High level conclusions

Fuzzer curl_fuzzer/fuzz_fnmatch.cc is blocked:

The runtime code coverage of curl_fuzzer/fuzz_fnmatch.cc covers 28.57% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 16.54% of cyclomatic complexity.

Fuzzers reach 18.50% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

680 / 3674

Cyclomatic complexity statically reachable by fuzzers

4172 / 25213

Runtime code coverage of functions

1386 / 3674

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_url

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	261	54.9%
gold	[1:9]	3	0.63%
yellow	[10:29]	9	1.89%
greenyellow	[30:49]	13	2.73%
lawngreen	50+	189	39.7%
All colors	475	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
52	418	parseurl_and_replace	call site: 00418	redirect_url
47	181	Curl_dyn_addn	call site: 00181	Curl_idn_decode
21	125	formatf	call site: 00125	curl_msnprintf
19	240	Curl_urldecode	call site: 00240	Curl_idn_decode
15	352	ipv6_parse	call site: 00352	inet_ntop6
12	94	dollarstring	call site: 00094	dollarstring
11	113	formatf	call site: 00113
10	341	ipv6_parse	call site: 00341	inet_pton6
9	168	Curl_dyn_ptr	call site: 00168	curl_easy_escape
7	390	parseurl	call site: 00390	Curl_dyn_add
6	26	Curl_getn_scheme_handler	call site: 00026
5	46	Curl_get_scheme_handler	call site: 00046	Curl_str_number

Runtime coverage analysis

Covered functions

57

Functions that are reachable but not covered

79

Reachable functions

121

Percentage of reachable functions covered

34.71%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_url.cc	7
curl/lib/urlapi.c	68
curl/lib/url.c	9
curl/lib/strparse.c	3
curl/lib/strcase.c	1
curl/lib/dynbuf.c	12
curl/lib/mprintf.c	15
curl/lib/escape.c	11
curltool_strdup.c	3
curl/lib/idn.c	21
curl/lib/curl_multibyte.c	3
curl/lib/strdup.c	2
curl/lib/inet_pton.c	6
curl/lib/inet_ntop.c	8

Fuzzer: curl_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3534	59.7%
gold	[1:9]	77	1.30%
yellow	[10:29]	73	1.23%
greenyellow	[30:49]	50	0.84%
lawngreen	50+	2183	36.8%
All colors	5917	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
504	4377	curlx_strtoofft	call site: 04377	myssh_multi_statemach
215	4080	Curl_client_write	call site: 04080	sftp_upload_init
185	3888	base64_encode	call site: 03888	sftp_quote
131	5322	Curl_sasl_continue	call site: 05322	Curl_sspi_strerror
79	3791	multi_do	call site: 03791	myssh_multi_statemach
76	4297	Curl_xfer_setup1	call site: 04297	sftp_readdir
63	1578	global_init	call site: 01578	Curl_sspi_global_init
57	2234	setopt_cptr	call site: 02234	setstropt_interface
57	4930	Curl_pgrsUpdate	call site: 04930	progress_meter
55	2374	altsvc_load	call site: 02374	altsvc_add
55	5456	Curl_sasl_continue	call site: 05456	Curl_auth_create_ntlm_type3_message
47	5106	Curl_auth_create_login_message	call site: 05106	Curl_auth_create_gssapi_user_message

Runtime coverage analysis

Covered functions

4499

Functions that are reachable but not covered

506

Reachable functions

1013

Percentage of reachable functions covered

50.05%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/curl_fuzzer.cc	45
curl/lib/easy.c	28
curl/lib/curl_trc.c	15
curl/lib/strparse.c	12
curl/lib/vtls/vtls.c	31
curl/tests/libtest/lib540.c	4
curl/lib/sigpipe.h	4
curl/lib/url.c	147
curl/lib/multi.c	148
curl/lib/llist.c	6
curl/lib/asyn-thread.c	21
curl/lib/curl_threads.c	2
curl/lib/hostasyn.c	4
curl/lib/hostip.c	21
curl/lib/strcase.c	2
curl/lib/hash.c	16
curl/lib/curl_addrinfo.c	4
curl/lib/multi_ev.c	38
curl/lib/cw-out.c	26
curl/lib/cw-pause.c	13
curl/lib/sendf.c	21
curl/lib/bufq.c	14
curl/lib/dynbuf.c	14
curl/lib/transfer.c	65
curl/lib/cfilters.c	57
curl/lib/cf-socket.c	20
curl/lib/connect.c	18
curl/lib/inet_ntop.c	8
curl/lib/timeval.c	2
curl/lib/splay.c	3
curl/lib/request.c	39
curltool_getparam.c	21
curltool_strdup.c	3
curltool_msgs.c	11
curl/lib/escape.c	12
curltool_paramhlp.c	13
curl/lib/progress.c	15
curl/lib/content_encoding.c	9
curl/lib/doh.c	9
curl/lib/conncache.c	58
curl/tests/http/clients/h2-pausing.c	3
curl/lib/getinfo.c	20
curl/lib/cookie.c	81
curl/lib/slist.c	6
curl/lib/getenv.c	5
curl/lib/vtls/wolfssl.c	1
curl/lib/netrc.c	21
curl/lib/ftplistparser.c	5
curl/tests/unit/unit2600.c	5
curl/lib/hash_offt.c	14
curl/lib/cshutdn.c	56
curl/lib/http_ntlm.c	1
curl/lib/vauth/ntlm_sspi.c	25
curl/lib/curl_sspi.c	16
curl/lib/http_negotiate.c	1
curl/lib/vauth/spnego_sspi.c	5
curl/tests/server/mqttd.c	5
curl/tests/server/util.c	13
curl/tests/server/socksd.c	2
curl/lib/idn.c	24
curl/docs/examples/hiperfifo.c	3
curl/lib/select.c	20
curl/lib/psl.c	8
curl/lib/vtls/vtls_scache.c	8
curl/lib/urlapi.c	70
curl/lib/fopen.c	20
curl/lib/rand.c	5
curl/lib/rename.c	7
curl/lib/altsvc.c	45
curl/lib/parsedate.c	2
curl/lib/inet_pton.c	6
curl/lib/hsts.c	51
curl/lib/http_digest.c	1
curl/lib/vauth/digest_sspi.c	21
curl/lib/mime.c	19
curl/lib/headers.c	10
curl/lib/system_win32.c	23
curl/lib/version_win32.c	9
curl/lib/amigaos.c	7
curl/lib/macos.c	2
curl/lib/vssh/wolfssh.c	6
curl/lib/setopt.c	72
curl_fuzzer/curl_fuzzer_tlv.cc	26
curl/lib/strdup.c	2
curl/lib/formdata.c	16
curl/lib/warnless.c	1
curl/lib/curl_get_line.c	3
curl/lib/strequal.c	2
curl/lib/mprintf.c	15
curl/lib/curl_multibyte.c	3
curl/lib/http.c	35
curl/lib/noproxy.c	13
curl/lib/speedcheck.c	4
curl/lib/cf-https-connect.c	18
curl/lib/vquic/vquic.c	1
curl/lib/gopher.c	2
curl/lib/vssh/libssh.c	121
curl/lib/vssh/libssh2.c	119
curl/lib/sha256.c	10
curl/lib/base64.c	6
curl/lib/vssh/curl_path.c	15
curl/lib/strtoofft.c	4
curl/lib/smtp.c	53
curl/lib/pingpong.c	31
curltool_progress.c	9
curl/lib/curl_sasl.c	37
curl/lib/bufref.c	5
curl/lib/vauth/cleartext.c	5
curl/lib/vauth/krb5_sspi.c	24
curl/lib/vauth/vauth.c	2
curl/lib/vauth/gsasl.c	9
curl/lib/vauth/oauth2.c	3
curl/lib/vauth/cram.c	9
curl/lib/hmac.c	2
curl/lib/strerror.c	11
curl/lib/http2.c	1

Fuzzer: curl_fuzzer/fuzz_fnmatch.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	859	54.2%
gold	[1:9]	48	3.03%
yellow	[10:29]	276	17.4%
greenyellow	[30:49]	42	2.65%
lawngreen	50+	357	22.5%
All colors	1582	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
39	468	curl_free	call site: 00468	file2memory
38	815	Curl_hash_offt_destroy	call site: 00815	mev_sh_entry_update
38	940	cshutdn_run_conn_handler	call site: 00940	Curl_pgrsTime
34	594	Curl_cpool_do_locked	call site: 00594	curl_easy_getinfo
24	443	Curl_conn_cf_needs_flush	call site: 00443	data_urlencode
20	294	Curl_addr2string	call site: 00294	Curl_inet_ntop
19	0	EP	call site: 00000
19	57	multi_done	call site: 00057	thread_wait_resolv
19	1099	curl_multi_remove_handle	call site: 01099	Curl_update_timer
19	1176	cshutdn_perform	call site: 01176	Curl_cshutdn_terminate
18	1197	Curl_pollfds_init	call site: 01197	Curl_cshutdn_add_pollfds
18	1226	Curl_poll	call site: 01226	our_select

Runtime coverage analysis

Covered functions

4536

Functions that are reachable but not covered

5

Reachable functions

7

Percentage of reachable functions covered

28.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_fnmatch.cc	6
curl/lib/curl_fnmatch.c	1
curl/tests/libtest/lib540.c	15
curl/lib/easy.c	13
curl/lib/sigpipe.h	4
curl/lib/url.c	37
curl/lib/multi.c	76
curl/lib/llist.c	6
curl/lib/asyn-thread.c	21
curl/lib/curl_threads.c	2
curl/lib/hostasyn.c	4
curl/lib/hostip.c	14
curl/lib/strcase.c	1
curl/lib/hash.c	16
curl/lib/curl_addrinfo.c	1
curl/lib/multi_ev.c	37
curl/lib/cw-out.c	26
curl/lib/cw-pause.c	13
curl/lib/sendf.c	9
curl/lib/bufq.c	11
curl/lib/dynbuf.c	7
curl/lib/transfer.c	9
curl/lib/cfilters.c	34
curl/lib/cf-socket.c	8
curl/lib/connect.c	10
curl/lib/inet_ntop.c	8
curl/lib/timeval.c	2
curl/lib/splay.c	3
curl/lib/request.c	30
curl/lib/strparse.c	3
curl/lib/curl_trc.c	6
curltool_getparam.c	21
curltool_strdup.c	3
curltool_msgs.c	11
curl/lib/escape.c	1
curltool_paramhlp.c	13
curl/lib/progress.c	3
curl/lib/content_encoding.c	4
curl/lib/doh.c	9
curl/lib/conncache.c	38
curl/tests/http/clients/h2-pausing.c	3
curl/lib/getinfo.c	17
curl/lib/vtls/vtls.c	13
curl/lib/cookie.c	29
curl/lib/slist.c	5
curl/lib/getenv.c	5
curl/lib/vtls/wolfssl.c	1
curl/lib/netrc.c	1
curl/lib/ftplistparser.c	4
curl/tests/unit/unit2600.c	5
curl/lib/hash_offt.c	14
curl/lib/cshutdn.c	52
curl/lib/http_ntlm.c	1
curl/lib/vauth/ntlm_sspi.c	5
curl/lib/curl_sspi.c	1
curl/lib/http_negotiate.c	1
curl/lib/vauth/spnego_sspi.c	5
curl/tests/server/mqttd.c	5
curl/tests/server/util.c	13
curl/tests/server/socksd.c	2
curl/lib/idn.c	1
curl/docs/examples/hiperfifo.c	3
curl/lib/select.c	19
curl/lib/psl.c	1
curl/lib/vtls/vtls_scache.c	6
curl/lib/urlapi.c	2
curl/lib/fopen.c	20
curl/lib/rand.c	5
curl/lib/rename.c	7
curl/lib/altsvc.c	15
curl/lib/parsedate.c	2
curl/lib/inet_pton.c	6
curl/lib/hsts.c	18
curl/lib/http_digest.c	1
curl/lib/vauth/digest_sspi.c	2
curl/lib/mime.c	8
curl/lib/headers.c	6
curl/lib/warnless.c	1

Fuzzer: curl_fuzzer/fuzz_bufq.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	53	70.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	6	8.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	16	21.3%
All colors	75	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
31	23	Curl_bufq_len	call site: 00023	Curl_bufq_skip
7	62	bufcp_put	call site: 00062	Curl_bufq_free
5	0	EP	call site: 00000	fuzz_handle_bufq
3	16	Curl_bufq_init	call site: 00016	Curl_bufq_is_empty
2	13	bufq_init	call site: 00013
2	20	Curl_bufq_is_empty	call site: 00020	Curl_bufq_len
1	8	Curl_bufcp_init	call site: 00008
1	70	Curl_bufq_free	call site: 00070
1	72	Curl_bufq_free	call site: 00072	Curl_bufcp_free

Runtime coverage analysis

Covered functions

4536

Functions that are reachable but not covered

10

Reachable functions

28

Percentage of reachable functions covered

64.29%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_bufq.cc	17
curl/lib/bufq.c	12

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

680 / 3674

Cyclomatic complexity statically reachable by fuzzers

4172 / 25213

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

curl_fuzzer/fuzz_url.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['parseurl_and_replace', 'Curl_dyn_addn', 'formatf', 'Curl_urldecode', 'ipv6_parse', 'dollarstring', 'Curl_dyn_ptr', 'parseurl']

curl_fuzzer/curl_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['curlx_strtoofft', 'Curl_client_write', 'base64_encode', 'Curl_sasl_continue', 'multi_do', 'Curl_xfer_setup1', 'global_init', 'setopt_cptr', 'Curl_pgrsUpdate', 'altsvc_load']

curl_fuzzer/fuzz_fnmatch.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['curl_free', 'Curl_hash_offt_destroy', 'cshutdn_run_conn_handler', 'Curl_cpool_do_locked', 'Curl_conn_cf_needs_flush', 'Curl_addr2string', 'multi_done', 'curl_multi_remove_handle', 'cshutdn_perform']

curl_fuzzer/fuzz_bufq.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['Curl_bufq_len', 'bufcp_put', 'Curl_bufq_init', 'bufq_init', 'Curl_bufq_is_empty', 'Curl_bufcp_init', 'Curl_bufq_free']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
formatf	303	157	51.81%	['fuzz_url', 'curl_fuzzer']
parsefmt	347	187	53.89%	['fuzz_url', 'curl_fuzzer']
curl_url_set	262	70	26.71%	['fuzz_url', 'curl_fuzzer']
OPENSSL_cpuid_setup	42	15	35.71%
time_to_start_next	36	6	16.66%	[]
cf_tcp_connect	72	23	31.94%	[]
bindlocal	181	22	12.15%	[]
cf_socket_send	52	20	38.46%	[]
Curl_conn_connect	76	37	48.68%	['curl_fuzzer']
Curl_cpool_check_limits	62	14	22.58%	['curl_fuzzer']
Curl_addr2string	47	24	51.06%	[]
cf_he_shutdown	32	10	31.25%	[]
cf_he_query	39	20	51.28%	[]
cf_setup_connect	88	47	53.40%	[]
cshutdn_terminate_all	40	16	40.0%	['curl_fuzzer']
cshutdn_perform	34	10	29.41%	['curl_fuzzer']
Curl_debug	41	3	7.317%	['curl_fuzzer']
cw_out_do_write	35	15	42.85%	[]
cw_pause_write	51	23	45.09%	[]
cw_pause_flush	36	7	19.44%	['curl_fuzzer']
global_init	48	22	45.83%	['curl_fuzzer']
Curl_fopen	49	16	32.65%	['curl_fuzzer']
Curl_getformdata	84	44	52.38%	[]
FormAdd	399	104	26.06%	[]
ftp_statemachine	307	143	46.57%	[]
ftp_state_ul_setup	61	14	22.95%	[]
ftp_state_prepare_transfer	33	16	48.48%	[]
Curl_resolv	111	55	49.54%	[]
fetch_addr	44	17	38.63%	['curl_fuzzer']
show_resolve_info	49	10	20.40%
Curl_hsts_parse	75	25	33.33%	[]
Curl_hsts	36	15	41.66%	['curl_fuzzer']
Curl_hsts_save	48	25	52.08%	['curl_fuzzer']
hsts_pull	35	4	11.42%	['curl_fuzzer']
Curl_add_timecondition	48	9	18.75%
http_perhapsrewind	42	15	35.71%	[]
http_target	82	16	19.51%
http_firstwrite	37	18	48.64%
fr_print	69	19	27.53%	[]
on_header	134	65	48.50%	[]
add_last_chunk	41	10	24.39%	[]
imap_state_capability_resp	54	12	22.22%	[]
cr_mime_read	114	51	44.73%	[]
Curl_multi_getsock	91	36	39.56%	['curl_fuzzer']
Curl_update_timer	37	7	18.91%	['curl_fuzzer']
Curl_multi_xfer_buf_borrow	37	20	54.05%	['curl_fuzzer']
Curl_multi_xfer_ulbuf_borrow	37	20	54.05%	[]
state_do	101	51	50.49%	['curl_fuzzer']
Curl_parsenetrc	35	8	22.85%	['curl_fuzzer']
parsenetrc	219	42	19.17%	['curl_fuzzer']
Curl_check_noproxy	96	7	7.291%	['curl_fuzzer']
pgrsupdate	37	4	10.81%	['curl_fuzzer']
rtsp_filter_rtp	140	72	51.42%	[]
setopt_long	714	129	18.06%	['curl_fuzzer']
setopt_slist	51	15	29.41%	['curl_fuzzer']
setopt_pointers	100	28	28.00%	['curl_fuzzer']
setopt_cptr	539	119	22.07%	['curl_fuzzer']
setopt_func	99	21	21.21%	['curl_fuzzer']
setopt_offt	45	9	20.0%	['curl_fuzzer']
Curl_splay	47	20	42.55%	['curl_fuzzer']
Curl_splayinsert	35	14	40.0%	['curl_fuzzer']
Curl_splayremove	41	20	48.78%	['curl_fuzzer']
curl_easy_strerror	198	7	3.535%	['curl_fuzzer']
curl_url_strerror	72	19	26.38%	['curl_fuzzer']
tftp_translate_code	41	7	17.07%	[]
create_conn_helper_init_proxy	124	48	38.70%	['curl_fuzzer']
parse_connect_to_slist	105	27	25.71%	['curl_fuzzer']
parse_connect_to_string	48	22	45.83%	['curl_fuzzer']
parse_connect_to_host_port	62	29	46.77%	['curl_fuzzer']
url_match_conn	247	108	43.72%	[]
Curl_auth_create_digest_md5_message	112	27	24.10%	[]
Curl_auth_decode_digest_http_message	113	43	38.05%	[]
auth_create_digest_http_message	188	94	50.0%	[]
Curl_auth_decode_ntlm_type2_message	31	12	38.70%	[]
Curl_ossl_ctx_init	293	143	48.80%	[]
ossl_populate_x509_store	75	34	45.33%	[]
ossl_set_ssl_version_min_max	55	21	38.18%	[]
ossl_connect	63	30	47.61%	[]
ossl_connect_step2	117	14	11.96%	[]
Curl_ssl_peer_key_make	144	53	36.80%	[]
cf_ssl_find_peer_by_key	50	21	42.0%	[]
nghttp2_iv_check	40	17	42.5%
frame_pack_headers_shared	33	14	42.42%
nghttp2_hd_deflate_hd_bufs	35	12	34.28%
nghttp2_adjust_local_window_size	36	19	52.77%
nghttp2_strerror	92	16	17.39%
nghttp2_http2_strerror	34	18	52.94%
nghttp2_outbound_item_free	58	30	51.72%
nghttp2_session_add_rst_stream	54	25	46.29%
nghttp2_session_open_stream	125	51	40.8%
nghttp2_session_on_request_headers_received	64	15	23.43%
nghttp2_session_on_priority_received	43	15	34.88%
nghttp2_session_update_local_settings	72	36	50.0%
nghttp2_session_pack_data	107	55	51.40%
nghttp2_session_set_stream_user_data	31	13	41.93%
nghttp2_session_mem_send_internal	217	101	46.54%
session_prep_frame	255	113	44.31%
nghttp2_session_set_local_window_size	57	20	35.08%
ossl_i2c_ASN1_BIT_STRING	50	24	48.0%
ASN1_mbstring_ncopy	137	61	44.52%
UTF8_getc	53	20	37.73%
UTF8_putc	44	9	20.45%
ASN1_get_object	53	27	50.94%
asn1_item_embed_d2i	239	127	53.13%
asn1_d2i_ex_primitive	100	50	50.0%
asn1_set_seq_out	49	16	32.65%
ossl_asn1_do_adb	34	8	23.52%
buffer_write	58	14	24.13%
buffer_ctrl	169	52	30.76%
BIO_gets	40	21	52.5%
_dopr	265	111	41.88%
doapr_outch	34	10	29.41%
file_ctrl	102	32	31.37%
mem_ctrl	92	47	51.08%
int_bn_mod_inverse	177	83	46.89%
BN_cmp	41	22	53.65%
bn_mul_fixed_top	92	49	53.26%
ossl_lib_ctx_get_data	62	25	40.32%
OpenSSL_version	31	6	19.35%
i2d_ECDSA_SIG	35	13	37.14%
ossl_ec_key_param_from_x509_algor	37	18	48.64%
ec_group_explicit_todata	110	29	26.36%
ec_group_new_from_data	106	58	54.71%
ossl_ec_key_new_method_int	49	20	40.81%
ossl_ec_group_new_ex	40	20	50.0%
EC_GROUP_copy	87	41	47.12%
EC_GROUP_set_generator	42	20	47.61%
ossl_ec_GFp_simple_is_on_curve	71	33	46.47%
ossl_ecx_key_new	37	15	40.54%
OSSL_DECODER_from_bio	57	19	33.33%
ossl_decoder_instance_new	48	26	54.16%
ossl_decoder_ctx_for_pkey_dup	78	39	50.0%
ossl_engine_table_select	76	13	17.10%
get_error_values	60	29	48.33%
EVP_DigestFinal_ex	50	17	34.0%
evp_md_init_internal	152	61	40.13%
EVP_EncryptUpdate	39	21	53.84%
evp_cipher_init_internal	240	59	24.58%
EVP_RAND_CTX_new	39	20	51.28%
evp_pkey_get_legacy	33	7	21.21%
detect_foreign_key	32	13	40.62%
EVP_PKEY_generate	78	29	37.17%
gen_init	55	21	38.18%
evp_pkey_ctx_free_old_ops	31	10	32.25%
EVP_PKEY_CTX_set_params	42	21	50.0%
CRYPTO_free_ex_data	43	22	51.16%
init_thread_deregister	48	20	41.66%
ossl_obj_find_sigid_algs	31	14	45.16%
wpacket_intern_close	50	22	44.0%
OSSL_PARAM_get_int32	71	25	35.21%
OSSL_PARAM_set_int32	65	23	35.38%
OSSL_PARAM_get_uint32	74	13	17.56%
OSSL_PARAM_set_uint32	65	14	21.53%
OSSL_PARAM_get_int64	61	12	19.67%
OSSL_PARAM_get_uint64	67	12	17.91%
OSSL_PARAM_set_uint64	69	14	20.28%
PEM_X509_INFO_read_bio_ex	148	75	50.67%
PEM_do_header	46	13	28.26%
PEM_get_EVP_CIPHER_INFO	54	8	14.81%
pem_bytes_read_bio_flags	33	16	48.48%
sanitize_line	34	15	44.11%
ossl_method_store_cache_set	53	29	54.71%
ossl_property_match_count	47	12	25.53%
provider_activate	47	22	46.80%
provider_init	154	54	35.06%
rand_new_seed	80	26	32.5%
ossl_ifc_ffc_compute_security_bits	39	10	25.64%
rsa_new_intern	51	23	45.09%
internal_find	51	25	49.01%
X509_load_crl_file	51	25	49.01%
ossl_x509v3_cache_extensions	193	99	51.29%
X509_STORE_new	37	13	35.13%
x509_sig_info_init	58	31	53.44%
X509_VERIFY_PARAM_inherit	48	26	54.16%
ossl_cipher_generic_get_params	54	27	50.0%
ossl_cipher_generic_block_update	111	26	23.42%
ossl_cipher_generic_stream_update	37	10	27.02%
ossl_cipher_generic_get_ctx_params	45	24	53.33%
ossl_cipher_generic_set_ctx_params	48	5	10.41%
ec_get_ecm_params	42	8	19.04%
ecx_gen_set_params	46	22	47.82%
ecx_gen	59	25	42.37%
ossl_prov_drbg_instantiate	99	47	47.47%
ossl_prov_drbg_generate	70	37	52.85%
ossl_prov_drbg_reseed_unlocked	72	33	45.83%
ossl_pool_acquire_entropy	62	23	37.09%
tls_default_read_n	100	49	49.0%
tls_get_more_records	280	34	12.14%
tls_set_options	37	18	48.64%
tls_int_new_record_layer	100	47	47.0%
tls_post_encryption_processing_default	47	18	38.29%
tls_retry_write_records	58	30	51.72%
tls_new_record_layer	38	19	50.0%
ossl_tls_handle_rlayer_return	38	18	47.36%
ssl3_read_bytes	298	30	10.06%
ssl3_ctrl	280	24	8.571%
ssl_generate_pkey_group	32	16	50.0%
ssl_cert_dup	102	39	38.23%
check_suiteb_cipher_list	41	12	29.26%
ssl_cipher_process_rulestr	201	99	49.25%
ossl_ctrl_internal	98	12	12.24%
SSL_CTX_ctrl	110	16	14.54%
SSL_CTX_new_ex	144	73	50.69%
ssl_do_config	59	20	33.89%
tls_construct_ctos_session_ticket	32	4	12.5%
tls_construct_ctos_status_request	49	5	10.20%
tls_construct_ctos_early_data	121	25	20.66%
tls_construct_ctos_psk	108	13	12.03%
add_key_share	37	19	51.35%
custom_ext_add	64	9	14.06%
custom_exts_copy	34	7	20.58%
read_state_machine	118	36	30.50%
ossl_statem_client_write_transition	106	13	12.26%
ossl_statem_client_pre_work	41	12	29.26%
ossl_statem_client_post_work	78	14	17.94%
ossl_statem_client_construct_message	54	10	18.51%
tls_construct_client_hello	125	58	46.40%
ssl3_do_write	49	23	46.93%
tls_setup_handshake	78	20	25.64%
tls_get_message_header	72	17	23.61%
tls12_sigalg_allowed	46	17	36.95%
cr_in_rewind	40	11	27.50%	[]

New fuzzers

The below fuzzers are templates and suggestions for how to target the set of optimal functions above

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
/src/curl/lib/vtls/mbedtls_threadlock.c	[]	[]
/src/curl/tests/http/clients/hx-upload.c	[]	[]
/src/curl/lib/vtls/mbedtls.c	[]	[]
/src/curl/lib/setopt.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib576.c	[]	[]
/src/curl/src/tool_getpass.c	[]	[]
/src/curl/lib/cf-h2-proxy.c	[]	[]
/src/curl/tests/http/testenv/mod_curltest/mod_curltest.c	[]	[]
/src/curl/tests/unit/unit1300.c	[]	[]
/src/curl/lib/rename.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl_fuzzer/fuzz_bufq.cc	['curl_fuzzer/fuzz_bufq.cc']	['curl_fuzzer/fuzz_bufq.cc']
/src/curl/tests/libtest/testutil.c	[]	[]
/src/curl/lib/cf-h1-proxy.c	[]	[]
/src/curl/docs/examples/ftpuploadresume.c	[]	[]
/src/curl/src/tool_cb_rea.c	[]	[]
/src/curl/src/tool_dirhie.c	[]	[]
/src/curl/src/tool_msgs.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/version_win32.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1555.c	[]	[]
/src/curl/lib/curl_get_line.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/docs/examples/ftp-wildcard.c	[]	[]
/src/curl/src/tool_parsecfg.c	[]	[]
/src/curl/tests/unit/unit1603.c	[]	[]
/src/curl/lib/curl_sasl.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/doh.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/progress.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vauth/digest_sspi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/vssh/libssh2.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib582.c	[]	[]
/src/curl/lib/hmac.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/multi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/easy_lock.h	[]	[]
/src/curl/lib/cf-haproxy.c	[]	[]
/src/curl/docs/examples/http2-upload.c	[]	[]
/src/curl/lib/cw-out.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl_fuzzer/fuzz_url.cc	['fuzz_url']	['fuzz_url']
/src/curl/tests/libtest/lib1591.c	[]	[]
/src/curl/tests/unit/unit1660.c	[]	[]
/src/curl/src/tool_cb_see.c	[]	[]
/src/curl/docs/examples/synctime.c	[]	[]
/src/curl/src/tool_setopt.c	[]	[]
/src/curl/lib/vtls/cipher_suite.c	[]	[]
/src/curl/tests/server/socksd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/vquic/curl_quiche.c	[]	[]
/src/curl/tests/libtest/lib1960.c	[]	[]
/src/curl/lib/hash.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curl_fnmatch.c	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/x509asn1.c	[]	[]
/src/curl/lib/httpsrr.c	[]	[]
/src/curl/lib/timediff.c	[]	[]
/src/curl/docs/examples/multi-uv.c	[]	[]
/src/curl/tests/libtest/lib552.c	[]	[]
/src/curl/tests/libtest/lib2301.c	[]	[]
/src/curl/docs/examples/sftpuploadresume.c	[]	[]
/src/curl/lib/transfer.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/cshutdn.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vauth/gsasl.c	['curl_fuzzer']	[]
/src/curl/lib/content_encoding.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/websocket.c	[]	[]
/src/curl/tests/libtest/lib530.c	[]	[]
/src/curl/docs/examples/ephiperfifo.c	[]	[]
/src/curl/tests/libtest/lib1556.c	[]	[]
/src/curl/src/tool_operhlp.c	[]	[]
/src/curl/src/tool_doswin.c	[]	[]
/src/curl/lib/http_aws_sigv4.c	[]	[]
/src/curl/lib/vssh/wolfssh.c	['curl_fuzzer']	[]
/src/curl/tests/unit/unit1309.c	[]	[]
/src/curl/docs/examples/cookie_interface.c	[]	[]
/src/curl/lib/if2ip.c	[]	[]
/src/curl/tests/libtest/lib654.c	[]	[]
/src/curl/tests/libtest/lib500.c	[]	[]
/src/curl/tests/unit/unit1657.c	[]	[]
/src/curl/src/tool_help.c	[]	[]
/src/curl/tests/libtest/lib518.c	[]	[]
/src/curl/tests/libtest/lib655.c	[]	[]
/src/curl/docs/examples/http2-download.c	[]	[]
/src/curl/tests/libtest/first.c	[]	[]
/src/curl/lib/inet_ntop.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/vauth/vauth.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib536.c	[]	[]
/src/curl/src/tool_cb_soc.c	[]	[]
/src/curl/lib/telnet.c	[]	[]
/src/curl/docs/examples/hsts-preload.c	[]	[]
/src/curl/lib/smb.c	[]	[]
/src/curl/lib/vquic/vquic-tls.c	[]	[]
/src/curl/lib/vtls/openssl.c	[]	[]
/src/curl/tests/libtest/lib1948.c	[]	[]
/src/curl/lib/vauth/ntlm.c	[]	[]
/src/curl/src/tool_cb_wrt.c	[]	[]
/src/curl/lib/hash_offt.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/altsvc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curl_trc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl_fuzzer/fuzz_fnmatch.cc	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vssh/curl_path.c	['curl_fuzzer']	[]
/src/curl/docs/examples/ftpsget.c	[]	[]
/src/curl/lib/system_win32.c	['curl_fuzzer']	[]
/src/curl/lib/ftplistparser.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_util.c	[]	[]
/src/curl/lib/memdebug.c	[]	[]
/src/curl/docs/examples/10-at-a-time.c	[]	[]
/src/curl/lib/smtp.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/unit/unit2601.c	[]	[]
/src/curl/lib/vauth/cleartext.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/dynbuf.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1515.c	[]	[]
/src/curl/lib/pingpong.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/src/tool_strdup.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/bufref.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/src/tool_sleep.c	[]	[]
/src/curl/src/tool_main.c	[]	[]
/src/curl/tests/libtest/lib1156.c	[]	[]
/src/curl/src/tool_ipfs.c	[]	[]
/src/curl/lib/fopen.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/websocket-cb.c	[]	[]
/src/curl/src/tool_vms.c	[]	[]
/src/curl/tests/libtest/lib554.c	[]	[]
/src/curl/lib/getenv.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_getparam.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/unit/unit1653.c	[]	[]
/src/curl/lib/amigaos.c	['curl_fuzzer']	[]
/src/curl/lib/gopher.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/vtls/vtls_spack.c	[]	[]
/src/curl/lib/headers.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_easysrc.c	[]	[]
/src/curl/tests/libtest/lib1523.c	[]	[]
/src/curl/lib/strtoofft.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/imap.c	[]	[]
/src/curl/lib/strdup.c	['fuzz_url', 'curl_fuzzer']	['fuzz_url', 'curl_fuzzer']
/src/curl/src/tool_cfgable.c	[]	[]
/src/curl/docs/examples/crawler.c	[]	[]
/src/curl/lib/splay.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/shared-connection-cache.c	[]	[]
/src/curl/lib/curl_range.c	[]	[]
/src/curl/lib/vauth/cram.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/curl_multibyte.c	['fuzz_url', 'curl_fuzzer']	[]
/src/curl/lib/conncache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit2600.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/docs/examples/smooth-gtk-thread.c	[]	[]
/src/curl/tests/unit/unit1655.c	[]	[]
/src/curl/src/tool_findfile.c	[]	[]
/src/curl/lib/curl_rtmp.c	[]	[]
/src/curl/tests/libtest/lib1509.c	[]	[]
/src/curl/src/tool_operate.c	[]	[]
/src/curl/lib/rand.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/ldap.c	[]	[]
/src/curl/tests/libtest/lib569.c	[]	[]
/src/curl/lib/cw-pause.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1399.c	[]	[]
/src/curl/src/tool_paramhlp.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/asyn-ares.c	[]	[]
/src/curl/CMake/CurlTests.c	[]	[]
/src/curl/lib/socks.c	[]	[]
/src/curl/lib/sigpipe.h	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/http1.c	[]	[]
/src/curl/lib/vtls/vtls.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/hostip6.c	[]	[]
/src/curl/lib/psl.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/ftp.c	[]	[]
/src/curl/docs/examples/getinmemory.c	[]	[]
/src/curl/tests/libtest/libntlmconnect.c	[]	[]
/src/curl/tests/libtest/lib3026.c	[]	[]
/src/curl/src/tool_ssls.c	[]	[]
/src/curl/lib/tftp.c	[]	[]
/src/curl/lib/curl_sha512_256.c	[]	[]
/src/curl/lib/sha256.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/ws.c	[]	[]
/src/curl/docs/examples/htmltidy.c	[]	[]
/src/curl/lib/http.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/cf-https-connect.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/docs/examples/multi-event.c	[]	[]
/src/curl/lib/socketpair.c	[]	[]
/src/curl/lib/curl_threads.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/vquic/vquic.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1540.c	[]	[]
/src/curl/lib/hostip.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/http_ntlm.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/server/rtspd.c	[]	[]
/src/curl/tests/http/clients/h2-pausing.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib571.c	[]	[]
/src/curl/src/tool_cb_prg.c	[]	[]
/src/curl/tests/libtest/lib579.c	[]	[]
/src/curl/lib/speedcheck.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/http_digest.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/formdata.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/slist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/http/clients/ws-data.c	[]	[]
/src/curl/tests/libtest/lib574.c	[]	[]
/src/curl/lib/file.c	[]	[]
/src/curl/docs/examples/certinfo.c	[]	[]
/src/curl/lib/easygetopt.c	[]	[]
/src/curl/lib/version.c	[]	[]
/src/curl/docs/examples/ftpgetinfo.c	[]	[]
/src/curl/tests/libtest/lib1533.c	[]	[]
/src/curl/lib/share.c	[]	[]
/src/curl/tests/server/tftpd.c	[]	[]
/src/curl/lib/url.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/rtsp.c	[]	[]
/src/curl/tests/libtest/stub_gssapi.c	[]	[]
/src/curl/tests/unit/unit1305.c	[]	[]
/src/curl/docs/examples/ftpupload.c	[]	[]
/src/curl/tests/unit/unit1661.c	[]	[]
/src/curl/lib/vquic/curl_msh3.c	[]	[]
/src/curl_fuzzer/curl_fuzzer_callback.cc	[]	[]
/src/curl/docs/examples/ghiper.c	[]	[]
/src/curl_fuzzer/curl_fuzzer_tlv.cc	['curl_fuzzer']	[]
/src/curl/lib/md4.c	[]	[]
/src/curl/tests/unit/unit1663.c	[]	[]
/src/curl/lib/macos.c	['curl_fuzzer']	[]
/src/curl/lib/curl_memrchr.c	[]	[]
/src/curl/docs/examples/http2-pushinmemory.c	[]	[]
/src/curl/lib/http_chunks.c	[]	[]
/src/curl/tests/libtest/lib3102.c	[]	[]
/src/curl/tests/libtest/lib1513.c	[]	[]
/src/curl/src/terminal.c	[]	[]
/src/curl/lib/getinfo.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/pop3.c	[]	[]
/src/curl/lib/vtls/hostcheck.c	[]	[]
/src/curl/docs/examples/progressfunc.c	[]	[]
/src/curl/tests/libtest/lib678.c	[]	[]
/src/curl/lib/openldap.c	[]	[]
/src/curl/docs/examples/htmltitle.cpp	[]	[]
/src/curl/src/var.c	[]	[]
/src/curl/tests/unit/unit1307.c	[]	[]
/src/curl/tests/server/sockfilt.c	[]	[]
/src/curl/lib/socks_gssapi.c	[]	[]
/src/curl/lib/mprintf.c	['fuzz_url', 'curl_fuzzer']	['fuzz_url', 'curl_fuzzer']
/src/curl/lib/mqtt.c	[]	[]
/src/curl/packages/OS400/ccsidcurl.c	[]	[]
/src/curl/lib/parsedate.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/gtls.c	[]	[]
/src/curl/tests/server/mqttd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vauth/oauth2.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/dynhds.c	[]	[]
/src/curl/src/tool_bname.c	[]	[]
/src/curl/lib/strequal.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/unit/unit1606.c	[]	[]
/src/curl/lib/urlapi.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/http/clients/upload-pausing.c	[]	[]
/src/curl/lib/curl_sspi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curl_gethostname.c	[]	[]
/src/curl/tests/libtest/lib557.c	[]	[]
/src/curl_fuzzer/curl_fuzzer.cc	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/easy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib509.c	[]	[]
/src/curl/docs/examples/sendrecv.c	[]	[]
/src/curl/lib/strparse.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib506.c	[]	[]
/src/curl/lib/http_negotiate.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib650.c	[]	[]
/src/curl/tests/libtest/lib2308.c	[]	[]
/src/curl/lib/cf-socket.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/dict.c	[]	[]
/src/curl/docs/examples/cacertinmem.c	[]	[]
/src/curl/lib/vtls/bearssl.c	[]	[]
/src/curl/tests/libtest/lib1541.c	[]	[]
/src/curl/lib/vssh/libssh.c	['curl_fuzzer']	[]
/src/curl/lib/hsts.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib586.c	[]	[]
/src/curl/lib/vauth/digest.c	[]	[]
/src/curl/lib/base64.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib2302.c	[]	[]
/src/curl/tests/unit/unit1652.c	[]	[]
/src/curl/docs/examples/smtp-tls.c	[]	[]
/src/curl/lib/vauth/spnego_gssapi.c	[]	[]
/src/curl/src/tool_writeout.c	[]	[]
/src/curl/lib/vauth/krb5_gssapi.c	[]	[]
/src/curl/src/tool_filetime.c	[]	[]
/src/curl/lib/curl_addrinfo.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/schannel.c	[]	[]
/src/curl/lib/request.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_cb_dbg.c	[]	[]
/src/curl/tests/unit/unit1656.c	[]	[]
/src/curl/lib/sendf.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/noproxy.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/src/tool_progress.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib2309.c	[]	[]
/src/curl/lib/socks_sspi.c	[]	[]
/src/curl/src/tool_helpers.c	[]	[]
/src/curl/tests/unit/unit1604.c	[]	[]
/src/curl/lib/curl_endian.c	[]	[]
/src/curl/lib/vtls/keylog.c	[]	[]
/src/curl/scripts/schemetable.c	[]	[]
/src/curl/lib/inet_pton.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/packages/OS400/os400sys.c	[]	[]
/src/curl/packages/vms/curl_crtl_init.c	[]	[]
/src/curl/docs/examples/href_extractor.c	[]	[]
/src/curl/tests/libtest/lib553.c	[]	[]
/src/curl/tests/libtest/lib555.c	[]	[]
/src/curl/packages/OS400/curlcl.c	[]	[]
/src/curl/lib/vtls/vtls_scache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/netrc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/asyn-thread.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1560.c	[]	[]
/src/curl/lib/select.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/krb5.c	[]	[]
/src/curl/tests/libtest/lib2405.c	[]	[]
/src/curl/lib/http2.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/strcase.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/sectransp.c	[]	[]
/src/curl/src/tool_stderr.c	[]	[]
/src/curl/lib/vtls/rustls.c	[]	[]
/src/curl/src/slist_wc.c	[]	[]
/src/curl/lib/escape.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit2603.c	[]	[]
/src/curl/src/tool_libinfo.c	[]	[]
/src/curl/tests/libtest/testtrace.c	[]	[]
/src/curl/tests/server/sws.c	[]	[]
/src/curl/tests/unit/unit2604.c	[]	[]
/src/curl/lib/idn.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/block_ip.c	[]	[]
/src/curl/src/tool_urlglob.c	[]	[]
/src/curl/lib/hostip4.c	[]	[]
/src/curl/lib/bufq.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/mime.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/warnless.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/xmlstream.c	[]	[]
/src/curl/lib/setup-vms.h	[]	[]
/src/curl/lib/vquic/curl_osslq.c	[]	[]
/src/curl/lib/vtls/schannel_verify.c	[]	[]
/src/curl/tests/libtest/libprereq.c	[]	[]
/src/curl/lib/hostasyn.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/libauthretry.c	[]	[]
/src/curl/docs/examples/evhiperfifo.c	[]	[]
/src/curl/lib/cfilters.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curl_gssapi.c	[]	[]
/src/curl/lib/nonblock.c	[]	[]
/src/curl/lib/vtls/wolfssl.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/docs/examples/sepheaders.c	[]	[]
/src/curl/docs/examples/externalsocket.c	[]	[]
/src/curl/lib/fileinfo.c	[]	[]
/src/curl/lib/cookie.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib643.c	[]	[]
/src/curl/lib/dllmain.c	[]	[]
/src/curl/lib/http_proxy.c	[]	[]
/src/curl/tests/libtest/lib1485.c	[]	[]
/src/curl/docs/examples/ftpgetresp.c	[]	[]
/src/curl/docs/examples/chkspeed.c	[]	[]
/src/curl/tests/http/clients/ws-pingpong.c	[]	[]
/src/curl/lib/curl_ntlm_core.c	[]	[]
/src/curl/lib/md5.c	[]	[]
/src/curl/tests/http/clients/tls-session-reuse.c	[]	[]
/src/curl/lib/vquic/curl_ngtcp2.c	[]	[]
/src/curl/tests/libtest/lib1915.c	[]	[]
/src/curl/src/tool_cb_hdr.c	[]	[]
/src/curl/lib/curl_des.c	[]	[]
/src/curl/src/tool_xattr.c	[]	[]
/src/curl/tests/libtest/lib3207.c	[]	[]
/src/curl/tests/server/getpart.c	[]	[]
/src/curl/docs/examples/anyauthput.c	[]	[]
/src/curl/lib/multi_ev.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/server/util.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/llist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_formparse.c	[]	[]
/src/curl/lib/easyoptions.c	[]	[]
/src/curl/src/tool_writeout_json.c	[]	[]
/src/curl/lib/timeval.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1945.c	[]	[]
/src/curl/lib/strerror.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/unit/unit1308.c	[]	[]
/src/curl/tests/unit/unit1602.c	[]	[]
/src/curl/lib/connect.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']

Directories in report

Directory
/src/curl/lib/vtls/
/src/curl/scripts/
/src/curl/tests/server/
/src/curl_fuzzer/
/src/curl/tests/libtest/
/src/curl/lib/vquic/
/src/curl/packages/OS400/
/src/curl/packages/vms/
/src/curl/CMake/
/src/curl/docs/examples/
/src/curl/lib/
/src/curl/lib/vauth/
/src/curl/tests/unit/
/src/curl/tests/http/clients/
/src/curl/tests/http/testenv/mod_curltest/
/src/curl/lib/vssh/
/src/curl/src/

This section shows a list of 3rd party function calls and their relative coverage information. By static analysis of the target project code, all of the 3rd party function call and their caller information, including the source file and line number that initiate the call are captured. The caller source code file and line number are shown in column 2 while column 1 is the function name of the 3rd party function call. Each occurrent of the 3rd party function call will occuply a separate row. Column 3 of each row indicate if the 3rd party call in the source file line is unreachable. Column 4 lists all fuzzers that have covered that particular system call in that specific location (source file and line)during their dynamic fuzzing.

Function in each files in report

Target sink	Callsite location	Reached by fuzzer	Covered by Fuzzers

This section contains multiple tables, each table contains a list of sink functions/methods found in the project for one of the CWE supported by the sink analyser, together with information like which fuzzers statically reach the sink functions/methods and possible call path to that sink functions/methods if it is not statically reached by any fuzzers. Column 1 is the function/method name of the sink functions/methods found in the project. Column 2 lists all fuzzers (or no fuzzers at all) that have covered that particular function method statically. Column 3 shows a list of possible call paths to reach the specific function/method call if none of the fuzzers cover the target function/method calls. Lastly, column 4 shows possible fuzzer blockers that prevent an existing fuzzer from reaching the target sink functions/methods dynamically.

Sink functions/methods found for CWE787

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
strdup	['fuzz_url', 'curl_fuzzer']	N/A	Blocker function Arguments type Return type Constants touched Curl_gss_display_status_a in /src/curl/packages/OS400/os400sys.c:403 ['OM_uint32*', 'OM_uint32', 'int', 'gss_OID', 'gss_msg_ctx_t*', 'gss_buffer_t'] OM_uint32 [] check_gss_err in /src/curl/lib/socks_gssapi.c:57 ['struct Curl_easy*', 'OM_uint32', 'OM_uint32', 'char*'] int [] smtp_statemachine in /src/curl/lib/smtp.c:1193 ['struct Curl_easy*', 'struct connectdata*'] CURLcode [] Curl_sasl_start in /src/curl/lib/curl_sasl.c:342 ['struct SASL*', 'struct Curl_easy*', 'bool', 'saslprogress*'] CURLcode [] oldap_connecting in /src/curl/lib/openldap.c:713 ['struct Curl_easy*', 'bool*'] CURLcode [] cf_h2_proxy_connect in /src/curl/lib/cf-h2-proxy.c:1091 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] CURLcode [] cf_h1_proxy_connect in /src/curl/lib/cf-h1-proxy.c:642 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] CURLcode [] Curl_http_output_auth in /src/curl/lib/http.c:750 ['struct Curl_easy*', 'struct connectdata*', 'char*', 'Curl_HttpReq', 'char*', 'bool'] CURLcode [] do_tftp in /src/curl/tests/server/tftpd.c:887 ['struct testcase*', 'struct tftphdr*', 'ssize_t'] int [] operate in /src/curl/src/tool_operate.c:3161 ['struct GlobalConfig*', 'int', 'argv_item_t[]'] CURLcode [] tool_header_cb in /src/curl/src/tool_cb_hdr.c:88 ['char*', 'size_t', 'size_t', 'void*'] size_t [] fifo_cb in /src/curl/docs/examples/evhiperfifo.c:376 ['EV_P_*', 'int'] void [] ip_list_append in /src/curl/docs/examples/block_ip.c:108 ['struct ip*', 'char*'] struct ip [] Curl_idnconvert_hostname in /src/curl/lib/idn.c:361 ['struct hostname*'] CURLcode [] test in /src/curl/tests/libtest/lib2309.c:39 ['char*'] CURLcode [] perform_and_check_connections in /src/curl/tests/libtest/lib1533.c:101 ['CURL*', 'char*', 'long'] int [] test_fire in /src/curl/tests/libtest/lib586.c:99 ['void*'] void [] test_cert_blob in /src/curl/tests/libtest/lib678.c:66 ['char*', 'char*'] CURLcode [] run in /src/curl/tests/libtest/lib1523.c:51 ['CURL*', 'long', 'long'] CURLcode [] execute in /src/curl/tests/libtest/lib3207.c:176 ['CURLSH*', 'struct Ctx*'] void [] test_once in /src/curl/tests/libtest/lib554.c:62 ['char*', 'bool'] CURLcode [] onetest in /src/curl/tests/libtest/lib1156.c:86 ['CURL*', 'char*', 'struct testparams*', 'size_t'] int [] send_wrong_password in /src/curl/tests/libtest/libauthretry.c:60 ['CURL*', 'char*', 'int', 'long'] CURLcode [] send_right_password in /src/curl/tests/libtest/libauthretry.c:66 ['CURL*', 'char*', 'int', 'long'] CURLcode [] test_connect in /src/curl/tests/unit/unit2600.c:304 ['struct test_case*'] void [] sftpResumeUpload in /src/curl/docs/examples/sftpuploadresume.c:79 ['CURL*', 'char*', 'char*'] int [] upload in /src/curl/docs/examples/ftpuploadresume.c:70 ['CURL*', 'char*', 'char*', 'long', 'long'] int [] pull_one_url in /src/curl/docs/examples/smooth-gtk-thread.c:90 ['void*'] void [] SyncTime_CURL_Fetch in /src/curl/docs/examples/synctime.c:191 ['CURL*', 'char*', 'char*', 'int'] CURLcode [] curl_multi_socket in /src/curl/lib/multi.c:3066 ['CURLM*', 'curl_socket_t', 'int*'] CURLMcode [] testone in /src/curl/tests/libtest/lib530.c:266 ['char*', 'int', 'int'] CURLcode [] on_uv_socket in /src/curl/docs/examples/multi-uv.c:141 ['uv_poll_t*', 'int', 'int'] void [] on_uv_timeout in /src/curl/docs/examples/multi-uv.c:158 ['uv_timer_t*'] void [] event_cb in /src/curl/docs/examples/evhiperfifo.c:201 ['EV_P_*', 'int'] void [] timer_cb in /src/curl/docs/examples/evhiperfifo.c:222 ['EV_P_*', 'int'] void [] curl_perform in /src/curl/docs/examples/multi-event.c:124 ['int', 'short', 'void*'] void [] on_timeout in /src/curl/docs/examples/multi-event.c:145 ['evutil_socket_t', 'short', 'void*'] void [] curl_multi_socket_all in /src/curl/lib/multi.c:3083 ['CURLM*', 'int*'] CURLMcode [] setget_parts in /src/curl/tests/libtest/lib1560.c:1343 [] int [] get_parts in /src/curl/tests/libtest/lib1560.c:1479 [] int [] curl_url_get in /src/curl/lib/urlapi.c:1311 ['CURLU*', 'CURLUPart', 'char**', 'unsigned int'] CURLUcode [] writeString in /src/curl/src/tool_writeout.c:285 ['FILE*', 'struct writeoutvar*', 'struct per_transfer*', 'CURLcode', 'bool'] int [] cf_osslq_send in /src/curl/lib/vquic/curl_osslq.c:1975 ['struct Curl_cfilter*', 'struct Curl_easy*', 'void*', 'size_t', 'bool', 'CURLcode*'] ssize_t [] cf_ngtcp2_send in /src/curl/lib/vquic/curl_ngtcp2.c:1587 ['struct Curl_cfilter*', 'struct Curl_easy*', 'void*', 'size_t', 'bool', 'CURLcode*'] ssize_t [] cf_quiche_data_event in /src/curl/lib/vquic/curl_quiche.c:1216 ['struct Curl_cfilter*', 'struct Curl_easy*', 'int', 'int', 'void*'] CURLcode [] on_stream_frame in /src/curl/lib/http2.c:1102 ['struct Curl_cfilter*', 'struct Curl_easy*', 'nghttp2_frame*'] CURLcode [] proxy_h2_on_header in /src/curl/lib/cf-h2-proxy.c:740 ['nghttp2_session*', 'nghttp2_frame*', 'uint8_t*', 'size_t', 'uint8_t*', 'size_t', 'uint8_t', 'void*'] int [] GetEnv in /src/curl/lib/getenv.c:32 ['char*'] char [] gtls_connect in /src/curl/lib/vtls/gtls.c:1919 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] CURLcode [] cf_msh3_connect in /src/curl/lib/vquic/curl_msh3.c:880 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] CURLcode [] cf_ngtcp2_connect in /src/curl/lib/vquic/curl_ngtcp2.c:2516 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] CURLcode [] cf_osslq_connect in /src/curl/lib/vquic/curl_osslq.c:1721 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] CURLcode [] cf_quiche_connect in /src/curl/lib/vquic/curl_quiche.c:1380 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] CURLcode [] Curl_ssl_init in /src/curl/lib/vtls/vtls.c:421 [] int [] run_thread in /src/curl/tests/libtest/lib3026.c:115 ['void*'] void [] main_init in /src/curl/src/tool_main.c:152 ['struct GlobalConfig*'] CURLcode [] multissl_init in /src/curl/lib/vtls/vtls.c:883 [] int [] follow_links in /src/curl/docs/examples/crawler.c:122 ['CURLM*', 'memory*', 'char*'] size_t [] Curl_resolv in /src/curl/lib/hostip.c:691 ['struct Curl_easy*', 'char*', 'int', 'bool', 'struct Curl_dns_entry**'] enum resolve_t [] socks_proxy_cf_connect in /src/curl/lib/socks.c:1129 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] CURLcode [] ftp_state_prepare_transfer in /src/curl/lib/ftp.c:1285 ['struct Curl_easy*'] CURLcode [] curl_easy_getinfo_ccsid in /src/curl/packages/OS400/ccsidcurl.c:567 ['CURL*', 'CURLINFO'] CURLcode [] debug_cb in /src/curl/tests/http/clients/tls-session-reuse.c:55 ['CURL*', 'curl_infotype', 'char*', 'size_t', 'void*'] int [] Curl_cpool_do_locked in /src/curl/lib/conncache.c:823 ['struct Curl_easy*', 'struct connectdata*', 'Curl_cpool_conn_do_cb*', 'void*'] void [] check_time in /src/curl/tests/libtest/lib1541.c:56 ['CURL*', 'int', 'char*', 'char*'] void [] check_time0 in /src/curl/tests/libtest/lib1541.c:68 ['CURL*', 'int', 'char*', 'char*'] void [] header_callback in /src/curl/tests/libtest/lib1485.c:38 ['char*', 'size_t', 'size_t', 'void*'] size_t [] xferinfo in /src/curl/docs/examples/progressfunc.c:41 ['void*', 'curl_off_t', 'curl_off_t', 'curl_off_t', 'curl_off_t'] int [] proxystat in /src/curl/tests/libtest/lib536.c:31 ['CURL*'] void [] callback in /src/curl/tests/libtest/libntlmconnect.c:41 ['char*', 'size_t', 'size_t', 'void*'] size_t [] writeTime in /src/curl/src/tool_writeout.c:158 ['FILE*', 'struct writeoutvar*', 'struct per_transfer*', 'CURLcode', 'bool'] int [] writeLong in /src/curl/src/tool_writeout.c:436 ['FILE*', 'struct writeoutvar*', 'struct per_transfer*', 'CURLcode', 'bool'] int [] writeOffset in /src/curl/src/tool_writeout.c:498 ['FILE*', 'struct writeoutvar*', 'struct per_transfer*', 'CURLcode', 'bool'] int [] tool_debug_cb in /src/curl/src/tool_cb_dbg.c:80 ['CURL*', 'curl_infotype', 'char*', 'size_t', 'void*'] int [] print_cookies in /src/curl/docs/examples/cookie_interface.c:37 ['CURL*'] int [] curl_mvaprintf in /src/curl/lib/mprintf.c:1132 ['char*', 'va_list'] char [] Curl_setstropt in /src/curl/lib/setopt.c:62 ['char**', 'char*'] CURLcode [] init_resolve_thread in /src/curl/lib/asyn-thread.c:431 ['struct Curl_easy*', 'char*', 'int', 'struct addrinfo*'] bool [] strippath in /src/curl/lib/mime.c:359 ['char*'] char [] Curl_ntlm_core_mk_nt_hash in /src/curl/lib/curl_ntlm_core.c:430 ['char*', 'unsigned char*'] CURLcode [] curl_easy_escape in /src/curl/lib/escape.c:58 ['CURL*', 'char*', 'int'] char [] smb_connect in /src/curl/lib/smb.c:429 ['struct Curl_easy*', 'bool*'] CURLcode [] smb_parse_url_path in /src/curl/lib/smb.c:1160 ['struct Curl_easy*', 'struct connectdata*'] CURLcode [] gopher_do in /src/curl/lib/gopher.c:135 ['struct Curl_easy*', 'bool*'] CURLcode [] FormAdd in /src/curl/lib/formdata.c:204 ['struct curl_httppost**', 'struct curl_httppost**', 'va_list'] CURLFORMcode [] ldap_do in /src/curl/lib/ldap.c:315 ['struct Curl_easy*', 'bool*'] CURLcode [] ftp_setup_connection in /src/curl/lib/ftp.c:4362 ['struct Curl_easy*', 'struct connectdata*'] CURLcode [] Curl_dnsrec_done_cb in /src/curl/lib/httpsrr.c:183 ['void*', 'ares_status_t', 'size_t', 'ares_dns_record_t*'] void [] wssl_bio_cf_in_read in /src/curl/lib/vtls/wolfssl.c:351 ['WOLFSSL_BIO*', 'char*', 'int'] int [] wssl_connect in /src/curl/lib/vtls/wolfssl.c:2098 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] CURLcode [] cf_osslq_recv in /src/curl/lib/vquic/curl_osslq.c:2090 ['struct Curl_cfilter*', 'struct Curl_easy*', 'char*', 'size_t', 'CURLcode*'] ssize_t [] cf_osslq_data_event in /src/curl/lib/vquic/curl_osslq.c:2183 ['struct Curl_cfilter*', 'struct Curl_easy*', 'int', 'int', 'void*'] CURLcode [] cf_ngtcp2_recv in /src/curl/lib/vquic/curl_ngtcp2.c:1285 ['struct Curl_cfilter*', 'struct Curl_easy*', 'char*', 'size_t', 'CURLcode*'] ssize_t [] cf_ngtcp2_data_event in /src/curl/lib/vquic/curl_ngtcp2.c:1992 ['struct Curl_cfilter*', 'struct Curl_easy*', 'int', 'int', 'void*'] CURLcode [] cf_osslq_conn_is_alive in /src/curl/lib/vquic/curl_osslq.c:2228 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] bool [] cf_ngtcp2_conn_is_alive in /src/curl/lib/vquic/curl_ngtcp2.c:2671 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] bool [] cf_quiche_recv in /src/curl/lib/vquic/curl_quiche.c:842 ['struct Curl_cfilter*', 'struct Curl_easy*', 'char*', 'size_t', 'CURLcode*'] ssize_t [] cf_quiche_conn_is_alive in /src/curl/lib/vquic/curl_quiche.c:1580 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] bool [] gtls_pull in /src/curl/lib/vtls/gtls.c:110 ['void*', 'void*', 'size_t'] ssize_t [] gtls_recv in /src/curl/lib/vtls/gtls.c:2095 ['struct Curl_cfilter*', 'struct Curl_easy*', 'char*', 'size_t', 'CURLcode*'] ssize_t [] sectransp_connect in /src/curl/lib/vtls/sectransp.c:2291 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] CURLcode [] sectransp_shutdown in /src/curl/lib/vtls/sectransp.c:2340 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool', 'bool*'] CURLcode [] schannel_shutdown in /src/curl/lib/vtls/schannel.c:2203 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool', 'bool*'] CURLcode [] wssl_vtls_new_session_cb in /src/curl/lib/vtls/wolfssl.c:479 ['WOLFSSL*', 'WOLFSSL_SESSION*'] int [] wssl_quic_new_session_cb in /src/curl/lib/vquic/curl_ngtcp2.c:2280 ['WOLFSSL*', 'WOLFSSL_SESSION*'] int [] gtls_handshake_cb in /src/curl/lib/vtls/gtls.c:757 ['gnutls_session_t', 'unsigned int', 'unsigned', 'unsigned int', 'gnutls_datum_t*'] int [] quic_gtls_handshake_cb in /src/curl/lib/vquic/curl_ngtcp2.c:2234 ['gnutls_session_t', 'unsigned int', 'unsigned', 'unsigned int', 'gnutls_datum_t*'] int [] bearssl_connect in /src/curl/lib/vtls/bearssl.c:914 ['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*'] CURLcode [] mbed_recv in /src/curl/lib/vtls/mbedtls.c:1354 ['struct Curl_cfilter*', 'struct Curl_easy*', 'char*', 'size_t', 'CURLcode*'] ssize_t [] ossl_new_session_cb in /src/curl/lib/vtls/openssl.c:3000 ['SSL*', 'SSL_SESSION*'] int [] quic_ossl_new_session_cb in /src/curl/lib/vquic/curl_ngtcp2.c:2179 ['SSL*', 'SSL_SESSION*'] int [] Curl_ssl_scache_return in /src/curl/lib/vtls/vtls_scache.c:875 ['struct Curl_cfilter*', 'struct Curl_easy*', 'char*', 'struct Curl_ssl_session*'] void [] cf_ngtcp2_handshake_completed in /src/curl/lib/vquic/curl_ngtcp2.c:459 ['ngtcp2_conn*', 'void*'] int [] ossl_set_cached_x509_store in /src/curl/lib/vtls/openssl.c:3448 ['struct Curl_cfilter*', 'struct Curl_easy*', 'X509_STORE*'] void [] ssl_cf_send in /src/curl/lib/vtls/vtls.c:1450 ['struct Curl_cfilter*', 'struct Curl_easy*', 'void*', 'size_t', 'bool', 'CURLcode*'] ssize_t [] ssl_cf_recv in /src/curl/lib/vtls/vtls.c:1505 ['struct Curl_cfilter*', 'struct Curl_easy*', 'char*', 'size_t', 'CURLcode*'] ssize_t [] kbd_callback in /src/curl/lib/vssh/libssh2.c:172 ['char*', 'int', 'char*', 'int', 'int', 'LIBSSH2_USERAUTH_KBDINT_PROMPT*', 'LIBSSH2_USERAUTH_KBDINT_RESPONSE*', 'void**'] void [] scp_doing in /src/curl/lib/vssh/libssh2.c:3336 ['struct Curl_easy*', 'bool*'] CURLcode [] myssh_do_it in /src/curl/lib/vssh/libssh.c:2303 ['struct Curl_easy*', 'bool*'] CURLcode [] ssh_do in /src/curl/lib/vssh/libssh2.c:3353 ['struct Curl_easy*', 'bool*'] CURLcode [] sftp_doing in /src/curl/lib/vssh/libssh2.c:3524 ['struct Curl_easy*', 'bool*'] CURLcode [] myssh_connect in /src/curl/lib/vssh/libssh.c:2140 ['struct Curl_easy*', 'bool*'] CURLcode [] myssh_done in /src/curl/lib/vssh/libssh.c:2355 ['struct Curl_easy*', 'CURLcode'] CURLcode [] scp_disconnect in /src/curl/lib/vssh/libssh2.c:3384 ['struct Curl_easy*', 'struct connectdata*', 'bool'] CURLcode [] sftp_disconnect in /src/curl/lib/vssh/libssh2.c:3538 ['struct Curl_easy*', 'struct connectdata*', 'bool'] CURLcode [] scp_done in /src/curl/lib/vssh/libssh2.c:3426 ['struct Curl_easy*', 'CURLcode', 'bool'] CURLcode [] sftp_done in /src/curl/lib/vssh/libssh2.c:3559 ['struct Curl_easy*', 'CURLcode', 'bool'] CURLcode []