeSetDoc	69	25	36.23%	['xmlsec_keyinfo_fuzzer', 'xmlsec_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_enc_fuzzer']
xsltParseStylesheetAttributeSet	150	15	10.0%	['xmlsec_dsig_verify_fuzzer']
xsltParseStylesheetImport	64	20	31.25%	['xmlsec_dsig_verify_fuzzer']
xsltParseStylesheetInclude	57	21	36.84%	['xmlsec_dsig_verify_fuzzer']
xsltNamespaceAlias	75	14	18.66%	['xmlsec_dsig_verify_fuzzer']
xsltTestStepMatch	122	57	46.72%	['xmlsec_dsig_verify_fuzzer']
xsltNewStylePreComp	66	35	53.03%	['xmlsec_dsig_verify_fuzzer']
xsltGetQNameProperty	42	19	45.23%	['xmlsec_dsig_verify_fuzzer']
xsltCheckParentElement	32	15	46.87%	['xmlsec_dsig_verify_fuzzer']
xsltWithParamComp	32	16	50.0%	['xmlsec_dsig_verify_fuzzer']
xsltParamComp	32	16	50.0%	['xmlsec_dsig_verify_fuzzer']
xsltCopyTextString	56	28	50.0%	['xmlsec_dsig_verify_fuzzer']
xsltDocumentElem	396	34	8.585%	['xmlsec_dsig_verify_fuzzer']
xsltApplyTemplates	165	64	38.78%	['xmlsec_dsig_verify_fuzzer']
xsltChoose	55	9	16.36%	['xmlsec_dsig_verify_fuzzer']
xsltDefaultProcessOneNode	122	62	50.81%	['xmlsec_dsig_verify_fuzzer']
xsltApplyXSLTTemplate	85	39	45.88%	['xmlsec_dsig_verify_fuzzer']
xsltCopyText	94	39	41.48%	['xmlsec_dsig_verify_fuzzer']
xsltFreeRVTs	37	12	32.43%	['xmlsec_dsig_verify_fuzzer']
xsltEvalGlobalVariables	50	15	30.0%	['xmlsec_dsig_verify_fuzzer']
xsltXPathVariableLookup	59	18	30.50%	['xmlsec_dsig_verify_fuzzer']
xsltParseTemplateContent	149	69	46.30%	['xmlsec_dsig_verify_fuzzer']
xsltParseStylesheetExtPrefix	43	14	32.55%	['xmlsec_dsig_verify_fuzzer']
xsltParseStylesheetPreserveSpace	44	11	25.0%	['xmlsec_dsig_verify_fuzzer']
xsltParseStylesheetDecimalFormat	97	39	40.20%	['xmlsec_dsig_verify_fuzzer']
xsltGatherNamespaces	58	7	12.06%	['xmlsec_dsig_verify_fuzzer']
xsltGetNsProp	43	7	16.27%	['xmlsec_dsig_verify_fuzzer']
xmlSecTransformC14NNodeRead	64	22	34.37%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecOpenSSLAppKeysMngrCertLoadMemory	33	18	54.54%	['xmlsec_dsig_verify_fuzzer']
xmlSecOpenSSLEvpSignatureInitialize	233	106	45.49%	['xmlsec_dsig_verify_fuzzer']
xmlSecOpenSSLEvpSignatureCheckId	139	73	52.51%	['xmlsec_dsig_verify_fuzzer']
xmlSecOpenSSLX509NameToString	63	28	44.44%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecOpenSSLX509FilterCrlsByTime	41	12	29.26%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecOpenSSLX509StoreVerifyCert	111	43	38.73%	['xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
xmlSecDSigCtxVerify	34	16	47.05%	['xmlsec_dsig_verify_fuzzer']
xmlSecDSigReferenceCtxInitialize	37	19	51.35%	['xmlsec_dsig_verify_fuzzer']
xmlSecDSigCtxProcessKeyInfoNode	31	14	45.16%	['xmlsec_dsig_verify_fuzzer']
xmlSecTransformXPointerNodeRead	45	19	42.22%	['xmlsec_dsig_verify_fuzzer']
xmlSecKeyDataDerivedKeyXmlRead	46	17	36.95%	['xmlsec_enc_fuzzer']
xmlSecKeyDataBinaryValueBinRead	37	18	48.64%	['xmlsec_enc_fuzzer']
xmlSecNodeSetGetFastPathNodes	40	20	50.0%	['xmlsec_enc_fuzzer']
xmlSecOpenSSLEvpBlockCipherCBCCtxFinal	112	49	43.75%	['xmlsec_enc_fuzzer']
xmlSecOpenSSLEvpBlockCipherGCMCtxFinal	63	34	53.96%	['xmlsec_enc_fuzzer']
xmlSecOpenSSLKeyAgreementInitialize	44	17	38.63%	['xmlsec_enc_fuzzer']
xmlSecOpenSSLRsaOaepSetKeyImpl	43	20	46.51%	['xmlsec_enc_fuzzer']
xmlSecOpenSSLRsaOaepProcess	75	27	36.0%	['xmlsec_enc_fuzzer']
xmlSecOpenSSLSymKeyDataKlassCheck	43	19	44.18%	['xmlsec_enc_fuzzer']
xmlSecTransformKAMRead	85	29	34.11%	['xmlsec_enc_fuzzer']
xmlSecTransformXPath2NodeRead	68	23	33.82%	['xmlsec_enc_fuzzer']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/libxslt/libxslt/variables.c	[]	[]
/src/xmlsec/src/transforms.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxslt/libxslt/imports.c	[]	[]
/src/libxslt/libxslt/templates.c	[]	[]
/src/libxml2/list.c	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/apps/oss-fuzz/xmlsec_keyinfo_target.c	['xmlsec_keyinfo_fuzzer']	['xmlsec_keyinfo_fuzzer']
/src/libxml2/./timsort.h	[]	[]
/src/libxml2/xpointer.c	[]	[]
/src/xmlsec/src/parser.c	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/xpath.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/tree.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/keysdata_helpers.c	[]	[]
/src/xmlsec/apps/oss-fuzz/xmlsec_target.c	['xmlsec_fuzzer']	['xmlsec_fuzzer']
/src/libxslt/libxslt/extra.c	[]	[]
/src/xmlsec/src/xmlenc.c	['xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/./codegen/unicode.inc	[]	[]
/src/xmlsec/src/keyinfo.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/xmlsave.c	[]	[]
/src/libxml2/relaxng.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/xmlstring.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxslt/libxslt/attributes.c	[]	[]
/src/xmlsec/src/list.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxslt/libxslt/security.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxslt/libxslt/numbers.c	[]	[]
/src/xmlsec/src/nodeset.c	['xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/valid.c	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/HTMLtree.c	['xmlsec_enc_fuzzer']	[]
/src/xmlsec/src/openssl/crypto.c	['xmlsec_keyload_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/openssl/keysstore.c	['xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/hash.c	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxslt/libxslt/attrvt.c	[]	[]
/src/xmlsec/src/io.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/debugXML.c	[]	[]
/src/libxml2/dict.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/xmlregexp.c	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	[]
/src/libxml2/uri.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/openssl/hmac.c	[]	[]
/src/xmlsec/src/keysmngr.c	['xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/openssl/kdf.c	[]	[]
/src/libxml2/xmlschemas.c	[]	[]
/src/libxml2/pattern.c	[]	[]
/src/libxml2/xmlIO.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxslt/libxslt/keys.c	[]	[]
/src/xmlsec/apps/oss-fuzz/xmlsec_dsig_verify_target.c	['xmlsec_dsig_verify_fuzzer']	['xmlsec_dsig_verify_fuzzer']
/src/libxml2/xmlmemory.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/errors.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/openssl/signatures.c	[]	[]
/src/xmlsec/src/buffer.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/transform_helpers.c	[]	[]
/src/libxml2/./include/private/memory.h	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	[]
/src/libxml2/parserInternals.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/relationship.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxslt/libxslt/extensions.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/xmlschemastypes.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxslt/libxslt/transform.c	[]	[]
/src/xmlsec/src/openssl/der_encoded_value.c	[]	[]
/src/xmlsec/src/base64.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/openssl/kt_rsa.c	[]	[]
/src/libxml2/HTMLparser.c	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_dsig_verify_fuzzer']
/src/libxml2/buf.c	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxslt/libxslt/xsltlocale.c	[]	[]
/src/xmlsec/src/openssl/evp.c	['xmlsec_keyload_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/apps/oss-fuzz/xmlsec_keyload_target.c	['xmlsec_keyload_fuzzer']	['xmlsec_keyload_fuzzer']
/src/xmlsec/src/keysdata.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/openssl/key_agrmnt.c	[]	[]
/src/xmlsec/src/openssl/symkeys.c	['xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyinfo_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/keys.c	['xmlsec_keyload_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/xslt.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/error.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/globals.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/dl.c	['xmlsec_keyload_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/c14n.c	[]	[]
/src/libxslt/libxslt/pattern.c	[]	[]
/src/xmlsec/src/kw_helpers.c	[]	[]
/src/libxml2/xmlreader.c	[]	[]
/src/libxml2/entities.c	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxslt/libxslt/xsltutils.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_dsig_verify_fuzzer']
/src/xmlsec/src/openssl/ciphers.c	[]	[]
/src/xmlsec/src/enveloped.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/openssl/digests.c	[]	[]
/src/libxslt/libxslt/functions.c	[]	[]
/src/xmlsec/src/xpath.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/openssl/kw_rfc_3394.c	[]	[]
/src/libxml2/catalog.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/membuf.c	['xmlsec_relationship_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/xmlsec.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/chvalid.c	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_dsig_verify_fuzzer']
/src/libxslt/libxslt/namespaces.c	[]	[]
/src/xmlsec/src/c14n.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxslt/libxslt/xslt.c	[]	[]
/src/libxml2/threads.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/openssl/kw_des.c	[]	[]
/src/libxml2/./include/private/parser.h	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	[]
/src/xmlsec/apps/oss-fuzz/xmlsec_enc_target.c	['xmlsec_enc_fuzzer']	['xmlsec_enc_fuzzer']
/src/libxslt/libxslt/preproc.c	[]	[]
/src/libxml2/xinclude.c	[]	[]
/src/xmlsec/src/openssl/x509vfy.c	['xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxml2/encoding.c	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/libxslt/libxslt/documents.c	[]	[]
/src/xmlsec/apps/oss-fuzz/xmlsec_relationship_target.c	['xmlsec_relationship_fuzzer']	['xmlsec_relationship_fuzzer']
/src/libxml2/parser.c	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/x509_helpers.c	[]	[]
/src/libxml2/SAX2.c	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_fuzzer', 'xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/openssl/app.c	['xmlsec_keyload_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/xmltree.c	['xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_relationship_fuzzer', 'xmlsec_keyinfo_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/openssl/x509.c	['xmlsec_keyload_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']	['xmlsec_keyload_fuzzer', 'xmlsec_dsig_verify_fuzzer', 'xmlsec_enc_fuzzer']
/src/xmlsec/src/xmldsig.c	['xmlsec_dsig_verify_fuzzer']	['xmlsec_dsig_verify_fuzzer']

Directories in report

Directory
/src/xmlsec/src/openssl/
/src/libxslt/libxslt/
/src/xmlsec/apps/oss-fuzz/
/src/libxml2/
/src/xmlsec/src/
/src/libxml2/./codegen/
/src/libxml2/./include/private/
/src/libxml2/./