Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues
Project coverage
Per-fuzzer coverage

Table of contents

Project overview: xpdf
High level conclusions
Reachability and coverage overview
Fuzzers overview
Project functions overview
Fuzzer details
Fuzzer: fuzz_zxdoc
Call tree
Fuzz blockers
Runtime coverage analysis
Files reached
Fuzzer: fuzz_JBIG2
Call tree
Fuzz blockers
Runtime coverage analysis
Files reached
Fuzzer: fuzz_pdfload
Call tree
Fuzz blockers
Runtime coverage analysis
Files reached
Analyses and suggestions
Optimal target analysis
Remaining optimal interesting functions
All functions overview
Runtime coverage analysis
Complex functions with low coverage
Files and Directories in report
Files in report
Directories in report
Metadata section
Function call coverage
Function in each files in report
Report generation date: 2023-06-07

Project overview: xpdf

High level conclusions

Reachability and coverage overview

Functions statically reachable by fuzzers
24.0%
1102 / 4656
Cyclomatic complexity statically reachable by fuzzers
24.0%
8365 / 35309
Runtime code coverage of functions
17.0%
785 / 4656

Fuzzers overview

Fuzzer Fuzzer filename Functions Reached Functions unreached Fuzzer depth Files reached Basic blocks reached Cyclomatic complexity Details
fuzz_zxdoc /src/xpdf-4.04/build/fuzz_zxdoc.cc 113 128 8 8 802 335 fuzz_zxdoc.cc
fuzz_JBIG2 /src/xpdf-4.04/build/fuzz_JBIG2.cc 1132 1831 22 63 9702 4034 fuzz_JBIG2.cc
fuzz_pdfload /src/xpdf-4.04/build/fuzz_pdfload.cc 2230 3603 23 110 21149 8521 fuzz_pdfload.cc

Project functions overview

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name Functions filename Args Function call depth Reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzzer details

Fuzzer: fuzz_zxdoc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Full calltree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 11 5.55%
gold [1:9] 0 0.0%
yellow [10:29] 0 0.0%
greenyellow [30:49] 2 1.01%
lawngreen 50+ 185 93.4%
All colors 198 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
14 14 1 :

['gMemError(char const*)']

14 90 GString::resize(int) call site: 00000 /src/xpdf-4.04/goo/GString.cc:115
14 14 1 :

['gMemError(char const*)']

14 33 gmallocn(int,int) call site: 00000 /src/xpdf-4.04/goo/gmem.cc:211
0 0 None 28 28 gmalloc(int) call site: 00000 /src/xpdf-4.04/goo/gmem.cc:142
0 0 None 4 10 GHash::~GHash() call site: 00000 /src/xpdf-4.04/goo/GHash.cc:58
0 0 None 0 0 GHash::getNext(GHashIter**,GString**,void**) call site: 00000 /src/xpdf-4.04/goo/GHash.cc:272
0 0 None 0 0 GString::resize(int) call site: 00000 /src/xpdf-4.04/goo/GString.cc:122
0 0 None 0 0 gmalloc(int) call site: 00000 /src/xpdf-4.04/goo/gmem.cc:145
0 0 None 0 0 gmalloc(int) call site: 00000 /src/xpdf-4.04/goo/gmem.cc:148
0 0 None 0 0 gmallocn(int,int) call site: 00000 /src/xpdf-4.04/goo/gmem.cc:207

Runtime coverage analysis

Covered functions
68
Functions that are reachable but not covered
13
Reachable functions
113
Percentage of reachable functions covered
88.5%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/xpdf-4.04/build/fuzz_zxdoc.cc 1
/src/xpdf-4.04/xpdf/Zoox.cc 32
/src/xpdf-4.04/goo/GString.cc 9
/src/xpdf-4.04/goo/gmem.cc 4
/src/xpdf-4.04/goo/gmem.h 1
/src/xpdf-4.04/goo/GHash.cc 4
/src/xpdf-4.04/xpdf/Zoox.h 2
/src/xpdf-4.04/goo/GString.h 2

Fuzzer: fuzz_JBIG2

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Full calltree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 1066 30.4%
gold [1:9] 140 3.99%
yellow [10:29] 113 3.22%
greenyellow [30:49] 82 2.34%
lawngreen 50+ 2102 60.0%
All colors 3503 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
1104 1104 1 :

['LinkGoToR::LinkGoToR(Object*, Object*)']

1104 3264 LinkAction::parseAction(Object*,GString*) call site: 00000 /src/xpdf-4.04/xpdf/Link.cc:59
1036 1036 1 :

['LinkLaunch::LinkLaunch(Object*)']

1036 1086 LinkAction::parseAction(Object*,GString*) call site: 00000 /src/xpdf-4.04/xpdf/Link.cc:67
256 256 1 :

['LinkSubmitForm::LinkSubmitForm(Object*, Object*, Object*)']

256 3471 LinkAction::parseAction(Object*,GString*) call site: 00000 /src/xpdf-4.04/xpdf/Link.cc:97
250 250 1 :

['LinkURI::LinkURI(Object*, GString*)']

250 1355 LinkAction::parseAction(Object*,GString*) call site: 00000 /src/xpdf-4.04/xpdf/Link.cc:71
245 1332 3 :

['Object::dictLookupNF(char const*, Object*)', 'Object::dictLookup(char const*, Object*, int)', 'LinkHide::LinkHide(Object*, Object*)']

245 1482 LinkAction::parseAction(Object*,GString*) call site: 00000 /src/xpdf-4.04/xpdf/Link.cc:107
224 224 1 :

['LinkJavaScript::LinkJavaScript(Object*)']

224 1329 LinkAction::parseAction(Object*,GString*) call site: 00000 /src/xpdf-4.04/xpdf/Link.cc:91
214 214 1 :

['LinkMovie::LinkMovie(Object*, Object*)']

214 1451 LinkAction::parseAction(Object*,GString*) call site: 00000 /src/xpdf-4.04/xpdf/Link.cc:83
211 217 6 :

['GString::getCString()', 'grabPath(char*)', 'makePathAbsolute(GString*)', 'PDFDoc::getFileName()', 'GString::getChar(int)', 'GString::insert(int, char const*)']

211 11689 Catalog::Catalog(PDFDoc*) call site: 00000 /src/xpdf-4.04/xpdf/Catalog.cc:201
161 385 11 :

['GString::getLength()', 'GString::formatv(char const*, __va_list_tag*)', 'GString::getCString()', 'fflush', 'operator delete(void*)', 'operator new(unsigned long)', 'GString::~GString()', 'GString::getChar(int)', 'GString::GString()', 'GString::append(char)', 'GString::appendf(char const*, ...)']

161 385 error(ErrorCategory,long,charconst*,...) call site: 00000 /src/xpdf-4.04/xpdf/Error.cc:57
71 137 4 :

['EmbeddedFile::EmbeddedFile(TextString*, Object*)', 'GList::append(void*)', 'operator new(unsigned long)', 'GList::GList()']

71 237 Catalog::readEmbeddedFile(Object*,Object*) call site: 00000 /src/xpdf-4.04/xpdf/Catalog.cc:861
57 57 1 :

['EmbeddedFile::~EmbeddedFile()']

61 158 Catalog::~Catalog() call site: 00000 /src/xpdf-4.04/xpdf/Catalog.cc:291
53 53 1 :

['JBIG2Stream::discardSegment(unsigned int)']

53 53 JBIG2Stream::readGenericRefinementRegionSeg(unsignedint,int,int,unsignedint,unsignedint*,unsignedint) call site: 00000 /src/xpdf-4.04/xpdf/JBIG2Stream.cc:3753

Runtime coverage analysis

Covered functions
782
Functions that are reachable but not covered
219
Reachable functions
1132
Percentage of reachable functions covered
80.65%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/xpdf-4.04/build/fuzz_JBIG2.cc 1
/src/xpdf-4.04/build/../xpdf/Object.h 4
/src/xpdf-4.04/xpdf/Stream.cc 24
/src/xpdf-4.04/xpdf/GlobalParams.cc 54
/src/xpdf-4.04/xpdf/BuiltinFontTables.cc 2
/src/xpdf-4.04/xpdf/BuiltinFont.cc 3
/src/xpdf-4.04/goo/gmem.cc 7
/src/xpdf-4.04/goo/gmem.h 1
/src/xpdf-4.04/xpdf/NameToCharCode.cc 4
/src/xpdf-4.04/goo/gfile.cc 5
/src/xpdf-4.04/goo/GString.cc 24
/src/xpdf-4.04/goo/GHash.cc 16
/src/xpdf-4.04/goo/GString.h 4
/src/xpdf-4.04/goo/GList.cc 6
/src/xpdf-4.04/xpdf/UnicodeRemapping.cc 6
/src/xpdf-4.04/xpdf/CharCodeToUnicode.cc 4
/src/xpdf-4.04/xpdf/UnicodeMap.cc 6
/src/xpdf-4.04/xpdf/CMap.cc 5
/src/xpdf-4.04/xpdf/UnicodeMap.h 1
/src/xpdf-4.04/xpdf/Error.cc 1
/usr/local/bin/../include/c++/v1/math.h 1
/src/xpdf-4.04/goo/GList.h 2
/src/xpdf-4.04/xpdf/PDFDoc.cc 7
/src/xpdf-4.04/xpdf/Stream.h 2
/src/xpdf-4.04/xpdf/XRef.cc 32
/src/xpdf-4.04/xpdf/XRef.h 5
/src/xpdf-4.04/xpdf/Lexer.cc 8
/src/xpdf-4.04/xpdf/Object.cc 8
/src/xpdf-4.04/xpdf/Array.cc 5
/src/xpdf-4.04/xpdf/Array.h 3
/src/xpdf-4.04/goo/GMutex.h 2
/src/xpdf-4.04/xpdf/Dict.h 4
/src/xpdf-4.04/xpdf/Object.h 42
/src/xpdf-4.04/xpdf/Parser.cc 5
/src/xpdf-4.04/xpdf/Dict.cc 11
/src/xpdf-4.04/xpdf/Lexer.h 4
/src/xpdf-4.04/xpdf/Parser.h 1
/src/xpdf-4.04/xpdf/Decrypt.cc 32
/src/xpdf-4.04/xpdf/JBIG2Stream.cc 5
/src/xpdf-4.04/xpdf/JArithmeticDecoder.cc 3
/src/xpdf-4.04/xpdf/JPXStream.cc 1
/src/xpdf-4.04/xpdf/SecurityHandler.cc 6
/src/xpdf-4.04/build/../xpdf/PDFDoc.h 2
/src/xpdf-4.04/xpdf/SecurityHandler.h 1
/src/xpdf-4.04/xpdf/Catalog.cc 19
/src/xpdf-4.04/xpdf/PDFDoc.h 2
/src/xpdf-4.04/xpdf/AcroForm.cc 9
/src/xpdf-4.04/xpdf/XFAScanner.cc 27
/src/xpdf-4.04/xpdf/Zoox.cc 35
/src/xpdf-4.04/xpdf/Zoox.h 10
/src/xpdf-4.04/xpdf/Catalog.h 5
/src/xpdf-4.04/xpdf/Page.cc 9
/src/xpdf-4.04/xpdf/Page.h 3
/src/xpdf-4.04/xpdf/TextString.cc 10
/src/xpdf-4.04/xpdf/UTF8.cc 4
/src/xpdf-4.04/xpdf/TextString.h 1
/src/xpdf-4.04/xpdf/XFAScanner.h 1
/src/xpdf-4.04/build/../xpdf/XRef.h 1
/src/xpdf-4.04/xpdf/Outline.cc 6
/src/xpdf-4.04/xpdf/Link.cc 14
/src/xpdf-4.04/xpdf/Link.h 3
/src/xpdf-4.04/xpdf/OptionalContent.cc 15
/src/xpdf-4.04/xpdf/OptionalContent.h 4

Fuzzer: fuzz_pdfload

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Full calltree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 6441 86.9%
gold [1:9] 183 2.46%
yellow [10:29] 56 0.75%
greenyellow [30:49] 322 4.34%
lawngreen 50+ 409 5.51%
All colors 7411 100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
1413 1413 3 :

['SecurityHandler::checkEncryption(GString*, GString*)', 'SecurityHandler::make(PDFDoc*, Object*)', 'XRef::setEncryption(int, int, unsigned char*, int, int, CryptAlgorithm)']

1413 1463 PDFDoc::checkEncryption(GString*,GString*) call site: 00000 /src/xpdf-4.04/xpdf/PDFDoc.cc:403
340 385 11 :

['GString::getLength()', 'GString::formatv(char const*, __va_list_tag*)', 'GString::getCString()', 'fflush', 'operator delete(void*)', 'operator new(unsigned long)', 'GString::~GString()', 'GString::getChar(int)', 'GString::GString()', 'GString::append(char)', 'GString::appendf(char const*, ...)']

340 385 error(ErrorCategory,long,charconst*,...) call site: 00000 /src/xpdf-4.04/xpdf/Error.cc:57
86 86 1 :

['AcroForm::~AcroForm()']

162 294 Catalog::~Catalog() call site: 00000 /src/xpdf-4.04/xpdf/Catalog.cc:287
85 85 1 :

['Outline::~Outline()']

91 267 PDFDoc::~PDFDoc() call site: 00000 /src/xpdf-4.04/xpdf/PDFDoc.cc:337
63 63 1 :

['PageTreeNode::~PageTreeNode()']

284 725 Catalog::~Catalog() call site: 00000 /src/xpdf-4.04/xpdf/Catalog.cc:263
57 2187 10 :

['Object::Object()', 'Object::dictLookup(char const*, Object*, int)', 'Object::free()', 'Object::arrayGet(int, Object*, int)', 'operator delete(void*)', 'Object::arrayGetLength()', 'operator new(unsigned long)', 'Object::isName(char const*)', 'DecryptStream::DecryptStream(Stream*, unsigned char*, CryptAlgorithm, int, int, int)', 'Object::isArray()']

57 3199 Parser::makeStream(Object*,unsignedchar*,CryptAlgorithm,int,int,int,int) call site: 00000 /src/xpdf-4.04/xpdf/Parser.cc:269
57 63 2 :

['Page::~Page()', 'gfree(void*)']

221 662 Catalog::~Catalog() call site: 00000 /src/xpdf-4.04/xpdf/Catalog.cc:266
57 57 1 :

['EmbeddedFile::~EmbeddedFile()']

76 158 Catalog::~Catalog() call site: 00000 /src/xpdf-4.04/xpdf/Catalog.cc:291
29 29 1 :

['OptionalContent::~OptionalContent()']

120 296 PDFDoc::~PDFDoc() call site: 00000 /src/xpdf-4.04/xpdf/PDFDoc.cc:333
27 27 1 :

['StreamPredictor::getChar()']

27 27 FlateStream::getChar() call site: 00000 /src/xpdf-4.04/xpdf/Stream.cc:5047
27 27 1 :

['StreamPredictor::lookChar()']

27 27 FlateStream::lookChar() call site: 00000 /src/xpdf-4.04/xpdf/Stream.cc:5064
15 31 5 :

['operator delete(void*)', 'GList::~GList()', 'GList::getLength()', 'PageLabelNode::~PageLabelNode()', 'GList::get(int)']

19 85 Catalog::~Catalog() call site: 00000 /src/xpdf-4.04/xpdf/Catalog.cc:294

Runtime coverage analysis

Covered functions
360
Functions that are reachable but not covered
1770
Reachable functions
2230
Percentage of reachable functions covered
20.63%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/xpdf-4.04/build/fuzz_pdfload.cc 1
/src/xpdf-4.04/build/../xpdf/Object.h 7
/src/xpdf-4.04/xpdf/Stream.cc 24
/src/xpdf-4.04/xpdf/GlobalParams.cc 78
/src/xpdf-4.04/xpdf/BuiltinFontTables.cc 2
/src/xpdf-4.04/xpdf/BuiltinFont.cc 4
/src/xpdf-4.04/goo/gmem.cc 7
/src/xpdf-4.04/goo/gmem.h 1
/src/xpdf-4.04/xpdf/NameToCharCode.cc 5
/src/xpdf-4.04/goo/gfile.cc 5
/src/xpdf-4.04/goo/GString.cc 25
/src/xpdf-4.04/goo/GHash.cc 19
/src/xpdf-4.04/build/../goo/GString.h 1
/src/xpdf-4.04/goo/GString.h 3
/src/xpdf-4.04/goo/GList.cc 6
/src/xpdf-4.04/xpdf/UnicodeRemapping.cc 6
/src/xpdf-4.04/xpdf/CharCodeToUnicode.cc 25
/src/xpdf-4.04/xpdf/UnicodeMap.cc 6
/src/xpdf-4.04/xpdf/CMap.cc 18
/src/xpdf-4.04/xpdf/UnicodeMap.h 1
/src/xpdf-4.04/xpdf/Error.cc 1
/usr/local/bin/../include/c++/v1/math.h 1
/src/xpdf-4.04/goo/GList.h 2
/src/xpdf-4.04/xpdf/PDFDoc.cc 10
/src/xpdf-4.04/xpdf/Stream.h 2
/src/xpdf-4.04/xpdf/XRef.cc 37
/src/xpdf-4.04/xpdf/XRef.h 6
/src/xpdf-4.04/xpdf/Lexer.cc 9
/src/xpdf-4.04/xpdf/Object.cc 9
/src/xpdf-4.04/xpdf/Array.cc 5
/src/xpdf-4.04/xpdf/Array.h 3
/src/xpdf-4.04/goo/GMutex.h 2
/src/xpdf-4.04/xpdf/Dict.h 4
/src/xpdf-4.04/xpdf/Object.h 51
/src/xpdf-4.04/xpdf/Parser.cc 5
/src/xpdf-4.04/xpdf/Dict.cc 11
/src/xpdf-4.04/xpdf/Lexer.h 4
/src/xpdf-4.04/xpdf/Parser.h 1
/src/xpdf-4.04/xpdf/Decrypt.cc 32
/src/xpdf-4.04/xpdf/JBIG2Stream.cc 5
/src/xpdf-4.04/xpdf/JArithmeticDecoder.cc 3
/src/xpdf-4.04/xpdf/JPXStream.cc 1
/src/xpdf-4.04/xpdf/SecurityHandler.cc 6
/src/xpdf-4.04/build/../xpdf/PDFDoc.h 13
/src/xpdf-4.04/xpdf/SecurityHandler.h 1
/src/xpdf-4.04/xpdf/Catalog.cc 20
/src/xpdf-4.04/xpdf/PDFDoc.h 2
/src/xpdf-4.04/xpdf/AcroForm.cc 51
/src/xpdf-4.04/xpdf/XFAScanner.cc 27
/src/xpdf-4.04/xpdf/Zoox.cc 35
/src/xpdf-4.04/xpdf/Zoox.h 10
/src/xpdf-4.04/xpdf/Catalog.h 6
/src/xpdf-4.04/build/../xpdf/Catalog.h 3
/src/xpdf-4.04/xpdf/Page.cc 13
/src/xpdf-4.04/xpdf/Page.h 8
/src/xpdf-4.04/build/../xpdf/Page.h 5
/src/xpdf-4.04/xpdf/TextString.cc 10
/src/xpdf-4.04/xpdf/UTF8.cc 4
/src/xpdf-4.04/xpdf/TextString.h 2
/src/xpdf-4.04/xpdf/XFAScanner.h 4
/src/xpdf-4.04/xpdf/Outline.cc 6
/src/xpdf-4.04/xpdf/Link.cc 17
/src/xpdf-4.04/xpdf/Link.h 4
/src/xpdf-4.04/xpdf/OptionalContent.cc 17
/src/xpdf-4.04/xpdf/OptionalContent.h 5
/src/xpdf-4.04/xpdf/SplashOutputDev.cc 6
/src/xpdf-4.04/xpdf/OutputDev.h 34
/src/xpdf-4.04/splash/SplashTypes.h 1
/src/xpdf-4.04/splash/SplashBitmap.cc 2
/src/xpdf-4.04/goo/Trace.h 5
/src/xpdf-4.04/splash/Splash.cc 13
/src/xpdf-4.04/splash/SplashState.cc 2
/src/xpdf-4.04/splash/SplashPattern.cc 3
/src/xpdf-4.04/splash/SplashScreen.cc 6
/src/xpdf-4.04/splash/SplashMath.h 3
/src/xpdf-4.04/splash/SplashClip.cc 2
/src/xpdf-4.04/splash/Splash.h 1
/src/xpdf-4.04/build/../xpdf/SplashOutputDev.h 2
/src/xpdf-4.04/splash/SplashFontEngine.cc 2
/src/xpdf-4.04/splash/SplashFont.cc 1
/src/xpdf-4.04/splash/SplashFTFontEngine.cc 3
/src/freetype/src/base/ftinit.c 4
/src/freetype/src/base/ftobjs.c 22
/src/freetype/src/base/ftutil.c 7
/src/freetype/src/base/ftgloadr.c 3
/src/freetype/src/base/ftstream.c 1
/src/freetype/builds/unix/ftsystem.c 5
/src/xpdf-4.04/xpdf/Gfx.cc 22
/src/xpdf-4.04/xpdf/GfxFont.cc 22
/src/xpdf-4.04/xpdf/GfxFont.h 10
/src/xpdf-4.04/fofi/FoFiIdentifier.cc 10
/src/xpdf-4.04/fofi/FoFiType1.cc 9
/src/xpdf-4.04/fofi/FoFiBase.cc 9
/src/xpdf-4.04/fofi/FoFiType1C.cc 22
/src/xpdf-4.04/xpdf/PSTokenizer.cc 5
/src/xpdf-4.04/fofi/FoFiTrueType.cc 13
/src/xpdf-4.04/fofi/FoFiTrueType.h 1
/src/xpdf-4.04/xpdf/CharCodeToUnicode.h 2
/src/xpdf-4.04/xpdf/GfxState.cc 48
/src/xpdf-4.04/xpdf/GfxState.h 27
/src/xpdf-4.04/xpdf/OutputDev.cc 2
/src/xpdf-4.04/xpdf/Function.cc 15
/src/xpdf-4.04/xpdf/Gfx.h 2
/src/xpdf-4.04/xpdf/Annot.cc 22
/src/xpdf-4.04/xpdf/Annot.h 8
/src/xpdf-4.04/xpdf/Function.h 2
/src/xpdf-4.04/xpdf/PDF417Barcode.cc 14
/src/xpdf-4.04/splash/SplashXPathScanner.cc 1
/src/xpdf-4.04/splash/SplashXPath.cc 1
/src/xpdf-4.04/splash/SplashPath.cc 1

Analyses and suggestions

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name Functions filename Arg count Args Function depth hitcount instr count bb count cyclomatic complexity Reachable functions Incoming references total cyclomatic complexity Unreached complexity
SplashOutputDev::drawChar(GfxState*,double,double,double,double,double,double,unsignedint,int,unsignedint*,int) /src/xpdf-4.04/xpdf/SplashOutputDev.cc 12 ['class.SplashOutputDev *', 'class.GfxState *', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'int ', 'int ', 'int *', 'int '] 22 0 543 91 33 1063 0 4070 2340
tt_glyph_load /src/freetype/src/truetype/ttdriver.c 4 ['struct.FT_GlyphSlotRec_.1293 *', 'struct.FT_SizeRec_.1269 *', 'int ', 'int '] 5 0 211 33 13 243 0 1503 1437
JBIG2Stream::getBlock(char*,int) /src/xpdf-4.04/xpdf/JBIG2Stream.cc 3 ['class.JBIG2Stream *', 'char *', 'int '] 8 0 115 16 6 281 0 1152 929
PCF_Face_Init /src/freetype/src/pcf/pcfdrivr.c 5 ['struct.FT_StreamRec_ *', 'struct.FT_FaceRec_.2015 *', 'int ', 'int ', 'struct.FT_Parameter_ *'] 7 0 406 76 25 91 0 951 860
cf2_interpT2CharString /src/freetype/src/psaux/psintrp.c 8 ['struct.CF2_FontRec_ *', 'struct.CF2_BufferRec_ *', 'struct.CF2_OutlineCallbacksRec_ *', 'struct.timespec *', 'char ', 'int ', 'int ', 'int *'] 6 0 5196 866 211 98 3 928 858
JPXStream::lookChar() /src/xpdf-4.04/xpdf/JPXStream.cc 1 ['class.JPXStream *'] 9 0 100 18 7 137 0 998 786
Gfx::opXObject(Object*,int) /src/xpdf-4.04/xpdf/Gfx.cc 3 ['class.Gfx *', 'class.Object *', 'int '] 20 0 495 101 80 1256 0 4480 757

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers
42.0%
1942 / 4656
Cyclomatic complexity statically reachable by fuzzers
46.0%
16079 / 35309

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name Functions filename Args Function call depth Reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
GString::appendfv(charconst*,__va_list_tag*) 289 92 31.83% ['fuzz_JBIG2', 'fuzz_pdfload']
Decrypt::makeFileKey(int,int,int,GString*,GString*,GString*,GString*,int,GString*,GString*,GString*,unsignedchar*,int,int*) 130 49 37.69% []
error(ErrorCategory,long,charconst*,...) 36 8 22.22% ['fuzz_JBIG2', 'fuzz_pdfload']
JBIG2Stream::readHalftoneRegionSeg(unsignedint,int,int,unsignedint,unsignedint*,unsignedint) 148 54 36.48% []
LinkAction::parseAction(Object*,GString*) 65 27 41.53% ['fuzz_JBIG2', 'fuzz_pdfload']
LinkDest::LinkDest(Array*) 188 66 35.10% ['fuzz_JBIG2', 'fuzz_pdfload']
XFAScanner::getFieldBarcodeInfo(ZxElement*) 55 6 10.90% ['fuzz_JBIG2', 'fuzz_pdfload']

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
/src/xpdf-4.04/xpdf/Decrypt.h [] []
/src/freetype/src/pfr/pfrload.c [] []
/src/freetype/src/base/fterrors.c [] []
/src/freetype/src/pfr/pfrgload.c [] []
/src/xpdf-4.04/splash/SplashFTFont.cc [] []
/src/xpdf-4.04/goo/GList.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/Page.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/xpdf-4.04/build/../xpdf/Object.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/splash/SplashClip.h [] []
/src/xpdf-4.04/xpdf/Parser.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/src/pfr/pfrsbit.c [] []
/src/freetype/src/lzw/ftlzw.c [] []
/src/freetype/src/psaux/pserror.c [] []
/src/freetype/src/base/ftgloadr.c ['fuzz_pdfload'] []
/src/xpdf-4.04/build/../xpdf/SplashOutputDev.h ['fuzz_pdfload'] []
/src/freetype/src/gzip/inffast.c [] []
/src/freetype/src/type1/t1objs.c [] []
/src/freetype/src/base/ftstream.c ['fuzz_pdfload'] []
/src/xpdf-4.04/splash/SplashFTFontEngine.cc ['fuzz_pdfload'] []
/src/freetype/src/svg/ftsvg.c [] []
/src/freetype/src/cid/cidparse.c [] []
/src/freetype/src/truetype/ttgload.c [] []
/src/xpdf-4.04/splash/SplashScreen.cc ['fuzz_pdfload'] []
/src/freetype/src/psaux/psstack.c [] []
/src/xpdf-4.04/xpdf/Stream.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/src/autofit/afindic.c [] []
/src/freetype/src/psaux/psft.c [] []
/src/freetype/src/cid/cidriver.c [] []
/src/xpdf-4.04/splash/Splash.h ['fuzz_pdfload'] []
/src/xpdf-4.04/xpdf/Catalog.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/Object.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/src/truetype/ttdriver.c [] []
/src/xpdf-4.04/build/../xpdf/XRef.h ['fuzz_JBIG2'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/splash/SplashBitmap.h [] []
/src/xpdf-4.04/xpdf/ShadingImage.cc [] []
/src/xpdf-4.04/xpdf/GfxFont.h ['fuzz_pdfload'] []
/src/freetype/src/cff/cffparse.c [] []
/src/xpdf-4.04/xpdf/Lexer.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/fofi/FoFiTrueType.cc ['fuzz_pdfload'] []
/src/freetype/src/cff/cffgload.c [] []
/src/freetype/src/base/ftdebug.c [] []
/src/xpdf-4.04/splash/SplashClip.cc ['fuzz_pdfload'] []
/src/freetype/src/psaux/afmparse.c [] []
/src/xpdf-4.04/splash/SplashScreen.h [] []
/src/freetype/src/sfnt/sfobjs.c [] []
/src/freetype/src/cff/cffobjs.c [] []
/src/xpdf-4.04/xpdf/NameToCharCode.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/src/base/ftlcdfil.c [] []
/src/freetype/src/sfnt/ttbdf.c [] []
/src/xpdf-4.04/xpdf/Error.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/build/fuzz_pdfload.cc ['fuzz_pdfload'] ['fuzz_pdfload']
/src/freetype/src/psaux/psobjs.c [] []
/src/freetype/src/type42/t42objs.c [] []
/src/xpdf-4.04/xpdf/Dict.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/Gfx.cc ['fuzz_pdfload'] []
/src/freetype/src/psaux/psintrp.c [] []
/src/xpdf-4.04/splash/SplashXPath.h [] []
/src/xpdf-4.04/xpdf/GfxState.h ['fuzz_pdfload'] []
/src/freetype/src/pshinter/pshmod.c [] []
/src/freetype/src/autofit/afcjk.c [] []
/src/xpdf-4.04/xpdf/JArithmeticDecoder.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/GfxState.cc ['fuzz_pdfload'] []
/src/xpdf-4.04/splash/SplashFontEngine.cc ['fuzz_pdfload'] []
/src/freetype/src/gzip/ftgzip.c [] []
/src/freetype/src/base/ftrfork.c [] []
/src/xpdf-4.04/xpdf/Annot.cc ['fuzz_pdfload'] []
/src/freetype/src/type42/t42drivr.c [] []
/src/freetype/src/autofit/aflatin.c [] []
/src/xpdf-4.04/build/fuzz_JBIG2.cc ['fuzz_JBIG2'] ['fuzz_JBIG2']
/src/xpdf-4.04/splash/SplashTypes.h ['fuzz_pdfload'] []
/src/freetype/src/base/ftbitmap.c [] []
/src/xpdf-4.04/splash/SplashFontFileID.cc [] []
/src/xpdf-4.04/xpdf/Function.h ['fuzz_pdfload'] []
/src/xpdf-4.04/splash/SplashState.cc ['fuzz_pdfload'] []
/src/xpdf-4.04/splash/SplashFont.h [] []
/src/xpdf-4.04/splash/SplashBitmap.cc ['fuzz_pdfload'] []
/usr/local/bin/../include/c++/v1/stdexcept [] []
/src/xpdf-4.04/splash/SplashFont.cc ['fuzz_pdfload'] []
/src/freetype/src/psnames/pstables.h [] []
/src/freetype/src/gzip/crc32.c [] []
/src/freetype/src/psaux/psfont.c [] []
/src/freetype/src/cid/cidgload.c [] []
/src/xpdf-4.04/xpdf/UnicodeMap.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/GlobalParams.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/Link.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/xpdf-4.04/goo/Trace.h ['fuzz_pdfload'] []
/src/xpdf-4.04/xpdf/OutputDev.h ['fuzz_pdfload'] []
/src/freetype/src/pcf/pcfdrivr.c [] []
/src/freetype/src/psaux/psarrst.c [] []
/src/freetype/builds/unix/ftsystem.c ['fuzz_pdfload'] []
/src/xpdf-4.04/build/../xpdf/Page.h ['fuzz_pdfload'] ['fuzz_JBIG2']
/src/freetype/src/psaux/t1decode.c [] []
/src/freetype/src/sfnt/ttcolr.c [] []
/src/freetype/src/sfnt/ttsvg.c [] []
/src/xpdf-4.04/xpdf/CharCodeToUnicode.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/build/fuzz_zxdoc.cc ['fuzz_zxdoc'] ['fuzz_zxdoc']
/src/freetype/src/base/ftobjs.c ['fuzz_pdfload'] []
/src/xpdf-4.04/build/../xpdf/PDFDoc.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/xpdf-4.04/xpdf/Gfx.h ['fuzz_pdfload'] []
/src/freetype/src/base/ftsnames.c [] []
/src/freetype/src/psaux/cffdecode.c [] []
/src/freetype/src/winfonts/winfnt.c [] []
/src/xpdf-4.04/build/../goo/GString.h ['fuzz_pdfload'] ['fuzz_zxdoc', 'fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/Zoox.h ['fuzz_zxdoc', 'fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_zxdoc', 'fuzz_JBIG2']
/src/xpdf-4.04/xpdf/TextString.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/freetype/src/cff/cffload.c [] []
/src/xpdf-4.04/goo/GString.cc ['fuzz_zxdoc', 'fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_zxdoc', 'fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/SplashOutputDev.h [] []
/src/xpdf-4.04/splash/SplashState.h [] []
/src/xpdf-4.04/xpdf/PSTokenizer.cc ['fuzz_pdfload'] []
/src/freetype/src/pfr/pfrobjs.c [] []
/src/freetype/src/lzw/ftzopen.c [] []
/src/freetype/src/sdf/ftbsdf.c [] []
/usr/local/bin/../include/c++/v1/math.h ['fuzz_JBIG2', 'fuzz_pdfload'] []
/src/freetype/src/cff/cffcmap.c [] []
/src/freetype/src/autofit/afglobal.c [] []
/src/freetype/src/autofit/afloader.c [] []
/src/freetype/src/sfnt/ttload.c [] []
/src/xpdf-4.04/goo/GString.h ['fuzz_zxdoc', 'fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_zxdoc', 'fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/include/freetype/internal/ftcalc.h [] []
/src/xpdf-4.04/xpdf/PDFDoc.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/xpdf-4.04/goo/gmem.cc ['fuzz_zxdoc', 'fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_zxdoc', 'fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/UnicodeRemapping.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/JBIG2Stream.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/src/sdf/ftsdfcommon.c [] []
/src/xpdf-4.04/goo/gfile.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/src/sfnt/sfdriver.c [] []
/src/xpdf-4.04/splash/SplashMath.h ['fuzz_pdfload'] []
/src/xpdf-4.04/xpdf/JPXStream.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/src/autofit/afdummy.c [] []
/src/freetype/src/bdf/bdflib.c [] []
/src/xpdf-4.04/xpdf/Page.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/freetype/src/sdf/ftsdf.c [] []
/src/freetype/src/sfnt/ttkern.c [] []
/src/freetype/src/autofit/afshaper.c [] []
/src/xpdf-4.04/xpdf/SecurityHandler.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/xpdf-4.04/xpdf/BuiltinFontTables.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/src/sfnt/ttcmap.c [] []
/src/xpdf-4.04/xpdf/JBIG2Stream.h [] []
/src/freetype/src/bdf/bdfdrivr.c [] []
/src/xpdf-4.04/goo/GHash.cc ['fuzz_zxdoc', 'fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_zxdoc', 'fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/Array.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/Object.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/src/type1/t1load.c [] []
/src/xpdf-4.04/xpdf/PDFDoc.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/OptionalContent.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/freetype/src/type1/t1driver.c [] []
/src/freetype/src/pfr/pfrdrivr.c [] []
/src/freetype/src/sfnt/sfwoff.c [] []
/src/freetype/src/gzip/inftrees.c [] []
/src/xpdf-4.04/xpdf/GlobalParams.h [] []
/src/xpdf-4.04/splash/SplashPath.cc ['fuzz_pdfload'] []
/src/freetype/src/sfnt/ttmtx.c [] []
/src/freetype/src/base/fthash.c [] []
/src/xpdf-4.04/xpdf/XFAScanner.h ['fuzz_JBIG2', 'fuzz_pdfload'] []
/src/xpdf-4.04/xpdf/Link.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/freetype/src/cid/cidload.c [] []
/src/xpdf-4.04/xpdf/Zoox.cc ['fuzz_zxdoc', 'fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_zxdoc', 'fuzz_JBIG2']
/src/freetype/src/type1/t1parse.c [] []
/src/freetype/src/psaux/psconv.c [] []
/src/xpdf-4.04/splash/SplashFontFile.cc [] []
/src/freetype/src/base/ftcalc.c [] []
/src/xpdf-4.04/splash/SplashPattern.h [] []
/src/xpdf-4.04/xpdf/Lexer.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/splash/SplashPath.h [] []
/src/freetype/src/sfnt/ttsbit.c [] []
/src/xpdf-4.04/xpdf/GfxFont.cc ['fuzz_pdfload'] []
/src/freetype/src/cff/cffdrivr.c [] []
/src/xpdf-4.04/xpdf/XFAScanner.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/xpdf-4.04/xpdf/Catalog.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/fofi/FoFiType1C.cc ['fuzz_pdfload'] []
/src/freetype/src/pcf/pcfutil.c [] []
/src/xpdf-4.04/xpdf/Outline.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/freetype/src/psaux/psblues.c [] []
/src/freetype/src/psaux/t1cmap.c [] []
/src/xpdf-4.04/fofi/FoFiType1.cc ['fuzz_pdfload'] []
/src/freetype/src/smooth/ftgrays.c [] []
/src/xpdf-4.04/xpdf/CharCodeToUnicode.h ['fuzz_pdfload'] []
/src/freetype/src/autofit/afhints.c [] []
/src/freetype/src/cid/cidobjs.c [] []
/src/freetype/src/base/ftfntfmt.c [] []
/src/xpdf-4.04/splash/SplashFTFontFile.cc [] []
/src/freetype/src/type1/t1gload.c [] []
/src/xpdf-4.04/xpdf/Array.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/splash/Splash.cc ['fuzz_pdfload'] []
/src/freetype/src/truetype/ttpload.c [] []
/src/freetype/src/truetype/ttgxvar.c [] []
/src/xpdf-4.04/xpdf/Stream.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/src/type42/t42parse.c [] []
/src/freetype/src/pshinter/pshalgo.c [] []
/src/freetype/src/smooth/ftsmooth.c [] []
/src/xpdf-4.04/xpdf/SecurityHandler.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/freetype/src/base/ftglyph.c [] []
/src/freetype/src/base/ftutil.c ['fuzz_pdfload'] []
/src/xpdf-4.04/xpdf/PDF417Barcode.cc ['fuzz_pdfload'] []
/src/xpdf-4.04/goo/gmem.h ['fuzz_zxdoc', 'fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/xpdf-4.04/xpdf/OutputDev.cc ['fuzz_pdfload'] []
/src/freetype/src/truetype/ttinterp.c [] []
/src/freetype/src/pcf/pcfread.c [] []
/src/freetype/src/raster/ftrend1.c [] []
/src/xpdf-4.04/xpdf/Function.cc ['fuzz_pdfload'] []
/src/xpdf-4.04/splash/SplashFontFile.h [] []
/src/xpdf-4.04/fofi/FoFiTrueType.h ['fuzz_pdfload'] []
/src/xpdf-4.04/xpdf/Annot.h ['fuzz_pdfload'] []
/src/xpdf-4.04/xpdf/Decrypt.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/freetype/src/base/ftmm.c [] []
/src/freetype/src/psaux/pshints.c [] []
/src/xpdf-4.04/xpdf/OptionalContent.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/xpdf-4.04/xpdf/JArithmeticDecoder.h [] []
/src/xpdf-4.04/xpdf/BuiltinFont.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/src/gzip/adler32.c [] []
/src/xpdf-4.04/xpdf/UTF8.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/xpdf-4.04/xpdf/CMap.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/splash/SplashXPath.cc ['fuzz_pdfload'] []
/src/freetype/src/sdf/ftsdfrend.c [] []
/src/xpdf-4.04/xpdf/AcroForm.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/freetype/src/psaux/psread.c [] []
/src/xpdf-4.04/fofi/FoFiIdentifier.cc ['fuzz_pdfload'] []
/src/xpdf-4.04/xpdf/XRef.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/src/pshinter/pshglob.c [] []
/src/freetype/src/sfnt/ttpost.c [] []
/src/freetype/src/autofit/afmodule.c [] []
/src/xpdf-4.04/xpdf/Dict.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/freetype/src/base/fttrigon.c [] []
/src/freetype/src/base/ftinit.c ['fuzz_pdfload'] []
/src/freetype/src/base/ftadvanc.c [] []
/src/xpdf-4.04/xpdf/XRef.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/Parser.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/fofi/FoFiBase.cc ['fuzz_pdfload'] []
/src/xpdf-4.04/splash/SplashPattern.cc ['fuzz_pdfload'] []
/src/freetype/src/type1/t1afm.c [] []
/src/freetype/src/base/ftcolor.c [] []
/src/freetype/src/raster/ftraster.c [] []
/src/freetype/src/sfnt/ttcpal.c [] []
/src/freetype/src/psnames/psmodule.c [] []
/src/freetype/src/base/ftpsprop.c [] []
/src/xpdf-4.04/goo/GMutex.h ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/UnicodeMap.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/splash/SplashXPathScanner.cc ['fuzz_pdfload'] []
/src/freetype/src/truetype/ttobjs.c [] []
/src/xpdf-4.04/goo/GList.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/Outline.h [] []
/src/freetype/src/gzip/inflate.c [] []
/src/freetype/src/base/ftoutln.c [] []
/src/freetype/src/pfr/pfrcmap.c [] []
/src/xpdf-4.04/xpdf/TextString.cc ['fuzz_JBIG2', 'fuzz_pdfload'] ['fuzz_JBIG2']
/src/freetype/src/pshinter/pshrec.c [] []
/src/xpdf-4.04/xpdf/SplashOutputDev.cc ['fuzz_pdfload'] []
/src/xpdf-4.04/build/../xpdf/Catalog.h ['fuzz_pdfload'] ['fuzz_JBIG2', 'fuzz_pdfload']
/src/xpdf-4.04/xpdf/JPXStream.h [] []
/src/xpdf-4.04/xpdf/CMap.h [] []

Directories in report

Directory
/src/freetype/src/truetype/
/src/xpdf-4.04/build/../xpdf/
/src/freetype/src/pshinter/
/src/freetype/src/cff/
/src/freetype/src/winfonts/
/src/xpdf-4.04/build/
/src/freetype/src/sfnt/
/src/freetype/src/pcf/
/src/xpdf-4.04/splash/
/src/freetype/include/freetype/internal/
/src/freetype/src/psnames/
/src/freetype/src/type1/
/src/xpdf-4.04/build/../goo/
/src/freetype/src/sdf/
/src/freetype/src/gzip/
/src/freetype/src/base/
/src/freetype/src/autofit/
/src/xpdf-4.04/fofi/
/src/freetype/src/smooth/
/src/freetype/builds/unix/
/usr/local/bin/../include/c++/v1/
/src/freetype/src/pfr/
/src/freetype/src/type42/
/src/freetype/src/lzw/
/src/xpdf-4.04/xpdf/
/src/freetype/src/svg/
/src/freetype/src/raster/
/src/freetype/src/psaux/
/src/freetype/src/bdf/
/src/freetype/src/cid/
/src/xpdf-4.04/goo/

Metadata section

This sections shows the raw data that is used to produce this report. This is mainly used for further processing and developer debugging.

Fuzzer Calltree file Program data file Coverage file
fuzz_zxdoc fuzzerLogFile-0-4C1carRpxV.data fuzzerLogFile-0-4C1carRpxV.data.yaml fuzz_zxdoc.covreport
fuzz_JBIG2 fuzzerLogFile-0-6Q47vPsblv.data fuzzerLogFile-0-6Q47vPsblv.data.yaml fuzz_JBIG2.covreport
fuzz_pdfload fuzzerLogFile-0-6ac9URS6vU.data fuzzerLogFile-0-6ac9URS6vU.data.yaml fuzz_pdfload.covreport