High level conclusions

Fuzzers reach 78.15% code coverage.

Fuzzers reach 51.41% of cyclomatic complexity.

Fuzzers reach 39.57% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

471 / 1190

Cyclomatic complexity statically reachable by fuzzers

3128 / 6084

Runtime code coverage of functions

930 / 1190

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzzer-pubkey

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	106	36.0%
gold	[1:9]	21	7.14%
yellow	[10:29]	4	1.36%
greenyellow	[30:49]	4	1.36%
lawngreen	50+	159	54.0%
All colors	294	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
62	62	1 : View List ['sign_key_fingerprint']	66	102	cmp_base64_key	call site: 00193	/src/dropbear/src/signkey.c:754
2	2	1 : View List ['exit']	2	2	generic_dropbear_exit	call site: 00000	/src/dropbear/src/dbutil.c:124
0	2	1 : View List ['dropbear_exit']	0	2	buf_new	call site: 00125	/src/dropbear/src/buffer.c:43
0	2	1 : View List ['dropbear_exit']	0	2	buf_setlen	call site: 00182	/src/dropbear/src/buffer.c:96
0	2	1 : View List ['dropbear_exit']	0	2	buf_incrlen	call site: 00136	/src/dropbear/src/buffer.c:105
0	2	1 : View List ['dropbear_exit']	0	2	buf_setpos	call site: 00138	/src/dropbear/src/buffer.c:113
0	2	1 : View List ['dropbear_exit']	0	2	buf_incrwritepos	call site: 00131	/src/dropbear/src/buffer.c:121
0	2	1 : View List ['dropbear_exit']	0	2	buf_incrpos	call site: 00063	/src/dropbear/src/buffer.c:132
0	2	1 : View List ['dropbear_exit']	0	2	buf_decrpos	call site: 00161	/src/dropbear/src/buffer.c:141
0	2	1 : View List ['dropbear_exit']	0	2	buf_getbyte	call site: 00159	/src/dropbear/src/buffer.c:152
0	2	1 : View List ['dropbear_exit']	0	2	buf_getwriteptr	call site: 00129	/src/dropbear/src/buffer.c:192
0	2	1 : View List ['dropbear_exit']	0	2	crypto_init	call site: 00022	/src/dropbear/src/crypto_desc.c:64

Runtime coverage analysis

Covered functions

62

Functions that are reachable but not covered

50

Reachable functions

109

Percentage of reachable functions covered

54.13%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-pubkey.c	2
src/../fuzz/fuzz-common.c	2
src/dbutil.c	4
src/dbmalloc.c	8
src/crypto_desc.c	2
libtomcrypt/src/misc/crypt/crypt_register_cipher.c	1
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
libtomcrypt/src/misc/crypt/crypt_register_hash.c	1
libtomcrypt/src/misc/crypt/crypt_register_prng.c	1
libtommath/bn_mp_rand.c	1
src/dbrandom.c	6
libtomcrypt/src/hashes/sha2/sha256.c	4
src/../fuzz/fuzz-wrapfd.c	5
src/buffer.c	17
src/dbhelpers.c	1
src/ecc.c	1
src/signkey.c	5
src/svr-authpubkey.c	2
libtomcrypt/src/misc/base64/base64_decode.c	2
libtomcrypt/src/misc/base64/base64_encode.c	2
src/svr-authpubkeyoptions.c	3
src/list.c	3
src/common-runopts.c	1

Fuzzer: fuzzer-kexsntrup-cli

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	177	54.9%
gold	[1:9]	32	9.93%
yellow	[10:29]	5	1.55%
greenyellow	[30:49]	6	1.86%
lawngreen	50+	102	31.6%
All colors	322	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
816	849	3 : View List ['read_config_file', 'fclose', 'parse_hostname']	816	858	apply_config_settings	call site: 00000	/src/dropbear/src/cli-runopts.c:1086
587	587	3 : View List ['buf_get_ecdsa_priv_key', 'ecc_free', 'signkey_key_ptr']	587	649	buf_get_priv_key	call site: 00000	/src/dropbear/src/signkey.c:385
166	212	2 : View List ['buf_get_dss_priv_key', 'dss_key_free']	902	1083	buf_get_priv_key	call site: 00000	/src/dropbear/src/signkey.c:363
152	152	1 : View List ['buf_put_dss_pub_key']	253	421	buf_put_pub_key	call site: 00203	/src/dropbear/src/signkey.c:427
149	195	2 : View List ['rsa_key_free', 'buf_get_rsa_priv_key']	736	859	buf_get_priv_key	call site: 00000	/src/dropbear/src/signkey.c:374
105	114	5 : View List ['dropbear_log', 'm_free_direct', 'algolist_string', 'check_user_algos', 'strcmp']	105	118	parse_ciphers_macs	call site: 00000	/src/dropbear/src/common-runopts.c:81
39	39	1 : View List ['split_address_port']	88	934	cli_getopts	call site: 00000	/src/dropbear/src/cli-runopts.c:463
36	698	4 : View List ['addrandom', 'buf_setpos', 'buf_getptr', 'buf_get_priv_key']	36	713	readhostkey	call site: 00000	/src/dropbear/src/common-runopts.c:46
36	47	4 : View List ['__errno_location', 'buf_incrwritepos', 'buf_getwriteptr', 'wrapfd_read']	59	70	buf_readfile	call site: 00000	/src/dropbear/src/dbutil.c:498
32	32	1 : View List ['multihop_args']	32	50	parse_multihop_hostname	call site: 00000	/src/dropbear/src/cli-runopts.c:699
21	21	1 : View List ['parse_recv_window']	49	891	cli_getopts	call site: 00000	/src/dropbear/src/cli-runopts.c:486
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	dss_key_free	call site: 00000	/src/dropbear/src/dss.c:125

Runtime coverage analysis

Covered functions

147

Functions that are reachable but not covered

66

Reachable functions

119

Percentage of reachable functions covered

44.54%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-kexsntrup-cli.c	1
src/../fuzz/fuzz-common.c	1
src/../fuzz/fuzz-wrapfd.c	5
src/dbrandom.c	6
libtomcrypt/src/hashes/sha2/sha256.c	4
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
src/dbmalloc.c	11
src/kex-pqhybrid.c	3
src/dbutil.c	4
src/kex-x25519.c	3
src/buffer.c	21
src/dbhelpers.c	1
src/curve25519.c	10
src/signkey.c	2
src/dss.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_to_ubin.c	1
libtommath/bn_mp_ubin_size.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_clamp.c	1
libtommath/bn_mp_rshd.c	1
src/rsa.c	1
src/ecdsa.c	2
src/ecc.c	2
libtomcrypt/src/pk/ecc/ecc_ansi_x963_export.c	1
libtomcrypt/src/pk/ecc/ltc_ecc_is_valid_idx.c	1
libtomcrypt/src/misc/zeromem.c	1
src/ed25519.c	1
src/common-kex.c	1

Fuzzer: fuzzer-cliconf

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	570	76.0%
gold	[1:9]	52	6.93%
yellow	[10:29]	2	0.26%
greenyellow	[30:49]	1	0.13%
lawngreen	50+	125	16.6%
All colors	750	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
689	698	4 : View List ['addrandom', 'buf_setpos', 'buf_getptr', 'buf_get_priv_key']	689	713	readhostkey	call site: 00173	/src/dropbear/src/common-runopts.c:46
103	114	5 : View List ['dropbear_log', 'm_free_direct', 'algolist_string', 'check_user_algos', 'strcmp']	103	118	parse_ciphers_macs	call site: 00588	/src/dropbear/src/common-runopts.c:81
39	39	1 : View List ['split_address_port']	86	934	cli_getopts	call site: 00662	/src/dropbear/src/cli-runopts.c:463
32	32	1 : View List ['multihop_args']	32	50	parse_multihop_hostname	call site: 00694	/src/dropbear/src/cli-runopts.c:699
21	21	1 : View List ['parse_recv_window']	47	891	cli_getopts	call site: 00674	/src/dropbear/src/cli-runopts.c:486
20	32	3 : View List ['strlcat', 'm_malloc', 'strlen']	106	982	cli_getopts	call site: 00656	/src/dropbear/src/cli-runopts.c:435
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	dss_key_free	call site: 00213	/src/dropbear/src/dss.c:125
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	rsa_key_free	call site: 00276	/src/dropbear/src/rsa.c:146
15	15	1 : View List ['list_append']	15	15	loadidentityfile	call site: 00169	/src/dropbear/src/cli-runopts.c:540
13	15	2 : View List ['dropbear_exit', 'm_str_to_uint']	13	855	cli_getopts	call site: 00679	/src/dropbear/src/cli-runopts.c:497
12	12	1 : View List ['ecc_free']	12	64	sign_key_free	call site: 00508	/src/dropbear/src/signkey.c:534
10	47	4 : View List ['__errno_location', 'buf_incrwritepos', 'buf_getwriteptr', 'wrapfd_read']	10	70	buf_readfile	call site: 00178	/src/dropbear/src/dbutil.c:506

Runtime coverage analysis

Covered functions

70

Functions that are reachable but not covered

140

Reachable functions

207

Percentage of reachable functions covered

32.37%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-cliconf.c	2
src/../fuzz/fuzz-common.c	3
src/dbutil.c	11
src/dbmalloc.c	12
src/crypto_desc.c	2
libtomcrypt/src/misc/crypt/crypt_register_cipher.c	1
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
libtomcrypt/src/misc/crypt/crypt_register_hash.c	1
libtomcrypt/src/misc/crypt/crypt_register_prng.c	1
libtommath/bn_mp_rand.c	1
src/dbrandom.c	7
libtomcrypt/src/hashes/sha2/sha256.c	4
src/../fuzz/fuzz-wrapfd.c	5
src/buffer.c	21
src/dbhelpers.c	1
src/ecc.c	4
src/cli-runopts.c	13
src/list.c	2
src/common-runopts.c	5
src/signkey.c	5
src/dss.c	3
src/bignum.c	2
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_init.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_from_ubin.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_mul_2d.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_lshd.c	1
libtommath/bn_mp_clamp.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_cmp_d.c	1
libtommath/bn_mp_cmp.c	1
libtommath/bn_mp_cmp_mag.c	1
src/rsa.c	3
src/ecdsa.c	3
libtomcrypt/src/pk/ecc/ecc_free.c	1
libtomcrypt/src/math/multi.c	1
libtommath/bn_mp_set.c	1
libtommath/bn_mp_read_radix.c	1
libtommath/bn_mp_mul_d.c	1
libtommath/bn_mp_add_d.c	1
libtommath/bn_mp_sub_d.c	1
libtommath/bn_mp_sqr.c	1
libtommath/bn_s_mp_sqr_fast.c	1
libtommath/bn_s_mp_sqr.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_exch.c	1
libtommath/bn_mp_mod.c	1
libtommath/bn_mp_div.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_sub.c	1
libtommath/bn_s_mp_add.c	1
libtommath/bn_s_mp_sub.c	1
libtommath/bn_mp_rshd.c	1
libtommath/bn_mp_add.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_mul.c	1
libtommath/bn_s_mp_balance_mul.c	1
libtommath/bn_mp_init_multi.c	1
libtommath/bn_s_mp_mul_digs_fast.c	1
libtommath/bn_s_mp_mul_digs.c	1
libtommath/bn_mp_clear_multi.c	1
src/ed25519.c	2
src/common-algo.c	5
src/cli-readconf.c	1
src/compat.c	1

Fuzzer: fuzzer-kexsntrup-srv

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	145	44.8%
gold	[1:9]	55	17.0%
yellow	[10:29]	3	0.92%
greenyellow	[30:49]	14	4.33%
lawngreen	50+	106	32.8%
All colors	323	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
152	152	1 : View List ['buf_put_dss_pub_key']	356	421	buf_put_pub_key	call site: 00203	/src/dropbear/src/signkey.c:427
152	152	1 : View List ['buf_put_rsa_pub_key']	204	269	buf_put_pub_key	call site: 00204	/src/dropbear/src/signkey.c:432
99	99	1 : View List ['load_banner']	176	194	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:394
53	71	3 : View List ['exit', 'm_free_direct', 'sign_key_free']	53	71	svr_dropbear_exit	call site: 00000	/src/dropbear/src/svr-session.c:294
52	65	2 : View List ['buf_put_ecdsa_pub_key', 'signkey_key_ptr']	52	114	buf_put_pub_key	call site: 00261	/src/dropbear/src/signkey.c:437
21	21	1 : View List ['parse_recv_window']	75	91	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:410
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	dss_key_free	call site: 00000	/src/dropbear/src/dss.c:125
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	rsa_key_free	call site: 00000	/src/dropbear/src/rsa.c:146
20	20	1 : View List ['m_mp_free_multi']	20	20	buf_get_dss_priv_key	call site: 00000	/src/dropbear/src/dss.c:113
20	20	1 : View List ['m_mp_free_multi']	20	20	buf_get_rsa_priv_key	call site: 00000	/src/dropbear/src/rsa.c:133
13	13	1 : View List ['m_str_to_uint']	15	21	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:448
12	21	2 : View List ['ecc_free', 'm_free_direct']	12	21	buf_get_ecc_raw_pubkey	call site: 00000	/src/dropbear/src/ecc.c:201

Runtime coverage analysis

Covered functions

192

Functions that are reachable but not covered

44

Reachable functions

119

Percentage of reachable functions covered

63.03%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-kexsntrup-srv.c	1
src/../fuzz/fuzz-common.c	1
src/../fuzz/fuzz-wrapfd.c	5
src/dbrandom.c	6
libtomcrypt/src/hashes/sha2/sha256.c	4
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
src/dbmalloc.c	11
src/kex-pqhybrid.c	3
src/dbutil.c	4
src/kex-x25519.c	3
src/buffer.c	21
src/dbhelpers.c	1
src/curve25519.c	10
src/signkey.c	2
src/dss.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_to_ubin.c	1
libtommath/bn_mp_ubin_size.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_clamp.c	1
libtommath/bn_mp_rshd.c	1
src/rsa.c	1
src/ecdsa.c	2
src/ecc.c	2
libtomcrypt/src/pk/ecc/ecc_ansi_x963_export.c	1
libtomcrypt/src/pk/ecc/ltc_ecc_is_valid_idx.c	1
libtomcrypt/src/misc/zeromem.c	1
src/ed25519.c	1
src/common-kex.c	1

Fuzzer: fuzzer-kexmlkem-cli

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	177	54.9%
gold	[1:9]	11	3.41%
yellow	[10:29]	26	8.07%
greenyellow	[30:49]	5	1.55%
lawngreen	50+	103	31.9%
All colors	322	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
816	849	3 : View List ['read_config_file', 'fclose', 'parse_hostname']	816	858	apply_config_settings	call site: 00000	/src/dropbear/src/cli-runopts.c:1086
587	587	3 : View List ['buf_get_ecdsa_priv_key', 'ecc_free', 'signkey_key_ptr']	587	649	buf_get_priv_key	call site: 00000	/src/dropbear/src/signkey.c:385
386	394	4 : View List ['libcrux_sha3_generic_keccak_squeeze_last_cf', 'libcrux_sha3_generic_keccak_squeeze_next_block_fc', 'libcrux_sha3_generic_keccak_squeeze_first_block_84', 'libcrux_sha3_portable_keccak_split_at_mut_n_5a']	386	394	libcrux_sha3_generic_keccak_keccak_e9	call site: 00000	/src/dropbear/src/libcrux_mlkem768_sha3.h:2474
386	394	4 : View List ['libcrux_sha3_generic_keccak_squeeze_first_block_840', 'libcrux_sha3_portable_keccak_split_at_mut_n_5a', 'libcrux_sha3_generic_keccak_squeeze_last_cf0', 'libcrux_sha3_generic_keccak_squeeze_next_block_fc0']	386	394	libcrux_sha3_generic_keccak_keccak_e91	call site: 00000	/src/dropbear/src/libcrux_mlkem768_sha3.h:2961
386	394	4 : View List ['libcrux_sha3_generic_keccak_squeeze_first_block_840', 'libcrux_sha3_portable_keccak_split_at_mut_n_5a', 'libcrux_sha3_generic_keccak_squeeze_last_cf0', 'libcrux_sha3_generic_keccak_squeeze_next_block_fc0']	386	394	libcrux_sha3_generic_keccak_keccak_e90	call site: 00000	/src/dropbear/src/libcrux_mlkem768_sha3.h:2833
166	212	2 : View List ['buf_get_dss_priv_key', 'dss_key_free']	902	1083	buf_get_priv_key	call site: 00000	/src/dropbear/src/signkey.c:363
152	152	1 : View List ['buf_put_dss_pub_key']	253	421	buf_put_pub_key	call site: 00203	/src/dropbear/src/signkey.c:427
149	195	2 : View List ['rsa_key_free', 'buf_get_rsa_priv_key']	736	859	buf_get_priv_key	call site: 00000	/src/dropbear/src/signkey.c:374
105	114	5 : View List ['dropbear_log', 'm_free_direct', 'algolist_string', 'check_user_algos', 'strcmp']	105	118	parse_ciphers_macs	call site: 00000	/src/dropbear/src/common-runopts.c:81
39	39	1 : View List ['split_address_port']	88	934	cli_getopts	call site: 00000	/src/dropbear/src/cli-runopts.c:463
36	698	4 : View List ['addrandom', 'buf_setpos', 'buf_getptr', 'buf_get_priv_key']	36	713	readhostkey	call site: 00000	/src/dropbear/src/common-runopts.c:46
36	47	4 : View List ['__errno_location', 'buf_incrwritepos', 'buf_getwriteptr', 'wrapfd_read']	59	70	buf_readfile	call site: 00000	/src/dropbear/src/dbutil.c:498

Runtime coverage analysis

Covered functions

418

Functions that are reachable but not covered

66

Reachable functions

119

Percentage of reachable functions covered

44.54%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-kexmlkem-cli.c	1
src/../fuzz/fuzz-common.c	1
src/../fuzz/fuzz-wrapfd.c	5
src/dbrandom.c	6
libtomcrypt/src/hashes/sha2/sha256.c	4
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
src/dbmalloc.c	11
src/kex-pqhybrid.c	3
src/dbutil.c	4
src/kex-x25519.c	3
src/buffer.c	21
src/dbhelpers.c	1
src/curve25519.c	10
src/signkey.c	2
src/dss.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_to_ubin.c	1
libtommath/bn_mp_ubin_size.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_clamp.c	1
libtommath/bn_mp_rshd.c	1
src/rsa.c	1
src/ecdsa.c	2
src/ecc.c	2
libtomcrypt/src/pk/ecc/ecc_ansi_x963_export.c	1
libtomcrypt/src/pk/ecc/ltc_ecc_is_valid_idx.c	1
libtomcrypt/src/misc/zeromem.c	1
src/ed25519.c	1
src/common-kex.c	1

Fuzzer: fuzzer-kexecdh

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	102	28.8%
gold	[1:9]	3	0.84%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	2	0.56%
lawngreen	50+	246	69.6%
All colors	353	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
152	152	1 : View List ['buf_put_dss_pub_key']	323	421	buf_put_pub_key	call site: 00262	/src/dropbear/src/signkey.c:427
152	152	1 : View List ['buf_put_rsa_pub_key']	171	269	buf_put_pub_key	call site: 00263	/src/dropbear/src/signkey.c:432
99	99	1 : View List ['load_banner']	176	194	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:394
53	71	3 : View List ['exit', 'm_free_direct', 'sign_key_free']	53	71	svr_dropbear_exit	call site: 00000	/src/dropbear/src/svr-session.c:294
21	21	1 : View List ['parse_recv_window']	75	91	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:410
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	dss_key_free	call site: 00000	/src/dropbear/src/dss.c:125
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	rsa_key_free	call site: 00000	/src/dropbear/src/rsa.c:146
20	20	1 : View List ['m_mp_free_multi']	20	20	buf_get_dss_priv_key	call site: 00000	/src/dropbear/src/dss.c:113
20	20	1 : View List ['m_mp_free_multi']	20	20	buf_get_rsa_priv_key	call site: 00000	/src/dropbear/src/rsa.c:133
19	19	1 : View List ['buf_put_ed25519_pub_key']	19	49	buf_put_pub_key	call site: 00297	/src/dropbear/src/signkey.c:449
13	13	1 : View List ['m_str_to_uint']	15	21	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:448
4	16	2 : View List ['strlen', 'm_malloc']	4	16	expand_homedir_path_home	call site: 00000	/src/dropbear/src/dbutil.c:648

Runtime coverage analysis

Covered functions

190

Functions that are reachable but not covered

22

Reachable functions

124

Percentage of reachable functions covered

82.26%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-kexecdh.c	1
src/../fuzz/fuzz-common.c	1
src/../fuzz/fuzz-wrapfd.c	3
src/dbrandom.c	1
libtomcrypt/src/hashes/sha2/sha256.c	4
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
src/dbmalloc.c	11
src/buffer.c	21
src/dbutil.c	3
src/kex-ecdh.c	1
src/ecc.c	6
src/bignum.c	2
libtommath/bn_mp_init.c	1
libtommath/bn_mp_from_ubin.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_mul_2d.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_lshd.c	1
libtommath/bn_mp_clamp.c	1
libtommath/bn_mp_set.c	1
libtommath/bn_mp_read_radix.c	1
libtommath/bn_mp_mul_d.c	1
libtommath/bn_mp_add_d.c	1
libtommath/bn_mp_sub_d.c	1
libtommath/bn_mp_sqr.c	1
libtommath/bn_s_mp_sqr_fast.c	1
libtommath/bn_s_mp_sqr.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_exch.c	1
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_mod.c	1
libtommath/bn_mp_div.c	1
libtommath/bn_mp_cmp_mag.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_cmp.c	1
libtommath/bn_mp_sub.c	1
libtommath/bn_s_mp_add.c	1
libtommath/bn_s_mp_sub.c	1
libtommath/bn_mp_rshd.c	1
libtommath/bn_mp_add.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_mul.c	1
libtommath/bn_s_mp_balance_mul.c	1
libtommath/bn_mp_init_multi.c	1
libtommath/bn_s_mp_mul_digs_fast.c	1
libtommath/bn_s_mp_mul_digs.c	1
libtommath/bn_mp_clear_multi.c	1
libtommath/bn_mp_cmp_d.c	1
libtomcrypt/src/pk/ecc/ecc_free.c	1
libtomcrypt/src/math/multi.c	2
libtomcrypt/src/pk/ecc/ltc_ecc_points.c	2
src/signkey.c	2
src/dss.c	1
libtommath/bn_mp_to_ubin.c	1
libtommath/bn_mp_ubin_size.c	1
src/rsa.c	1
src/ecdsa.c	2
libtomcrypt/src/pk/ecc/ecc_ansi_x963_export.c	1
libtomcrypt/src/pk/ecc/ltc_ecc_is_valid_idx.c	1
libtomcrypt/src/misc/zeromem.c	1
src/dbhelpers.c	1
src/ed25519.c	1
src/common-kex.c	1

Fuzzer: fuzzer-preauth

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	477	45.2%
gold	[1:9]	160	15.1%
yellow	[10:29]	9	0.85%
greenyellow	[30:49]	1	0.09%
lawngreen	50+	408	38.6%
All colors	1055	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1764	1764	1 : View List ['svr_ensure_hostkey']	1870	7209	send_msg_kexdh_reply	call site: 00000	/src/dropbear/src/svr-kex.c:199
550	552	2 : View List ['dropbear_exit', 'send_msg_keepalive']	550	564	checktimeouts	call site: 00830	/src/dropbear/src/common-session.c:569
324	324	1 : View List ['checkpubkey']	2717	3968	svr_auth_pubkey	call site: 00000	/src/dropbear/src/svr-authpubkey.c:163
270	272	2 : View List ['dropbear_log', 'send_msg_userauth_success']	270	299	recv_msg_userauth_request	call site: 00000	/src/dropbear/src/svr-auth.c:126
270	270	1 : View List ['send_msg_userauth_success']	270	554	svr_auth_password	call site: 00000	/src/dropbear/src/svr-authpasswd.c:108
265	276	2 : View List ['buf_free', 'send_msg_userauth_banner']	543	3356	recv_msg_userauth_request	call site: 00000	/src/dropbear/src/svr-auth.c:91
263	263	1 : View List ['send_msg_userauth_pk_ok']	314	356	svr_auth_pubkey	call site: 00000	/src/dropbear/src/svr-authpubkey.c:173
99	99	1 : View List ['load_banner']	176	194	svr_getopts	call site: 00159	/src/dropbear/src/svr-runopts.c:394
68	72	6 : View List ['getaddrstring', 'strerror', 'getpeername', '__errno_location', 'getsockname', 'dropbear_exit']	68	72	get_socket_address	call site: 00578	/src/dropbear/src/netio.c:688
53	71	3 : View List ['exit', 'm_free_direct', 'sign_key_free']	53	71	svr_dropbear_exit	call site: 00000	/src/dropbear/src/svr-session.c:294
51	51	1 : View List ['sign_key_free']	51	73	svr_auth_pubkey	call site: 00000	/src/dropbear/src/svr-authpubkey.c:256
45	1168	5 : View List ['mp_init_multi', 'mp_invmod', 'mp_exptmod', 'mp_clear_multi', 'mp_abs']	45	1168	mp_exptmod	call site: 00000	/src/dropbear/libtommath/bn_mp_exptmod.c:21

Runtime coverage analysis

Covered functions

370

Functions that are reachable but not covered

114

Reachable functions

303

Percentage of reachable functions covered

62.38%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-preauth.c	1
src/../fuzz/fuzz-common.c	10
src/dbutil.c	15
src/dbmalloc.c	12
src/crypto_desc.c	2
libtomcrypt/src/misc/crypt/crypt_register_cipher.c	1
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
libtomcrypt/src/misc/crypt/crypt_register_hash.c	1
libtomcrypt/src/misc/crypt/crypt_register_prng.c	1
libtommath/bn_mp_rand.c	1
src/dbrandom.c	6
libtomcrypt/src/hashes/sha2/sha256.c	4
src/../fuzz/fuzz-wrapfd.c	7
src/buffer.c	22
src/dbhelpers.c	1
src/ecc.c	4
src/svr-runopts.c	5
src/common-runopts.c	3
src/signkey.c	5
src/dss.c	3
src/bignum.c	2
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_init.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_from_ubin.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_mul_2d.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_lshd.c	1
libtommath/bn_mp_clamp.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_cmp_d.c	1
libtommath/bn_mp_cmp.c	1
libtommath/bn_mp_cmp_mag.c	1
src/rsa.c	3
src/ecdsa.c	3
libtomcrypt/src/pk/ecc/ecc_free.c	1
libtomcrypt/src/math/multi.c	1
libtommath/bn_mp_set.c	1
libtommath/bn_mp_read_radix.c	1
libtommath/bn_mp_mul_d.c	1
libtommath/bn_mp_add_d.c	1
libtommath/bn_mp_sub_d.c	1
libtommath/bn_mp_sqr.c	1
libtommath/bn_s_mp_sqr_fast.c	1
libtommath/bn_s_mp_sqr.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_exch.c	1
libtommath/bn_mp_mod.c	1
libtommath/bn_mp_div.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_sub.c	1
libtommath/bn_s_mp_add.c	1
libtommath/bn_s_mp_sub.c	1
libtommath/bn_mp_rshd.c	1
libtommath/bn_mp_add.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_mul.c	1
libtommath/bn_s_mp_balance_mul.c	1
libtommath/bn_mp_init_multi.c	1
libtommath/bn_s_mp_mul_digs_fast.c	1
libtommath/bn_s_mp_mul_digs.c	1
libtommath/bn_mp_clear_multi.c	1
src/ed25519.c	2
src/svr-session.c	2
src/common-session.c	12
src/netio.c	11
src/queue.c	5
src/svr-auth.c	1
src/common-channel.c	15
src/listener.c	3
src/svr-chansession.c	2
src/packet.c	11
src/common-kex.c	4
src/common-algo.c	3
libtomcrypt/src/mac/hmac/hmac_init.c	1
libtomcrypt/src/misc/crypt/crypt_hash_is_valid.c	1
libtomcrypt/src/hashes/helper/hash_memory.c	1
libtomcrypt/src/misc/zeromem.c	1
libtomcrypt/src/mac/hmac/hmac_process.c	1
libtomcrypt/src/mac/hmac/hmac_done.c	1
src/circbuffer.c	5
src/list.c	1
src/atomicio.c	1
src/process-packet.c	2

Fuzzer: fuzzer-client_nomaths

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1547	76.8%
gold	[1:9]	121	6.00%
yellow	[10:29]	4	0.19%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	342	16.9%
All colors	2014	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
4820	4941	19 : View List ['mp_clear', 'kexdh_comb_key', 'cli_kex_free_param', 'buf_getptr', 'buf_getmpint', 'm_mp_init', 'kexecdh_comb_key', 'checkhostkey', 'dropbear_exit', 'buf_get_pub_key', 'kexpqhybrid_comb_key', 'new_sign_key', 'send_msg_newkeys', 'buf_getint', 'sign_key_free', 'kexcurve25519_comb_key', 'buf_getstringbuf', 'buf_verify', 'buf_free']	4820	4941	recv_msg_kexdh_reply	call site: 00000	/src/dropbear/src/cli-kex.c:126
1576	1858	11 : View List ['gen_kexdh_param', 'cli_kex_free_param', 'buf_putstring', 'gen_kexecdh_param', 'gen_kexpqhybrid_param', 'encrypt_packet', 'buf_putbyte', 'buf_putmpint', 'buf_put_ecc_raw_pubkey_string', 'buf_putbufstring', 'gen_kexcurve25519_param']	1576	1858	send_msg_kexdh_init	call site: 01195	/src/dropbear/src/cli-kex.c:78
1309	1309	1 : View List ['recv_msg_userauth_pk_ok']	1309	1309	recv_msg_userauth_specific_60	call site: 00000	/src/dropbear/src/cli-auth.c:130
816	849	3 : View List ['read_config_file', 'fclose', 'parse_hostname']	816	858	apply_config_settings	call site: 00602	/src/dropbear/src/cli-runopts.c:1086
587	587	3 : View List ['buf_get_ecdsa_priv_key', 'ecc_free', 'signkey_key_ptr']	587	649	buf_get_priv_key	call site: 00300	/src/dropbear/src/signkey.c:385
550	552	2 : View List ['dropbear_exit', 'send_msg_keepalive']	560	564	checktimeouts	call site: 00974	/src/dropbear/src/common-session.c:569
311	311	1 : View List ['recv_msg_userauth_info_request']	311	311	recv_msg_userauth_specific_60	call site: 00000	/src/dropbear/src/cli-auth.c:137
166	212	2 : View List ['buf_get_dss_priv_key', 'dss_key_free']	902	1083	buf_get_priv_key	call site: 00212	/src/dropbear/src/signkey.c:363
149	195	2 : View List ['rsa_key_free', 'buf_get_rsa_priv_key']	736	859	buf_get_priv_key	call site: 00276	/src/dropbear/src/signkey.c:374
103	114	5 : View List ['dropbear_log', 'm_free_direct', 'algolist_string', 'check_user_algos', 'strcmp']	103	118	parse_ciphers_macs	call site: 00589	/src/dropbear/src/common-runopts.c:81
61	61	1 : View List ['cli_pubkeyfail']	67	108	recv_msg_userauth_failure	call site: 00000	/src/dropbear/src/cli-auth.c:198
39	39	1 : View List ['split_address_port']	86	934	cli_getopts	call site: 00663	/src/dropbear/src/cli-runopts.c:463

Runtime coverage analysis

Covered functions

201

Functions that are reachable but not covered

314

Reachable functions

469

Percentage of reachable functions covered

33.05%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-client_nomaths.c	1
src/../fuzz/fuzz-common.c	8
src/dbutil.c	18
src/dbmalloc.c	12
src/crypto_desc.c	2
libtomcrypt/src/misc/crypt/crypt_register_cipher.c	1
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
libtomcrypt/src/misc/crypt/crypt_register_hash.c	1
libtomcrypt/src/misc/crypt/crypt_register_prng.c	1
libtommath/bn_mp_rand.c	1
src/dbrandom.c	8
libtomcrypt/src/hashes/sha2/sha256.c	4
src/../fuzz/fuzz-wrapfd.c	7
src/buffer.c	26
src/dbhelpers.c	1
src/ecc.c	6
src/cli-runopts.c	13
src/list.c	3
src/common-runopts.c	5
src/signkey.c	12
src/dss.c	5
src/bignum.c	4
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_init.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_from_ubin.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_mul_2d.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_lshd.c	1
libtommath/bn_mp_clamp.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_cmp_d.c	1
libtommath/bn_mp_cmp.c	1
libtommath/bn_mp_cmp_mag.c	1
src/rsa.c	6
src/ecdsa.c	5
libtomcrypt/src/pk/ecc/ecc_free.c	1
libtomcrypt/src/math/multi.c	2
libtommath/bn_mp_set.c	1
libtommath/bn_mp_read_radix.c	1
libtommath/bn_mp_mul_d.c	1
libtommath/bn_mp_add_d.c	1
libtommath/bn_mp_sub_d.c	1
libtommath/bn_mp_sqr.c	1
libtommath/bn_s_mp_sqr_fast.c	1
libtommath/bn_s_mp_sqr.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_exch.c	1
libtommath/bn_mp_mod.c	1
libtommath/bn_mp_div.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_sub.c	1
libtommath/bn_s_mp_add.c	1
libtommath/bn_s_mp_sub.c	1
libtommath/bn_mp_rshd.c	1
libtommath/bn_mp_add.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_mul.c	1
libtommath/bn_s_mp_balance_mul.c	1
libtommath/bn_mp_init_multi.c	1
libtommath/bn_s_mp_mul_digs_fast.c	1
libtommath/bn_s_mp_mul_digs.c	1
libtommath/bn_mp_clear_multi.c	1
src/ed25519.c	5
src/common-algo.c	8
src/cli-readconf.c	1
src/compat.c	2
src/cli-session.c	6
src/common-session.c	13
src/netio.c	13
src/queue.c	5
src/common-channel.c	18
src/listener.c	6
src/packet.c	11
src/common-kex.c	4
libtomcrypt/src/mac/hmac/hmac_init.c	1
libtomcrypt/src/misc/crypt/crypt_hash_is_valid.c	1
libtomcrypt/src/hashes/helper/hash_memory.c	1
libtomcrypt/src/misc/zeromem.c	1
libtomcrypt/src/mac/hmac/hmac_process.c	1
libtomcrypt/src/mac/hmac/hmac_done.c	1
src/circbuffer.c	6
src/atomicio.c	1
src/process-packet.c	2
src/cli-kex.c	2
src/kex-dh.c	3
src/kex-ecdh.c	2
src/kex-x25519.c	2
src/kex-pqhybrid.c	2
libtommath/bn_mp_set_ul.c	1
libtommath/bn_mp_div_2.c	1
libtommath/bn_mp_exptmod.c	1
libtommath/bn_mp_invmod.c	1
libtommath/bn_s_mp_invmod_fast.c	1
libtommath/bn_s_mp_invmod_slow.c	1
libtommath/bn_mp_abs.c	1
libtommath/bn_mp_reduce_is_2k_l.c	1
libtommath/bn_s_mp_exptmod.c	1
libtommath/bn_mp_reduce_setup.c	1
libtommath/bn_mp_2expt.c	1
libtommath/bn_mp_reduce_2k_setup_l.c	1
libtommath/bn_mp_dr_is_modulus.c	1
libtommath/bn_mp_reduce_is_2k.c	1
libtommath/bn_s_mp_exptmod_fast.c	1
libtommath/bn_mp_montgomery_setup.c	1
libtommath/bn_mp_dr_setup.c	1
libtommath/bn_mp_reduce_2k_setup.c	1
libtommath/bn_mp_montgomery_calc_normalization.c	1
libtommath/bn_mp_mul_2.c	1
libtommath/bn_mp_mulmod.c	1
libtommath/bn_mp_to_ubin.c	1
libtommath/bn_mp_ubin_size.c	1
libtomcrypt/src/pk/ecc/ecc_make_key.c	1
libtomcrypt/src/misc/crypt/crypt_prng_is_valid.c	1
libtomcrypt/src/pk/ecc/ltc_ecc_points.c	2
libtomcrypt/src/pk/ecc/ecc_ansi_x963_export.c	1
libtomcrypt/src/pk/ecc/ltc_ecc_is_valid_idx.c	1
src/curve25519.c	21
src/cli-auth.c	3
src/cli-authpubkey.c	3
src/cli-agentfwd.c	5
libtomcrypt/src/hashes/sha1.c	4
libtomcrypt/src/headers/tomcrypt_macros.h	1
libtommath/bn_mp_addmod.c	1
libtomcrypt/src/hashes/sha2/sha512.c	4
src/cli-authinteract.c	1
src/cli-authpasswd.c	1
src/cli-chansession.c	4
src/cli-tcpfwd.c	5
src/tcp-accept.c	3

Fuzzer: fuzzer-kexmlkem-srv

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	145	44.8%
gold	[1:9]	27	8.35%
yellow	[10:29]	26	8.04%
greenyellow	[30:49]	15	4.64%
lawngreen	50+	110	34.0%
All colors	323	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
386	394	4 : View List ['libcrux_sha3_generic_keccak_squeeze_last_cf', 'libcrux_sha3_generic_keccak_squeeze_next_block_fc', 'libcrux_sha3_generic_keccak_squeeze_first_block_84', 'libcrux_sha3_portable_keccak_split_at_mut_n_5a']	386	394	libcrux_sha3_generic_keccak_keccak_e9	call site: 00000	/src/dropbear/src/libcrux_mlkem768_sha3.h:2474
386	394	4 : View List ['libcrux_sha3_generic_keccak_squeeze_first_block_840', 'libcrux_sha3_portable_keccak_split_at_mut_n_5a', 'libcrux_sha3_generic_keccak_squeeze_last_cf0', 'libcrux_sha3_generic_keccak_squeeze_next_block_fc0']	386	394	libcrux_sha3_generic_keccak_keccak_e91	call site: 00000	/src/dropbear/src/libcrux_mlkem768_sha3.h:2961
386	394	4 : View List ['libcrux_sha3_generic_keccak_squeeze_first_block_840', 'libcrux_sha3_portable_keccak_split_at_mut_n_5a', 'libcrux_sha3_generic_keccak_squeeze_last_cf0', 'libcrux_sha3_generic_keccak_squeeze_next_block_fc0']	386	394	libcrux_sha3_generic_keccak_keccak_e90	call site: 00000	/src/dropbear/src/libcrux_mlkem768_sha3.h:2833
152	152	1 : View List ['buf_put_dss_pub_key']	356	421	buf_put_pub_key	call site: 00203	/src/dropbear/src/signkey.c:427
152	152	1 : View List ['buf_put_rsa_pub_key']	204	269	buf_put_pub_key	call site: 00204	/src/dropbear/src/signkey.c:432
99	99	1 : View List ['load_banner']	176	194	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:394
53	71	3 : View List ['exit', 'm_free_direct', 'sign_key_free']	53	71	svr_dropbear_exit	call site: 00000	/src/dropbear/src/svr-session.c:294
52	65	2 : View List ['buf_put_ecdsa_pub_key', 'signkey_key_ptr']	52	114	buf_put_pub_key	call site: 00261	/src/dropbear/src/signkey.c:437
21	21	1 : View List ['parse_recv_window']	75	91	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:410
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	dss_key_free	call site: 00000	/src/dropbear/src/dss.c:125
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	rsa_key_free	call site: 00000	/src/dropbear/src/rsa.c:146
20	20	1 : View List ['m_mp_free_multi']	20	20	buf_get_dss_priv_key	call site: 00000	/src/dropbear/src/dss.c:113

Runtime coverage analysis

Covered functions

463

Functions that are reachable but not covered

44

Reachable functions

119

Percentage of reachable functions covered

63.03%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-kexmlkem-srv.c	1
src/../fuzz/fuzz-common.c	1
src/../fuzz/fuzz-wrapfd.c	5
src/dbrandom.c	6
libtomcrypt/src/hashes/sha2/sha256.c	4
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
src/dbmalloc.c	11
src/kex-pqhybrid.c	3
src/dbutil.c	4
src/kex-x25519.c	3
src/buffer.c	21
src/dbhelpers.c	1
src/curve25519.c	10
src/signkey.c	2
src/dss.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_to_ubin.c	1
libtommath/bn_mp_ubin_size.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_clamp.c	1
libtommath/bn_mp_rshd.c	1
src/rsa.c	1
src/ecdsa.c	2
src/ecc.c	2
libtomcrypt/src/pk/ecc/ecc_ansi_x963_export.c	1
libtomcrypt/src/pk/ecc/ltc_ecc_is_valid_idx.c	1
libtomcrypt/src/misc/zeromem.c	1
src/ed25519.c	1
src/common-kex.c	1

Fuzzer: fuzzer-postauth_nomaths

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	413	39.1%
gold	[1:9]	191	18.1%
yellow	[10:29]	25	2.36%
greenyellow	[30:49]	1	0.09%
lawngreen	50+	425	40.2%
All colors	1055	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
4956	5384	20 : View List ['kexdh_comb_key', 'gen_kexecdh_param', 'free_kexecdh_param', 'encrypt_packet', 'kexecdh_comb_key', 'buf_put_pub_key', 'buf_putbyte', 'buf_put_ecc_raw_pubkey_string', 'free_kexpqhybrid_param', 'buf_putbufstring', 'buf_putstring', 'kexpqhybrid_comb_key', 'kexcurve25519_comb_key', 'gen_kexdh_param', 'free_kexcurve25519_param', 'gen_kexpqhybrid_param', 'buf_putmpint', 'free_kexdh_param', 'buf_put_sign', 'gen_kexcurve25519_param']	4956	5384	send_msg_kexdh_reply	call site: 00000	/src/dropbear/src/svr-kex.c:206
3218	3356	12 : View List ['dropbear_log', 'strncmp', 'send_msg_userauth_banner', 'm_free_direct', 'send_msg_userauth_failure', 'svr_auth_pubkey', 'svr_auth_password', 'checkusername', 'buf_getstring', 'send_msg_userauth_success', 'dropbear_exit', 'buf_free']	3218	3356	recv_msg_userauth_request	call site: 00000	/src/dropbear/src/svr-auth.c:85
1764	1764	1 : View List ['svr_ensure_hostkey']	6720	7209	send_msg_kexdh_reply	call site: 00000	/src/dropbear/src/svr-kex.c:199
560	736	24 : View List ['wrapfd_write', 'buf_readfile', 'login_login', 'setnonblocking', 'buf_new', 'm_free_direct', 'buf_getptr', 'signal', 'wrapfd_close', 'pty_make_controlling_tty', 'expand_homedir_path', 'buf_incrpos', 'dropbear_exit', 'execchild', 'buf_setpos', 'addchildpid', 'login_free_entry', 'stat', 'strlen', 'fork', 'm_malloc', 'dup2', 'buf_free', 'chansess_login_alloc']	560	736	ptycommand	call site: 00000	/src/dropbear/src/svr-chansession.c:813
550	552	2 : View List ['dropbear_exit', 'send_msg_keepalive']	550	564	checktimeouts	call site: 00830	/src/dropbear/src/common-session.c:569
368	368	1 : View List ['svr_agentreq']	368	901	chansessionrequest	call site: 00000	/src/dropbear/src/svr-chansession.c:399
261	261	1 : View List ['send_msg_channel_window_adjust']	261	277	writechannel	call site: 00973	/src/dropbear/src/common-channel.c:524
261	261	1 : View List ['send_msg_request_success']	261	270	recv_msg_global_request_remotetcp	call site: 00000	/src/dropbear/src/svr-tcpfwd.c:115
194	194	4 : View List ['pty_release', 'login_free_entry', 'chansess_login_alloc', 'login_logout']	194	273	cleanupchansess	call site: 00000	/src/dropbear/src/svr-chansession.c:326
99	99	1 : View List ['load_banner']	176	194	svr_getopts	call site: 00159	/src/dropbear/src/svr-runopts.c:394
68	72	6 : View List ['getaddrstring', 'strerror', 'getpeername', '__errno_location', 'getsockname', 'dropbear_exit']	68	72	get_socket_address	call site: 00578	/src/dropbear/src/netio.c:688
64	64	1 : View List ['fd_read_pending']	64	1131	check_close	call site: 00992	/src/dropbear/src/common-channel.c:299

Runtime coverage analysis

Covered functions

326

Functions that are reachable but not covered

101

Reachable functions

303

Percentage of reachable functions covered

66.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-postauth_nomaths.c	1
src/../fuzz/fuzz-common.c	10
src/dbutil.c	15
src/dbmalloc.c	12
src/crypto_desc.c	2
libtomcrypt/src/misc/crypt/crypt_register_cipher.c	1
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
libtomcrypt/src/misc/crypt/crypt_register_hash.c	1
libtomcrypt/src/misc/crypt/crypt_register_prng.c	1
libtommath/bn_mp_rand.c	1
src/dbrandom.c	6
libtomcrypt/src/hashes/sha2/sha256.c	4
src/../fuzz/fuzz-wrapfd.c	7
src/buffer.c	22
src/dbhelpers.c	1
src/ecc.c	4
src/svr-runopts.c	5
src/common-runopts.c	3
src/signkey.c	5
src/dss.c	3
src/bignum.c	2
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_init.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_from_ubin.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_mul_2d.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_lshd.c	1
libtommath/bn_mp_clamp.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_cmp_d.c	1
libtommath/bn_mp_cmp.c	1
libtommath/bn_mp_cmp_mag.c	1
src/rsa.c	3
src/ecdsa.c	3
libtomcrypt/src/pk/ecc/ecc_free.c	1
libtomcrypt/src/math/multi.c	1
libtommath/bn_mp_set.c	1
libtommath/bn_mp_read_radix.c	1
libtommath/bn_mp_mul_d.c	1
libtommath/bn_mp_add_d.c	1
libtommath/bn_mp_sub_d.c	1
libtommath/bn_mp_sqr.c	1
libtommath/bn_s_mp_sqr_fast.c	1
libtommath/bn_s_mp_sqr.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_exch.c	1
libtommath/bn_mp_mod.c	1
libtommath/bn_mp_div.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_sub.c	1
libtommath/bn_s_mp_add.c	1
libtommath/bn_s_mp_sub.c	1
libtommath/bn_mp_rshd.c	1
libtommath/bn_mp_add.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_mul.c	1
libtommath/bn_s_mp_balance_mul.c	1
libtommath/bn_mp_init_multi.c	1
libtommath/bn_s_mp_mul_digs_fast.c	1
libtommath/bn_s_mp_mul_digs.c	1
libtommath/bn_mp_clear_multi.c	1
src/ed25519.c	2
src/svr-session.c	2
src/common-session.c	12
src/netio.c	11
src/queue.c	5
src/svr-auth.c	1
src/common-channel.c	15
src/listener.c	3
src/svr-chansession.c	2
src/packet.c	11
src/common-kex.c	4
src/common-algo.c	3
libtomcrypt/src/mac/hmac/hmac_init.c	1
libtomcrypt/src/misc/crypt/crypt_hash_is_valid.c	1
libtomcrypt/src/hashes/helper/hash_memory.c	1
libtomcrypt/src/misc/zeromem.c	1
libtomcrypt/src/mac/hmac/hmac_process.c	1
libtomcrypt/src/mac/hmac/hmac_done.c	1
src/circbuffer.c	5
src/list.c	1
src/atomicio.c	1
src/process-packet.c	2

Fuzzer: fuzzer-verify

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	193	21.0%
gold	[1:9]	40	4.37%
yellow	[10:29]	8	0.87%
greenyellow	[30:49]	12	1.31%
lawngreen	50+	662	72.3%
All colors	915	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
238	238	1 : View List ['buf_sk_ecdsa_verify']	238	533	buf_verify	call site: 00664	/src/dropbear/src/signkey.c:698
45	1168	5 : View List ['mp_init_multi', 'mp_invmod', 'mp_exptmod', 'mp_clear_multi', 'mp_abs']	45	1168	mp_exptmod	call site: 00523	/src/dropbear/libtommath/bn_mp_exptmod.c:21
2	2	1 : View List ['exit']	2	2	generic_dropbear_exit	call site: 00000	/src/dropbear/src/dbutil.c:124
0	252	2 : View List ['mp_mod', 'mp_set']	0	1315	s_mp_exptmod_fast	call site: 00581	/src/dropbear/libtommath/bn_s_mp_exptmod_fast.c:122
0	216	3 : View List ['mp_cmp', 'mp_read_radix', 'mp_set']	0	976	mp_prime_is_prime	call site: 00875	/src/dropbear/libtommath/bn_mp_prime_is_prime.c:147
0	209	1 : View List ['mp_mul']	0	630	mp_reduce	call site: 00000	/src/dropbear/libtommath/bn_mp_reduce.c:25
0	99	5 : View List ['mp_clamp', 'mp_grow', 's_mp_sub', 'mp_rshd', 'mp_cmp_mag']	0	99	mp_montgomery_reduce	call site: 00000	/src/dropbear/libtommath/bn_mp_montgomery_reduce.c:20
0	77	1 : View List ['ltc_ecc_projective_dbl_point']	0	81	ltc_ecc_projective_add_point	call site: 00000	/src/dropbear/libtomcrypt/src/pk/ecc/ltc_ecc_projective_add_point.c:51
0	60	1 : View List ['mp_add_d']	0	65	mp_sub_d	call site: 00275	/src/dropbear/libtommath/bn_mp_sub_d.c:23
0	41	1 : View List ['mp_copy']	0	41	mp_div_d	call site: 00817	/src/dropbear/libtommath/bn_mp_div_d.c:21
0	41	4 : View List ['mp_exch', 'mp_init_size', 'mp_clamp', 'mp_clear']	0	41	s_mp_mul_digs	call site: 00370	/src/dropbear/libtommath/bn_s_mp_mul_digs.c:24
0	39	1 : View List ['mp_lshd']	0	44	mp_mul_2d	call site: 00188	/src/dropbear/libtommath/bn_mp_mul_2d.c:30

Runtime coverage analysis

Covered functions

238

Functions that are reachable but not covered

43

Reachable functions

241

Percentage of reachable functions covered

82.16%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-verify.c	2
src/../fuzz/fuzz-common.c	2
src/dbutil.c	4
src/dbmalloc.c	11
src/crypto_desc.c	2
libtomcrypt/src/misc/crypt/crypt_register_cipher.c	1
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
libtomcrypt/src/misc/crypt/crypt_register_hash.c	1
libtomcrypt/src/misc/crypt/crypt_register_prng.c	1
libtommath/bn_mp_rand.c	2
src/dbrandom.c	6
libtomcrypt/src/hashes/sha2/sha256.c	4
src/../fuzz/fuzz-wrapfd.c	5
src/buffer.c	20
src/dbhelpers.c	1
src/ecc.c	5
src/signkey.c	9
src/dss.c	3
src/bignum.c	4
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_init.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_from_ubin.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_mul_2d.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_lshd.c	1
libtommath/bn_mp_clamp.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_cmp_d.c	1
libtommath/bn_mp_cmp.c	1
libtommath/bn_mp_cmp_mag.c	1
src/rsa.c	4
src/ecdsa.c	4
libtomcrypt/src/pk/ecc/ecc_free.c	1
libtomcrypt/src/math/multi.c	2
libtommath/bn_mp_set.c	1
libtommath/bn_mp_read_radix.c	1
libtommath/bn_mp_mul_d.c	1
libtommath/bn_mp_add_d.c	1
libtommath/bn_mp_sub_d.c	1
libtommath/bn_mp_sqr.c	1
libtommath/bn_s_mp_sqr_fast.c	1
libtommath/bn_s_mp_sqr.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_exch.c	1
libtommath/bn_mp_mod.c	1
libtommath/bn_mp_div.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_sub.c	1
libtommath/bn_s_mp_add.c	1
libtommath/bn_s_mp_sub.c	1
libtommath/bn_mp_rshd.c	1
libtommath/bn_mp_add.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_mul.c	1
libtommath/bn_s_mp_balance_mul.c	1
libtommath/bn_mp_init_multi.c	1
libtommath/bn_s_mp_mul_digs_fast.c	1
libtommath/bn_s_mp_mul_digs.c	1
libtommath/bn_mp_clear_multi.c	1
src/ed25519.c	3
libtomcrypt/src/hashes/sha1.c	4
libtomcrypt/src/headers/tomcrypt_macros.h	1
libtommath/bn_mp_invmod.c	1
libtommath/bn_s_mp_invmod_fast.c	1
libtommath/bn_mp_div_2.c	1
libtommath/bn_s_mp_invmod_slow.c	1
libtommath/bn_mp_mulmod.c	1
libtommath/bn_mp_exptmod.c	1
libtommath/bn_mp_abs.c	1
libtommath/bn_mp_reduce_is_2k_l.c	1
libtommath/bn_s_mp_exptmod.c	1
libtommath/bn_mp_reduce_setup.c	1
libtommath/bn_mp_2expt.c	1
libtommath/bn_mp_reduce_2k_setup_l.c	1
libtommath/bn_mp_dr_is_modulus.c	1
libtommath/bn_mp_reduce_is_2k.c	1
libtommath/bn_s_mp_exptmod_fast.c	1
libtommath/bn_mp_montgomery_setup.c	1
libtommath/bn_mp_dr_setup.c	1
libtommath/bn_mp_reduce_2k_setup.c	1
libtommath/bn_mp_montgomery_calc_normalization.c	1
libtommath/bn_mp_mul_2.c	1
libtommath/bn_mp_ubin_size.c	1
libtomcrypt/src/pk/ecc/ltc_ecc_points.c	2
src/curve25519.c	24
libtomcrypt/src/hashes/sha2/sha512.c	4
src/sk-ecdsa.c	1
src/sk-ed25519.c	1
libtommath/bn_mp_prime_rabin_miller_trials.c	1
libtommath/bn_mp_prime_is_prime.c	2
libtommath/bn_mp_is_square.c	1
libtommath/bn_mp_mod_d.c	1
libtommath/bn_mp_div_d.c	1
libtommath/bn_mp_div_3.c	1
libtommath/bn_mp_init_u32.c	1
libtommath/bn_mp_set_u32.c	1
libtommath/bn_mp_get_i32.c	1
libtommath/bn_mp_get_mag_u32.c	1
libtommath/bn_mp_sqrt.c	1
libtommath/bn_s_mp_prime_is_divisible.c	1
libtommath/bn_mp_init_set.c	1
libtommath/bn_mp_prime_miller_rabin.c	1
libtommath/bn_mp_cnt_lsb.c	1
libtommath/bn_mp_sqrmod.c	1

Fuzzer: fuzzer-kexcurve25519

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	77	32.9%
gold	[1:9]	1	0.42%
yellow	[10:29]	1	0.42%
greenyellow	[30:49]	11	4.70%
lawngreen	50+	144	61.5%
All colors	234	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
152	152	1 : View List ['buf_put_dss_pub_key']	356	421	buf_put_pub_key	call site: 00128	/src/dropbear/src/signkey.c:427
152	152	1 : View List ['buf_put_rsa_pub_key']	204	269	buf_put_pub_key	call site: 00129	/src/dropbear/src/signkey.c:432
99	99	1 : View List ['load_banner']	176	194	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:394
53	71	3 : View List ['exit', 'm_free_direct', 'sign_key_free']	53	71	svr_dropbear_exit	call site: 00000	/src/dropbear/src/svr-session.c:294
52	65	2 : View List ['buf_put_ecdsa_pub_key', 'signkey_key_ptr']	52	114	buf_put_pub_key	call site: 00178	/src/dropbear/src/signkey.c:437
21	21	1 : View List ['parse_recv_window']	75	91	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:410
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	dss_key_free	call site: 00000	/src/dropbear/src/dss.c:125
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	rsa_key_free	call site: 00000	/src/dropbear/src/rsa.c:146
20	20	1 : View List ['m_mp_free_multi']	20	20	buf_get_dss_priv_key	call site: 00000	/src/dropbear/src/dss.c:113
20	20	1 : View List ['m_mp_free_multi']	20	20	buf_get_rsa_priv_key	call site: 00000	/src/dropbear/src/rsa.c:133
13	13	1 : View List ['m_str_to_uint']	15	21	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:448
12	21	2 : View List ['ecc_free', 'm_free_direct']	12	21	buf_get_ecc_raw_pubkey	call site: 00000	/src/dropbear/src/ecc.c:201

Runtime coverage analysis

Covered functions

140

Functions that are reachable but not covered

23

Reachable functions

101

Percentage of reachable functions covered

77.23%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-kexcurve25519.c	1
src/../fuzz/fuzz-common.c	1
src/../fuzz/fuzz-wrapfd.c	3
src/dbrandom.c	1
libtomcrypt/src/hashes/sha2/sha256.c	4
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
src/dbmalloc.c	11
src/buffer.c	20
src/dbutil.c	3
src/kex-x25519.c	2
src/curve25519.c	10
src/bignum.c	2
libtommath/bn_mp_init.c	1
libtommath/bn_mp_from_ubin.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_mul_2d.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_lshd.c	1
libtommath/bn_mp_clamp.c	1
src/dbhelpers.c	1
src/signkey.c	2
src/dss.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_to_ubin.c	1
libtommath/bn_mp_ubin_size.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_rshd.c	1
src/rsa.c	1
src/ecdsa.c	2
src/ecc.c	2
libtomcrypt/src/pk/ecc/ecc_ansi_x963_export.c	1
libtomcrypt/src/pk/ecc/ltc_ecc_is_valid_idx.c	1
libtomcrypt/src/misc/zeromem.c	1
src/ed25519.c	1
src/common-kex.c	1

Fuzzer: fuzzer-client

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1016	50.4%
gold	[1:9]	135	6.70%
yellow	[10:29]	12	0.59%
greenyellow	[30:49]	5	0.24%
lawngreen	50+	846	42.0%
All colors	2014	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
816	849	3 : View List ['read_config_file', 'fclose', 'parse_hostname']	816	858	apply_config_settings	call site: 00602	/src/dropbear/src/cli-runopts.c:1086
562	587	3 : View List ['buf_get_ecdsa_priv_key', 'ecc_free', 'signkey_key_ptr']	562	649	buf_get_priv_key	call site: 00300	/src/dropbear/src/signkey.c:385
550	552	2 : View List ['dropbear_exit', 'send_msg_keepalive']	560	564	checktimeouts	call site: 00974	/src/dropbear/src/common-session.c:569
386	394	4 : View List ['libcrux_sha3_generic_keccak_squeeze_last_cf', 'libcrux_sha3_generic_keccak_squeeze_next_block_fc', 'libcrux_sha3_generic_keccak_squeeze_first_block_84', 'libcrux_sha3_portable_keccak_split_at_mut_n_5a']	386	394	libcrux_sha3_generic_keccak_keccak_e9	call site: 00000	/src/dropbear/src/libcrux_mlkem768_sha3.h:2474
386	394	4 : View List ['libcrux_sha3_generic_keccak_squeeze_first_block_840', 'libcrux_sha3_portable_keccak_split_at_mut_n_5a', 'libcrux_sha3_generic_keccak_squeeze_last_cf0', 'libcrux_sha3_generic_keccak_squeeze_next_block_fc0']	386	394	libcrux_sha3_generic_keccak_keccak_e91	call site: 00000	/src/dropbear/src/libcrux_mlkem768_sha3.h:2961
386	394	4 : View List ['libcrux_sha3_generic_keccak_squeeze_first_block_840', 'libcrux_sha3_portable_keccak_split_at_mut_n_5a', 'libcrux_sha3_generic_keccak_squeeze_last_cf0', 'libcrux_sha3_generic_keccak_squeeze_next_block_fc0']	386	394	libcrux_sha3_generic_keccak_keccak_e90	call site: 00000	/src/dropbear/src/libcrux_mlkem768_sha3.h:2833
267	280	2 : View List ['buf_sk_ed25519_verify', 'signkey_key_ptr']	267	282	buf_verify	call site: 00000	/src/dropbear/src/signkey.c:706
238	238	1 : View List ['buf_sk_ecdsa_verify']	505	533	buf_verify	call site: 00000	/src/dropbear/src/signkey.c:698
166	212	2 : View List ['buf_get_dss_priv_key', 'dss_key_free']	877	1083	buf_get_priv_key	call site: 00212	/src/dropbear/src/signkey.c:363
149	195	2 : View List ['rsa_key_free', 'buf_get_rsa_priv_key']	711	859	buf_get_priv_key	call site: 00276	/src/dropbear/src/signkey.c:374
103	114	5 : View List ['dropbear_log', 'm_free_direct', 'algolist_string', 'check_user_algos', 'strcmp']	103	118	parse_ciphers_macs	call site: 00589	/src/dropbear/src/common-runopts.c:81
45	1168	5 : View List ['mp_init_multi', 'mp_invmod', 'mp_exptmod', 'mp_clear_multi', 'mp_abs']	45	1168	mp_exptmod	call site: 01233	/src/dropbear/libtommath/bn_mp_exptmod.c:21

Runtime coverage analysis

Covered functions

613

Functions that are reachable but not covered

183

Reachable functions

469

Percentage of reachable functions covered

60.98%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-client.c	1
src/../fuzz/fuzz-common.c	8
src/dbutil.c	18
src/dbmalloc.c	12
src/crypto_desc.c	2
libtomcrypt/src/misc/crypt/crypt_register_cipher.c	1
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
libtomcrypt/src/misc/crypt/crypt_register_hash.c	1
libtomcrypt/src/misc/crypt/crypt_register_prng.c	1
libtommath/bn_mp_rand.c	1
src/dbrandom.c	8
libtomcrypt/src/hashes/sha2/sha256.c	4
src/../fuzz/fuzz-wrapfd.c	7
src/buffer.c	26
src/dbhelpers.c	1
src/ecc.c	6
src/cli-runopts.c	13
src/list.c	3
src/common-runopts.c	5
src/signkey.c	12
src/dss.c	5
src/bignum.c	4
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_init.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_from_ubin.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_mul_2d.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_lshd.c	1
libtommath/bn_mp_clamp.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_cmp_d.c	1
libtommath/bn_mp_cmp.c	1
libtommath/bn_mp_cmp_mag.c	1
src/rsa.c	6
src/ecdsa.c	5
libtomcrypt/src/pk/ecc/ecc_free.c	1
libtomcrypt/src/math/multi.c	2
libtommath/bn_mp_set.c	1
libtommath/bn_mp_read_radix.c	1
libtommath/bn_mp_mul_d.c	1
libtommath/bn_mp_add_d.c	1
libtommath/bn_mp_sub_d.c	1
libtommath/bn_mp_sqr.c	1
libtommath/bn_s_mp_sqr_fast.c	1
libtommath/bn_s_mp_sqr.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_exch.c	1
libtommath/bn_mp_mod.c	1
libtommath/bn_mp_div.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_sub.c	1
libtommath/bn_s_mp_add.c	1
libtommath/bn_s_mp_sub.c	1
libtommath/bn_mp_rshd.c	1
libtommath/bn_mp_add.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_mul.c	1
libtommath/bn_s_mp_balance_mul.c	1
libtommath/bn_mp_init_multi.c	1
libtommath/bn_s_mp_mul_digs_fast.c	1
libtommath/bn_s_mp_mul_digs.c	1
libtommath/bn_mp_clear_multi.c	1
src/ed25519.c	5
src/common-algo.c	8
src/cli-readconf.c	1
src/compat.c	2
src/cli-session.c	6
src/common-session.c	13
src/netio.c	13
src/queue.c	5
src/common-channel.c	18
src/listener.c	6
src/packet.c	11
src/common-kex.c	4
libtomcrypt/src/mac/hmac/hmac_init.c	1
libtomcrypt/src/misc/crypt/crypt_hash_is_valid.c	1
libtomcrypt/src/hashes/helper/hash_memory.c	1
libtomcrypt/src/misc/zeromem.c	1
libtomcrypt/src/mac/hmac/hmac_process.c	1
libtomcrypt/src/mac/hmac/hmac_done.c	1
src/circbuffer.c	6
src/atomicio.c	1
src/process-packet.c	2
src/cli-kex.c	2
src/kex-dh.c	3
src/kex-ecdh.c	2
src/kex-x25519.c	2
src/kex-pqhybrid.c	2
libtommath/bn_mp_set_ul.c	1
libtommath/bn_mp_div_2.c	1
libtommath/bn_mp_exptmod.c	1
libtommath/bn_mp_invmod.c	1
libtommath/bn_s_mp_invmod_fast.c	1
libtommath/bn_s_mp_invmod_slow.c	1
libtommath/bn_mp_abs.c	1
libtommath/bn_mp_reduce_is_2k_l.c	1
libtommath/bn_s_mp_exptmod.c	1
libtommath/bn_mp_reduce_setup.c	1
libtommath/bn_mp_2expt.c	1
libtommath/bn_mp_reduce_2k_setup_l.c	1
libtommath/bn_mp_dr_is_modulus.c	1
libtommath/bn_mp_reduce_is_2k.c	1
libtommath/bn_s_mp_exptmod_fast.c	1
libtommath/bn_mp_montgomery_setup.c	1
libtommath/bn_mp_dr_setup.c	1
libtommath/bn_mp_reduce_2k_setup.c	1
libtommath/bn_mp_montgomery_calc_normalization.c	1
libtommath/bn_mp_mul_2.c	1
libtommath/bn_mp_mulmod.c	1
libtommath/bn_mp_to_ubin.c	1
libtommath/bn_mp_ubin_size.c	1
libtomcrypt/src/pk/ecc/ecc_make_key.c	1
libtomcrypt/src/misc/crypt/crypt_prng_is_valid.c	1
libtomcrypt/src/pk/ecc/ltc_ecc_points.c	2
libtomcrypt/src/pk/ecc/ecc_ansi_x963_export.c	1
libtomcrypt/src/pk/ecc/ltc_ecc_is_valid_idx.c	1
src/curve25519.c	21
src/cli-auth.c	3
src/cli-authpubkey.c	3
src/cli-agentfwd.c	5
libtomcrypt/src/hashes/sha1.c	4
libtomcrypt/src/headers/tomcrypt_macros.h	1
libtommath/bn_mp_addmod.c	1
libtomcrypt/src/hashes/sha2/sha512.c	4
src/cli-authinteract.c	1
src/cli-authpasswd.c	1
src/cli-chansession.c	4
src/cli-tcpfwd.c	5
src/tcp-accept.c	3

Fuzzer: fuzzer-preauth_nomaths

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	493	46.7%
gold	[1:9]	195	18.4%
yellow	[10:29]	16	1.51%
greenyellow	[30:49]	1	0.09%
lawngreen	50+	350	33.1%
All colors	1055	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
4939	5384	20 : View List ['kexdh_comb_key', 'gen_kexecdh_param', 'free_kexecdh_param', 'encrypt_packet', 'kexecdh_comb_key', 'buf_put_pub_key', 'buf_putbyte', 'buf_put_ecc_raw_pubkey_string', 'free_kexpqhybrid_param', 'buf_putbufstring', 'buf_putstring', 'kexpqhybrid_comb_key', 'kexcurve25519_comb_key', 'gen_kexdh_param', 'free_kexcurve25519_param', 'gen_kexpqhybrid_param', 'buf_putmpint', 'free_kexdh_param', 'buf_put_sign', 'gen_kexcurve25519_param']	4939	5384	send_msg_kexdh_reply	call site: 00000	/src/dropbear/src/svr-kex.c:206
1764	1764	1 : View List ['svr_ensure_hostkey']	6703	7209	send_msg_kexdh_reply	call site: 00000	/src/dropbear/src/svr-kex.c:199
550	552	2 : View List ['dropbear_exit', 'send_msg_keepalive']	550	564	checktimeouts	call site: 00830	/src/dropbear/src/common-session.c:569
324	324	1 : View List ['checkpubkey']	2717	3968	svr_auth_pubkey	call site: 00000	/src/dropbear/src/svr-authpubkey.c:163
270	272	2 : View List ['dropbear_log', 'send_msg_userauth_success']	270	299	recv_msg_userauth_request	call site: 00000	/src/dropbear/src/svr-auth.c:126
270	270	1 : View List ['send_msg_userauth_success']	270	554	svr_auth_password	call site: 00000	/src/dropbear/src/svr-authpasswd.c:108
265	276	2 : View List ['buf_free', 'send_msg_userauth_banner']	543	3356	recv_msg_userauth_request	call site: 00000	/src/dropbear/src/svr-auth.c:91
263	263	1 : View List ['send_msg_userauth_pk_ok']	314	356	svr_auth_pubkey	call site: 00000	/src/dropbear/src/svr-authpubkey.c:173
99	99	1 : View List ['load_banner']	176	194	svr_getopts	call site: 00159	/src/dropbear/src/svr-runopts.c:394
68	72	6 : View List ['getaddrstring', 'strerror', 'getpeername', '__errno_location', 'getsockname', 'dropbear_exit']	68	72	get_socket_address	call site: 00578	/src/dropbear/src/netio.c:688
53	71	3 : View List ['exit', 'm_free_direct', 'sign_key_free']	53	71	svr_dropbear_exit	call site: 00000	/src/dropbear/src/svr-session.c:294
51	51	1 : View List ['sign_key_free']	51	73	svr_auth_pubkey	call site: 00000	/src/dropbear/src/svr-authpubkey.c:256

Runtime coverage analysis

Covered functions

261

Functions that are reachable but not covered

119

Reachable functions

303

Percentage of reachable functions covered

60.73%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-preauth_nomaths.c	1
src/../fuzz/fuzz-common.c	10
src/dbutil.c	15
src/dbmalloc.c	12
src/crypto_desc.c	2
libtomcrypt/src/misc/crypt/crypt_register_cipher.c	1
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
libtomcrypt/src/misc/crypt/crypt_register_hash.c	1
libtomcrypt/src/misc/crypt/crypt_register_prng.c	1
libtommath/bn_mp_rand.c	1
src/dbrandom.c	6
libtomcrypt/src/hashes/sha2/sha256.c	4
src/../fuzz/fuzz-wrapfd.c	7
src/buffer.c	22
src/dbhelpers.c	1
src/ecc.c	4
src/svr-runopts.c	5
src/common-runopts.c	3
src/signkey.c	5
src/dss.c	3
src/bignum.c	2
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_init.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_from_ubin.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_mul_2d.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_lshd.c	1
libtommath/bn_mp_clamp.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_cmp_d.c	1
libtommath/bn_mp_cmp.c	1
libtommath/bn_mp_cmp_mag.c	1
src/rsa.c	3
src/ecdsa.c	3
libtomcrypt/src/pk/ecc/ecc_free.c	1
libtomcrypt/src/math/multi.c	1
libtommath/bn_mp_set.c	1
libtommath/bn_mp_read_radix.c	1
libtommath/bn_mp_mul_d.c	1
libtommath/bn_mp_add_d.c	1
libtommath/bn_mp_sub_d.c	1
libtommath/bn_mp_sqr.c	1
libtommath/bn_s_mp_sqr_fast.c	1
libtommath/bn_s_mp_sqr.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_exch.c	1
libtommath/bn_mp_mod.c	1
libtommath/bn_mp_div.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_sub.c	1
libtommath/bn_s_mp_add.c	1
libtommath/bn_s_mp_sub.c	1
libtommath/bn_mp_rshd.c	1
libtommath/bn_mp_add.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_mul.c	1
libtommath/bn_s_mp_balance_mul.c	1
libtommath/bn_mp_init_multi.c	1
libtommath/bn_s_mp_mul_digs_fast.c	1
libtommath/bn_s_mp_mul_digs.c	1
libtommath/bn_mp_clear_multi.c	1
src/ed25519.c	2
src/svr-session.c	2
src/common-session.c	12
src/netio.c	11
src/queue.c	5
src/svr-auth.c	1
src/common-channel.c	15
src/listener.c	3
src/svr-chansession.c	2
src/packet.c	11
src/common-kex.c	4
src/common-algo.c	3
libtomcrypt/src/mac/hmac/hmac_init.c	1
libtomcrypt/src/misc/crypt/crypt_hash_is_valid.c	1
libtomcrypt/src/hashes/helper/hash_memory.c	1
libtomcrypt/src/misc/zeromem.c	1
libtomcrypt/src/mac/hmac/hmac_process.c	1
libtomcrypt/src/mac/hmac/hmac_done.c	1
src/circbuffer.c	5
src/list.c	1
src/atomicio.c	1
src/process-packet.c	2

Fuzzer: fuzzer-kexdh

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	215	48.7%
gold	[1:9]	3	0.68%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	3	0.68%
lawngreen	50+	220	49.8%
All colors	441	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
460	1168	5 : View List ['mp_init_multi', 'mp_invmod', 'mp_exptmod', 'mp_clear_multi', 'mp_abs']	460	1168	mp_exptmod	call site: 00096	/src/dropbear/libtommath/bn_mp_exptmod.c:21
152	152	1 : View List ['buf_put_dss_pub_key']	323	421	buf_put_pub_key	call site: 00345	/src/dropbear/src/signkey.c:427
152	152	1 : View List ['buf_put_rsa_pub_key']	171	269	buf_put_pub_key	call site: 00346	/src/dropbear/src/signkey.c:432
99	99	1 : View List ['load_banner']	176	194	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:394
53	71	3 : View List ['exit', 'm_free_direct', 'sign_key_free']	53	71	svr_dropbear_exit	call site: 00000	/src/dropbear/src/svr-session.c:294
21	21	1 : View List ['parse_recv_window']	75	91	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:410
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	dss_key_free	call site: 00000	/src/dropbear/src/dss.c:125
20	29	2 : View List ['m_mp_free_multi', 'm_free_direct']	20	29	rsa_key_free	call site: 00000	/src/dropbear/src/rsa.c:146
20	20	1 : View List ['m_mp_free_multi']	20	20	buf_get_dss_priv_key	call site: 00000	/src/dropbear/src/dss.c:113
20	20	1 : View List ['m_mp_free_multi']	20	20	buf_get_rsa_priv_key	call site: 00000	/src/dropbear/src/rsa.c:133
19	19	1 : View List ['buf_put_ed25519_pub_key']	19	49	buf_put_pub_key	call site: 00385	/src/dropbear/src/signkey.c:449
13	13	1 : View List ['m_str_to_uint']	15	21	svr_getopts	call site: 00000	/src/dropbear/src/svr-runopts.c:448

Runtime coverage analysis

Covered functions

154

Functions that are reachable but not covered

31

Reachable functions

134

Percentage of reachable functions covered

76.87%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
src/../fuzz/fuzzer-kexdh.c	1
src/../fuzz/fuzz-common.c	1
src/../fuzz/fuzz-wrapfd.c	3
src/dbrandom.c	1
libtomcrypt/src/hashes/sha2/sha256.c	4
libtomcrypt/src/misc/crypt/crypt_argchk.c	1
src/dbmalloc.c	11
src/buffer.c	19
src/dbutil.c	2
src/bignum.c	4
libtommath/bn_mp_init.c	1
libtommath/bn_mp_zero.c	1
libtommath/bn_mp_from_ubin.c	1
libtommath/bn_mp_grow.c	1
libtommath/bn_mp_mul_2d.c	1
libtommath/bn_mp_copy.c	1
libtommath/bn_mp_lshd.c	1
libtommath/bn_mp_clamp.c	1
src/kex-dh.c	2
libtommath/bn_mp_sub_d.c	1
libtommath/bn_mp_add_d.c	1
libtommath/bn_mp_cmp.c	1
libtommath/bn_mp_cmp_mag.c	1
libtommath/bn_mp_cmp_d.c	1
libtommath/bn_mp_exptmod.c	1
libtommath/bn_mp_init_multi.c	1
libtommath/bn_mp_clear.c	1
libtommath/bn_mp_invmod.c	1
libtommath/bn_s_mp_invmod_fast.c	1
libtommath/bn_mp_mod.c	1
libtommath/bn_mp_init_size.c	1
libtommath/bn_mp_div.c	1
libtommath/bn_mp_init_copy.c	1
libtommath/bn_mp_count_bits.c	1
libtommath/bn_mp_sub.c	1
libtommath/bn_s_mp_add.c	1
libtommath/bn_s_mp_sub.c	1
libtommath/bn_mp_rshd.c	1
libtommath/bn_mp_mul_d.c	1
libtommath/bn_mp_add.c	1
libtommath/bn_mp_exch.c	1
libtommath/bn_mp_div_2d.c	1
libtommath/bn_mp_mod_2d.c	1
libtommath/bn_mp_set.c	1
libtommath/bn_mp_div_2.c	1
libtommath/bn_mp_clear_multi.c	1
libtommath/bn_s_mp_invmod_slow.c	1
libtommath/bn_mp_abs.c	1
libtommath/bn_mp_reduce_is_2k_l.c	1
libtommath/bn_s_mp_exptmod.c	1
libtommath/bn_mp_reduce_setup.c	1
libtommath/bn_mp_2expt.c	1
libtommath/bn_mp_reduce_2k_setup_l.c	1
libtommath/bn_mp_sqr.c	1
libtommath/bn_s_mp_sqr_fast.c	1
libtommath/bn_s_mp_sqr.c	1
libtommath/bn_mp_mul.c	1
libtommath/bn_s_mp_balance_mul.c	1
libtommath/bn_s_mp_mul_digs_fast.c	1
libtommath/bn_s_mp_mul_digs.c	1
libtommath/bn_mp_dr_is_modulus.c	1
libtommath/bn_mp_reduce_is_2k.c	1
libtommath/bn_s_mp_exptmod_fast.c	1
libtommath/bn_mp_montgomery_setup.c	1
libtommath/bn_mp_dr_setup.c	1
libtommath/bn_mp_reduce_2k_setup.c	1
libtommath/bn_mp_montgomery_calc_normalization.c	1
libtommath/bn_mp_mul_2.c	1
libtommath/bn_mp_mulmod.c	1
src/signkey.c	2
src/dss.c	1
libtommath/bn_mp_to_ubin.c	1
libtommath/bn_mp_ubin_size.c	1
src/rsa.c	1
src/ecdsa.c	2
src/ecc.c	2
libtomcrypt/src/pk/ecc/ecc_ansi_x963_export.c	1
libtomcrypt/src/pk/ecc/ltc_ecc_is_valid_idx.c	1
libtomcrypt/src/misc/zeromem.c	1
src/dbhelpers.c	1
src/ed25519.c	1
src/common-kex.c	1