High level conclusions

Fuzzers reach 53.63% code coverage.

Fuzzer fuzz_asm_evm is blocked:

The runtime code coverage of fuzz_asm_evm covers 0.414% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 7.995% of cyclomatic complexity.

Fuzzers reach 4.462% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

54 / 1210

Cyclomatic complexity statically reachable by fuzzers

550 / 6879

Runtime code coverage of functions

649 / 1210

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_asm_sparcbe

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1952	54.6%
gold	[1:9]	268	7.50%
yellow	[10:29]	24	0.67%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1329	37.1%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	207	ks_open	call site: 01953	/src/keystone/llvm/keystone/ks.cpp:368
0	0	None	16	207	ks_open	call site: 01954	/src/keystone/llvm/keystone/ks.cpp:373
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	8	199	ks_open	call site: 01954	/src/keystone/llvm/keystone/ks.cpp:375
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:242
0	0	1 : View List ['llvm_ks::Target::createMCAsmBackend2(llvm_ks::MCRegisterInfo const&, llvm_ks::StringRef, llvm_ks::StringRef, llvm_ks::MCSubtargetInfo const&, llvm_ks::MCTargetOptions const&) const']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:247

Runtime coverage analysis

Covered functions

2249

Functions that are reachable but not covered

944

Reachable functions

2894

Percentage of reachable functions covered

67.38%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_sparcbe.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_ppc32be

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1900	53.1%
gold	[1:9]	234	6.54%
yellow	[10:29]	5	0.13%
greenyellow	[30:49]	1	0.02%
lawngreen	50+	1433	40.1%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
12	12	12 : View List ['memcmp', '(anonymous namespace)::AsmParser::parseExpression(llvm_ks::MCExpr const*&)', 'llvm_ks::cast_retty ::ret_type llvm_ks::dyn_cast (llvm_ks::MCExpr const*)', 'llvm_ks::MCAsmLexer::isNot(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::MCAsmParser::getTok() const', 'llvm_ks::MCAsmLexer::is(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::StringRef::StringRef(char const*)', 'llvm_ks::MCConstantExpr::getValue() const', 'llvm_ks::AsmToken::getIntVal(bool&) const', 'llvm_ks::AsmToken::getLoc() const', 'llvm_ks::MCContext::isValidDwarfFileNumber(unsigned int, unsigned int)']	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3400
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	66	1 : View List ['(anonymous namespace)::AsmParser::enterIncludeFile(std::__1::basic_string , std::__1::allocator > const&)']	0	66	(anonymousnamespace)::AsmParser::parseDirectiveInclude()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:4854
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	207	ks_open	call site: 01960	/src/keystone/llvm/keystone/ks.cpp:447
0	0	None	16	207	ks_open	call site: 01961	/src/keystone/llvm/keystone/ks.cpp:453
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	8	199	ks_open	call site: 01961	/src/keystone/llvm/keystone/ks.cpp:457
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218

Runtime coverage analysis

Covered functions

2460

Functions that are reachable but not covered

894

Reachable functions

2894

Percentage of reachable functions covered

69.11%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_ppc32be.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_mips64be

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1843	51.5%
gold	[1:9]	266	7.44%
yellow	[10:29]	24	0.67%
greenyellow	[30:49]	6	0.16%
lawngreen	50+	1434	40.1%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
75	75	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetArchDirective()']	75	75	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5622
48	48	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetAtDirective()']	48	48	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5620
46	46	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetFeature(unsigned long)']	46	46	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5684
43	43	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetFpDirective()']	43	43	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5624
22	22	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetPushDirective()']	22	22	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5632
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetOddSPRegDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5626
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetNoOddSPRegDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5628
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetMips16Directive()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5642
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetNoMips16Directive()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5644
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetNoDspDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5686
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetMsaDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5688
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetNoMsaDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5690

Runtime coverage analysis

Covered functions

2339

Functions that are reachable but not covered

874

Reachable functions

2894

Percentage of reachable functions covered

69.8%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_mips64be.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_arm_thumbbe

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1802	50.4%
gold	[1:9]	242	6.77%
yellow	[10:29]	3	0.08%
greenyellow	[30:49]	4	0.11%
lawngreen	50+	1522	42.5%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3407
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3415
0	0	None	8	8	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:279
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:242
0	0	1 : View List ['llvm_ks::Target::createMCAsmBackend2(llvm_ks::MCRegisterInfo const&, llvm_ks::StringRef, llvm_ks::StringRef, llvm_ks::MCSubtargetInfo const&, llvm_ks::MCTargetOptions const&) const']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:247

Runtime coverage analysis

Covered functions

3186

Functions that are reachable but not covered

820

Reachable functions

2894

Percentage of reachable functions covered

71.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_arm_thumbbe.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_ppc64be

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1895	53.0%
gold	[1:9]	238	6.66%
yellow	[10:29]	4	0.11%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1436	40.1%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
12	12	12 : View List ['memcmp', '(anonymous namespace)::AsmParser::parseExpression(llvm_ks::MCExpr const*&)', 'llvm_ks::cast_retty ::ret_type llvm_ks::dyn_cast (llvm_ks::MCExpr const*)', 'llvm_ks::MCAsmLexer::isNot(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::MCAsmParser::getTok() const', 'llvm_ks::MCAsmLexer::is(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::StringRef::StringRef(char const*)', 'llvm_ks::MCConstantExpr::getValue() const', 'llvm_ks::AsmToken::getIntVal(bool&) const', 'llvm_ks::AsmToken::getLoc() const', 'llvm_ks::MCContext::isValidDwarfFileNumber(unsigned int, unsigned int)']	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3400
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
2	2	2 : View List ['memcmp', 'llvm_ks::StringRef::StringRef(char const*)']	2	2	(anonymousnamespace)::PPCAsmBackend::getPointerSize()const	call site: 00000	/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp:188
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	207	ks_open	call site: 01960	/src/keystone/llvm/keystone/ks.cpp:447
0	0	None	16	207	ks_open	call site: 01961	/src/keystone/llvm/keystone/ks.cpp:453
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	8	199	ks_open	call site: 01961	/src/keystone/llvm/keystone/ks.cpp:455
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218

Runtime coverage analysis

Covered functions

2475

Functions that are reachable but not covered

890

Reachable functions

2894

Percentage of reachable functions covered

69.25%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_ppc64be.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_arm_thumbv8be

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1823	51.0%
gold	[1:9]	263	7.36%
yellow	[10:29]	11	0.30%
greenyellow	[30:49]	12	0.33%
lawngreen	50+	1464	40.9%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	5	4 : View List ['llvm_ks::MCConstantExpr::getValue() const', 'llvm_ks::ARM_AM::getSOImmVal(unsigned int)', 'llvm_ks::cast_retty ::ret_type llvm_ks::dyn_cast (llvm_ks::MCExpr const*)', '(anonymous namespace)::ARMOperand::getImm() const']	0	5	(anonymousnamespace)::ARMOperand::isAdrLabel()const	call site: 00000	/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp:999
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	8	8	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:279
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:242
0	0	1 : View List ['llvm_ks::Target::createMCAsmBackend2(llvm_ks::MCRegisterInfo const&, llvm_ks::StringRef, llvm_ks::StringRef, llvm_ks::MCSubtargetInfo const&, llvm_ks::MCTargetOptions const&) const']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:247
0	0	None	0	2	interpretDecimal(charconst*,charconst*,decimalInfo*)	call site: 00000	/src/keystone/llvm/lib/Support/APFloat.cpp:287

Runtime coverage analysis

Covered functions

2602

Functions that are reachable but not covered

844

Reachable functions

2894

Percentage of reachable functions covered

70.84%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_arm_thumbv8be.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_arm_thumb

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1800	50.3%
gold	[1:9]	239	6.68%
yellow	[10:29]	3	0.08%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1531	42.8%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3407
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3415
0	0	None	8	8	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:279
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:242
0	0	1 : View List ['llvm_ks::Target::createMCAsmBackend2(llvm_ks::MCRegisterInfo const&, llvm_ks::StringRef, llvm_ks::StringRef, llvm_ks::MCSubtargetInfo const&, llvm_ks::MCTargetOptions const&) const']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:247

Runtime coverage analysis

Covered functions

3201

Functions that are reachable but not covered

820

Reachable functions

2894

Percentage of reachable functions covered

71.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_arm_thumb.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_x86_16

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1691	47.3%
gold	[1:9]	240	6.71%
yellow	[10:29]	2	0.05%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1640	45.8%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
78	78	2 : View List ['(anonymous namespace)::X86AsmParser::ParseIntelOffsetOfOperator(unsigned int&)', '(anonymous namespace)::X86AsmParser::ParseIntelOperator(unsigned int, unsigned int&)']	94	252	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:1958
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	174	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:1981
0	0	5 : View List ['void llvm_ks::SmallVectorImpl ::emplace_back (llvm_ks::AsmRewriteKind&&, llvm_ks::SMLoc&)', 'llvm_ks::AsmToken::getString() const', 'llvm_ks::SMLoc::getPointer() const', 'llvm_ks::AsmToken::getLoc() const', 'void llvm_ks::SmallVectorImpl ::emplace_back (llvm_ks::AsmRewriteKind&&, llvm_ks::SMLoc&, unsigned int&, long&)']	16	32	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:2007
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3407
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3415
0	0	None	8	199	ks_open	call site: 01963	/src/keystone/llvm/keystone/ks.cpp:477
0	0	None	8	199	ks_open	call site: 01964	/src/keystone/llvm/keystone/ks.cpp:484

Runtime coverage analysis

Covered functions

2885

Functions that are reachable but not covered

784

Reachable functions

2894

Percentage of reachable functions covered

72.91%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_x86_16.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_mips64

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1814	50.7%
gold	[1:9]	247	6.91%
yellow	[10:29]	2	0.05%
greenyellow	[30:49]	1	0.02%
lawngreen	50+	1509	42.2%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
25	25	1 : View List ['(anonymous namespace)::MipsAsmParser::parseDirectiveModuleFP()']	25	25	(anonymousnamespace)::MipsAsmParser::parseDirectiveModule()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5899
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetNoOddSPRegDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5628
12	12	12 : View List ['memcmp', '(anonymous namespace)::AsmParser::parseExpression(llvm_ks::MCExpr const*&)', 'llvm_ks::cast_retty ::ret_type llvm_ks::dyn_cast (llvm_ks::MCExpr const*)', 'llvm_ks::MCAsmLexer::isNot(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::MCAsmParser::getTok() const', 'llvm_ks::MCAsmLexer::is(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::StringRef::StringRef(char const*)', 'llvm_ks::MCConstantExpr::getValue() const', 'llvm_ks::AsmToken::getIntVal(bool&) const', 'llvm_ks::AsmToken::getLoc() const', 'llvm_ks::MCContext::isValidDwarfFileNumber(unsigned int, unsigned int)']	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3400
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
2	2	3 : View List ['std::__1::unique_ptr<(anonymous namespace)::MipsAssemblerOptions, std::__1::default_delete<(anonymous namespace)::MipsAssemblerOptions> >::operator->[abi:ne180100]() const', 'llvm_ks::SmallVectorTemplateCommon >, void>::back()', '(anonymous namespace)::MipsAssemblerOptions::setNoMacro()']	2	2	(anonymousnamespace)::MipsAsmParser::parseSetNoMacroDirective()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5052
0	4	8 : View List ['std::__1::unique_ptr<(anonymous namespace)::MipsAssemblerOptions, std::__1::default_delete<(anonymous namespace)::MipsAssemblerOptions> >::operator->[abi:ne180100]() const', '(anonymous namespace)::MipsAsmParser::ComputeAvailableFeatures(llvm_ks::FeatureBitset const&) const', 'llvm_ks::MCTargetAsmParser::copySTI()', 'llvm_ks::SmallVectorTemplateCommon >, void>::back()', 'llvm_ks::MCSubtargetInfo::setFeatureBits(llvm_ks::FeatureBitset const&)', 'llvm_ks::SmallVectorTemplateBase >, false>::pop_back()', 'llvm_ks::MCTargetAsmParser::setAvailableFeatures(unsigned long)', '(anonymous namespace)::MipsAssemblerOptions::getFeatures() const']	0	4	(anonymousnamespace)::MipsAsmParser::parseSetPopDirective()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5200
0	2	1 : View List ['(anonymous namespace)::MipsAsmParser::isABI_O32() const']	0	2	(anonymousnamespace)::MipsAsmParser::parseDirectiveModule()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5875
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	8	199	ks_open	call site: 01958	/src/keystone/llvm/keystone/ks.cpp:422

Runtime coverage analysis

Covered functions

2740

Functions that are reachable but not covered

857

Reachable functions

2894

Percentage of reachable functions covered

70.39%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_mips64.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_x86_64

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1779	49.7%
gold	[1:9]	262	7.33%
yellow	[10:29]	18	0.50%
greenyellow	[30:49]	15	0.41%
lawngreen	50+	1499	41.9%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
78	78	2 : View List ['(anonymous namespace)::X86AsmParser::ParseIntelOffsetOfOperator(unsigned int&)', '(anonymous namespace)::X86AsmParser::ParseIntelOperator(unsigned int, unsigned int&)']	94	252	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:1958
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	66	4 : View List ['std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'llvm_ks::MCAsmLexer::isNot(llvm_ks::AsmToken::TokenKind) const', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', '(anonymous namespace)::AsmParser::enterIncludeFile(std::__1::basic_string , std::__1::allocator > const&)']	0	66	(anonymousnamespace)::AsmParser::parseDirectiveInclude()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:4839
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	174	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:1974
0	0	None	16	174	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:1981
0	0	5 : View List ['void llvm_ks::SmallVectorImpl ::emplace_back (llvm_ks::AsmRewriteKind&&, llvm_ks::SMLoc&)', 'llvm_ks::AsmToken::getString() const', 'llvm_ks::SMLoc::getPointer() const', 'llvm_ks::AsmToken::getLoc() const', 'void llvm_ks::SmallVectorImpl ::emplace_back (llvm_ks::AsmRewriteKind&&, llvm_ks::SMLoc&, unsigned int&, long&)']	16	32	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:2007
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	None	16	16	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:2035
0	0	3 : View List ['(anonymous namespace)::X86AsmParser::ErrorOperand(llvm_ks::SMLoc, llvm_ks::StringRef)', '_ZNSt3__110unique_ptrIN7llvm_ks10X86OperandENS_14default_deleteIS2_EEEC2B8ne180100ILb1EvEEDn', 'llvm_ks::StringRef::StringRef(char const*)']	16	16	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:2045
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695

Runtime coverage analysis

Covered functions

2633

Functions that are reachable but not covered

813

Reachable functions

2894

Percentage of reachable functions covered

71.91%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_x86_64.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_riscv32

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1839	51.4%
gold	[1:9]	237	6.63%
yellow	[10:29]	6	0.16%
greenyellow	[30:49]	7	0.19%
lawngreen	50+	1484	41.5%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3407
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3415
0	0	None	8	199	ks_open	call site: 01956	/src/keystone/llvm/keystone/ks.cpp:397
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:242
0	0	1 : View List ['llvm_ks::Target::createMCAsmBackend(llvm_ks::MCRegisterInfo const&, llvm_ks::StringRef, llvm_ks::StringRef) const']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:247

Runtime coverage analysis

Covered functions

2665

Functions that are reachable but not covered

836

Reachable functions

2894

Percentage of reachable functions covered

71.11%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_riscv32.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_arm_armbe

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1805	50.5%
gold	[1:9]	237	6.63%
yellow	[10:29]	3	0.08%
greenyellow	[30:49]	34	0.95%
lawngreen	50+	1494	41.8%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
12	12	12 : View List ['memcmp', '(anonymous namespace)::AsmParser::parseExpression(llvm_ks::MCExpr const*&)', 'llvm_ks::cast_retty ::ret_type llvm_ks::dyn_cast (llvm_ks::MCExpr const*)', 'llvm_ks::MCAsmLexer::isNot(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::MCAsmParser::getTok() const', 'llvm_ks::MCAsmLexer::is(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::StringRef::StringRef(char const*)', 'llvm_ks::MCConstantExpr::getValue() const', 'llvm_ks::AsmToken::getIntVal(bool&) const', 'llvm_ks::AsmToken::getLoc() const', 'llvm_ks::MCContext::isValidDwarfFileNumber(unsigned int, unsigned int)']	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3400
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	8	8	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:279
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:242
0	0	1 : View List ['llvm_ks::Target::createMCAsmBackend2(llvm_ks::MCRegisterInfo const&, llvm_ks::StringRef, llvm_ks::StringRef, llvm_ks::MCSubtargetInfo const&, llvm_ks::MCTargetOptions const&) const']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:247
0	0	None	0	5	(anonymousnamespace)::ARMOperand::isNEONi16splat()const	call site: 00000	/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp:1606

Runtime coverage analysis

Covered functions

3073

Functions that are reachable but not covered

824

Reachable functions

2894

Percentage of reachable functions covered

71.53%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_arm_armbe.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_arm_thumbv8

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1805	50.5%
gold	[1:9]	235	6.57%
yellow	[10:29]	38	1.06%
greenyellow	[30:49]	22	0.61%
lawngreen	50+	1473	41.2%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
12	12	12 : View List ['memcmp', '(anonymous namespace)::AsmParser::parseExpression(llvm_ks::MCExpr const*&)', 'llvm_ks::cast_retty ::ret_type llvm_ks::dyn_cast (llvm_ks::MCExpr const*)', 'llvm_ks::MCAsmLexer::isNot(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::MCAsmParser::getTok() const', 'llvm_ks::MCAsmLexer::is(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::StringRef::StringRef(char const*)', 'llvm_ks::MCConstantExpr::getValue() const', 'llvm_ks::AsmToken::getIntVal(bool&) const', 'llvm_ks::AsmToken::getLoc() const', 'llvm_ks::MCContext::isValidDwarfFileNumber(unsigned int, unsigned int)']	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3400
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	66	1 : View List ['(anonymous namespace)::AsmParser::enterIncludeFile(std::__1::basic_string , std::__1::allocator > const&)']	0	66	(anonymousnamespace)::AsmParser::parseDirectiveInclude()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:4854
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	8	8	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:279
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:242
0	0	1 : View List ['llvm_ks::Target::createMCAsmBackend2(llvm_ks::MCRegisterInfo const&, llvm_ks::StringRef, llvm_ks::StringRef, llvm_ks::MCSubtargetInfo const&, llvm_ks::MCTargetOptions const&) const']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:247

Runtime coverage analysis

Covered functions

2998

Functions that are reachable but not covered

826

Reachable functions

2894

Percentage of reachable functions covered

71.46%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_arm_thumbv8.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_riscv64

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1839	51.4%
gold	[1:9]	239	6.68%
yellow	[10:29]	9	0.25%
greenyellow	[30:49]	2	0.05%
lawngreen	50+	1484	41.5%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3407
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3415
0	0	None	8	199	ks_open	call site: 01956	/src/keystone/llvm/keystone/ks.cpp:397
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:242
0	0	1 : View List ['llvm_ks::Target::createMCAsmBackend(llvm_ks::MCRegisterInfo const&, llvm_ks::StringRef, llvm_ks::StringRef) const']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:247

Runtime coverage analysis

Covered functions

2663

Functions that are reachable but not covered

836

Reachable functions

2894

Percentage of reachable functions covered

71.11%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_riscv64.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_arm_arm

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1800	50.3%
gold	[1:9]	239	6.68%
yellow	[10:29]	2	0.05%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1532	42.8%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3407
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3415
0	0	None	8	8	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:279
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:242
0	0	1 : View List ['llvm_ks::Target::createMCAsmBackend2(llvm_ks::MCRegisterInfo const&, llvm_ks::StringRef, llvm_ks::StringRef, llvm_ks::MCSubtargetInfo const&, llvm_ks::MCTargetOptions const&) const']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:247

Runtime coverage analysis

Covered functions

3201

Functions that are reachable but not covered

820

Reachable functions

2894

Percentage of reachable functions covered

71.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_arm_arm.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_arm_armv8be

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1805	50.5%
gold	[1:9]	236	6.60%
yellow	[10:29]	4	0.11%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1528	42.7%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	66	1 : View List ['(anonymous namespace)::AsmParser::enterIncludeFile(std::__1::basic_string , std::__1::allocator > const&)']	0	66	(anonymousnamespace)::AsmParser::parseDirectiveInclude()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:4854
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3407
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3415
0	0	None	8	8	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:279
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:242

Runtime coverage analysis

Covered functions

3101

Functions that are reachable but not covered

824

Reachable functions

2894

Percentage of reachable functions covered

71.53%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_arm_armv8be.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_x86_32

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1768	49.4%
gold	[1:9]	234	6.54%
yellow	[10:29]	7	0.19%
greenyellow	[30:49]	2	0.05%
lawngreen	50+	1562	43.7%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
78	78	2 : View List ['(anonymous namespace)::X86AsmParser::ParseIntelOffsetOfOperator(unsigned int&)', '(anonymous namespace)::X86AsmParser::ParseIntelOperator(unsigned int, unsigned int&)']	94	252	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:1958
12	12	12 : View List ['memcmp', '(anonymous namespace)::AsmParser::parseExpression(llvm_ks::MCExpr const*&)', 'llvm_ks::cast_retty ::ret_type llvm_ks::dyn_cast (llvm_ks::MCExpr const*)', 'llvm_ks::MCAsmLexer::isNot(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::MCAsmParser::getTok() const', 'llvm_ks::MCAsmLexer::is(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::StringRef::StringRef(char const*)', 'llvm_ks::MCConstantExpr::getValue() const', 'llvm_ks::AsmToken::getIntVal(bool&) const', 'llvm_ks::AsmToken::getLoc() const', 'llvm_ks::MCContext::isValidDwarfFileNumber(unsigned int, unsigned int)']	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3400
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	66	1 : View List ['(anonymous namespace)::AsmParser::enterIncludeFile(std::__1::basic_string , std::__1::allocator > const&)']	0	66	(anonymousnamespace)::AsmParser::parseDirectiveInclude()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:4854
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	174	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:1981
0	0	5 : View List ['void llvm_ks::SmallVectorImpl ::emplace_back (llvm_ks::AsmRewriteKind&&, llvm_ks::SMLoc&)', 'llvm_ks::AsmToken::getString() const', 'llvm_ks::SMLoc::getPointer() const', 'llvm_ks::AsmToken::getLoc() const', 'void llvm_ks::SmallVectorImpl ::emplace_back (llvm_ks::AsmRewriteKind&&, llvm_ks::SMLoc&, unsigned int&, long&)']	16	32	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:2007
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	None	16	16	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:2036
0	0	3 : View List ['(anonymous namespace)::X86AsmParser::ErrorOperand(llvm_ks::SMLoc, llvm_ks::StringRef)', '_ZNSt3__110unique_ptrIN7llvm_ks10X86OperandENS_14default_deleteIS2_EEEC2B8ne180100ILb1EvEEDn', 'llvm_ks::StringRef::StringRef(char const*)']	16	16	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:2045
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695

Runtime coverage analysis

Covered functions

2760

Functions that are reachable but not covered

802

Reachable functions

2894

Percentage of reachable functions covered

72.29%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_x86_32.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_evm

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3568	99.8%
gold	[1:9]	4	0.11%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1	0.02%
All colors	3573	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
2355	0	EP	call site: 00000	ks_open
862	2710	llvm_ks::MCFragment::MCFragment(llvm_ks::MCFragment::FragmentType, bool, unsigned char, llvm_ks::MCSection*)	call site: 02710	ks_close
350	2357	llvm_ks::ilist_node ::ilist_node()	call site: 02357	__assert_fail
1	2708	llvm_ks::MCDummyFragment::MCDummyFragment(llvm_ks::MCSection*)	call site: 02708

Runtime coverage analysis

Covered functions

8

Functions that are reachable but not covered

2882

Reachable functions

2894

Percentage of reachable functions covered

0.41%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_evm.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_hex

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1874	52.4%
gold	[1:9]	252	7.05%
yellow	[10:29]	5	0.13%
greenyellow	[30:49]	3	0.08%
lawngreen	50+	1439	40.2%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	66	1 : View List ['(anonymous namespace)::AsmParser::enterIncludeFile(std::__1::basic_string , std::__1::allocator > const&)']	0	66	(anonymousnamespace)::AsmParser::parseDirectiveInclude()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:4854
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3407
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3415
0	0	None	8	8	ks_open	call site: 01949	/src/keystone/llvm/keystone/ks.cpp:338
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:242

Runtime coverage analysis

Covered functions

2922

Functions that are reachable but not covered

856

Reachable functions

2894

Percentage of reachable functions covered

70.42%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_hex.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_mipsbe

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1826	51.1%
gold	[1:9]	238	6.66%
yellow	[10:29]	2	0.05%
greenyellow	[30:49]	1	0.02%
lawngreen	50+	1506	42.1%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
48	48	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetAtDirective()']	48	48	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5620
25	25	1 : View List ['(anonymous namespace)::MipsAsmParser::parseDirectiveModuleFP()']	25	25	(anonymousnamespace)::MipsAsmParser::parseDirectiveModule()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5899
22	22	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetPushDirective()']	22	22	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5632
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetNoOddSPRegDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5628
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetHardFloatDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5694
12	12	12 : View List ['memcmp', '(anonymous namespace)::AsmParser::parseExpression(llvm_ks::MCExpr const*&)', 'llvm_ks::cast_retty ::ret_type llvm_ks::dyn_cast (llvm_ks::MCExpr const*)', 'llvm_ks::MCAsmLexer::isNot(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::MCAsmParser::getTok() const', 'llvm_ks::MCAsmLexer::is(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::StringRef::StringRef(char const*)', 'llvm_ks::MCConstantExpr::getValue() const', 'llvm_ks::AsmToken::getIntVal(bool&) const', 'llvm_ks::AsmToken::getLoc() const', 'llvm_ks::MCContext::isValidDwarfFileNumber(unsigned int, unsigned int)']	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3400
10	10	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetNoMacroDirective()']	10	10	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5640
9	9	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetMips0Directive()']	9	9	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5652
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
7	7	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetNoAtDirective()']	7	7	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5618
4	4	9 : View List ['std::__1::unique_ptr<(anonymous namespace)::MipsAssemblerOptions, std::__1::default_delete<(anonymous namespace)::MipsAssemblerOptions> >::operator->[abi:ne180100]() const', '(anonymous namespace)::MipsAsmParser::ComputeAvailableFeatures(llvm_ks::FeatureBitset const&) const', '(anonymous namespace)::MipsAsmParser::reportParseError(llvm_ks::SMLoc, llvm_ks::Twine)', 'llvm_ks::MCTargetAsmParser::copySTI()', 'llvm_ks::SmallVectorTemplateCommon >, void>::back()', 'llvm_ks::MCSubtargetInfo::setFeatureBits(llvm_ks::FeatureBitset const&)', 'llvm_ks::SmallVectorTemplateBase >, false>::pop_back()', 'llvm_ks::MCTargetAsmParser::setAvailableFeatures(unsigned long)', '(anonymous namespace)::MipsAssemblerOptions::getFeatures() const']	4	4	(anonymousnamespace)::MipsAsmParser::parseSetPopDirective()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5195

Runtime coverage analysis

Covered functions

2622

Functions that are reachable but not covered

866

Reachable functions

2894

Percentage of reachable functions covered

70.08%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_mipsbe.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_systemz

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2022	56.5%
gold	[1:9]	250	6.99%
yellow	[10:29]	119	3.33%
greenyellow	[30:49]	623	17.4%
lawngreen	50+	559	15.6%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	8	8	ks_open	call site: 01951	/src/keystone/llvm/keystone/ks.cpp:353
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:242
0	0	1 : View List ['llvm_ks::Target::createMCAsmBackend2(llvm_ks::MCRegisterInfo const&, llvm_ks::StringRef, llvm_ks::StringRef, llvm_ks::MCSubtargetInfo const&, llvm_ks::MCTargetOptions const&) const']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:247
0	0	None	0	2	interpretDecimal(charconst*,charconst*,decimalInfo*)	call site: 00000	/src/keystone/llvm/lib/Support/APFloat.cpp:287
0	0	None	0	0	ks_open	call site: 00004	/src/keystone/llvm/keystone/ks.cpp:265

Runtime coverage analysis

Covered functions

1878

Functions that are reachable but not covered

1018

Reachable functions

2894

Percentage of reachable functions covered

64.82%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_systemz.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_sparc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1905	53.3%
gold	[1:9]	237	6.63%
yellow	[10:29]	6	0.16%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1425	39.8%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	207	ks_open	call site: 01953	/src/keystone/llvm/keystone/ks.cpp:368
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3407
0	0	None	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3415
0	0	None	8	199	ks_open	call site: 01954	/src/keystone/llvm/keystone/ks.cpp:373
0	0	None	8	8	ks_open	call site: 01954	/src/keystone/llvm/keystone/ks.cpp:381
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218

Runtime coverage analysis

Covered functions

2530

Functions that are reachable but not covered

891

Reachable functions

2894

Percentage of reachable functions covered

69.21%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_sparc.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_mips

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1831	51.2%
gold	[1:9]	262	7.33%
yellow	[10:29]	16	0.44%
greenyellow	[30:49]	1	0.02%
lawngreen	50+	1463	40.9%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
75	75	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetArchDirective()']	75	75	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5622
48	48	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetAtDirective()']	48	48	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5620
43	43	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetFpDirective()']	43	43	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5624
25	25	1 : View List ['(anonymous namespace)::MipsAsmParser::parseDirectiveModuleFP()']	25	25	(anonymousnamespace)::MipsAsmParser::parseDirectiveModule()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5899
22	22	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetPushDirective()']	22	22	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5632
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetNoOddSPRegDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5628
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetMips16Directive()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5642
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetNoDspDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5686
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetMsaDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5688
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetNoMsaDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5690
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetHardFloatDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5694
10	10	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetPopDirective()']	10	10	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5630

Runtime coverage analysis

Covered functions

2446

Functions that are reachable but not covered

868

Reachable functions

2894

Percentage of reachable functions covered

70.01%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_mips.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_armv8_arm

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1805	50.5%
gold	[1:9]	234	6.54%
yellow	[10:29]	3	0.08%
greenyellow	[30:49]	36	1.00%
lawngreen	50+	1495	41.8%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
12	12	12 : View List ['memcmp', '(anonymous namespace)::AsmParser::parseExpression(llvm_ks::MCExpr const*&)', 'llvm_ks::cast_retty ::ret_type llvm_ks::dyn_cast (llvm_ks::MCExpr const*)', 'llvm_ks::MCAsmLexer::isNot(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::MCAsmParser::getTok() const', 'llvm_ks::MCAsmLexer::is(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::StringRef::StringRef(char const*)', 'llvm_ks::MCConstantExpr::getValue() const', 'llvm_ks::AsmToken::getIntVal(bool&) const', 'llvm_ks::AsmToken::getLoc() const', 'llvm_ks::MCContext::isValidDwarfFileNumber(unsigned int, unsigned int)']	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3400
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
0	66	1 : View List ['(anonymous namespace)::AsmParser::enterIncludeFile(std::__1::basic_string , std::__1::allocator > const&)']	0	66	(anonymousnamespace)::AsmParser::parseDirectiveInclude()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:4854
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	8	8	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:279
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534
0	0	None	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:218
0	0	1 : View List ['std::__1::basic_string , std::__1::allocator >::operator=[abi:ne180100](char const*)']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:242
0	0	1 : View List ['llvm_ks::Target::createMCAsmBackend2(llvm_ks::MCRegisterInfo const&, llvm_ks::StringRef, llvm_ks::StringRef, llvm_ks::MCSubtargetInfo const&, llvm_ks::MCTargetOptions const&) const']	0	10	InitKs(int,ks_struct*,std::__1::basic_string ,std::__1::allocator >)	call site: 00000	/src/keystone/llvm/keystone/ks.cpp:247

Runtime coverage analysis

Covered functions

2946

Functions that are reachable but not covered

826

Reachable functions

2894

Percentage of reachable functions covered

71.46%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_armv8_arm.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_arm64_arm

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1877	52.5%
gold	[1:9]	231	6.46%
yellow	[10:29]	53	1.48%
greenyellow	[30:49]	1	0.02%
lawngreen	50+	1411	39.4%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
284	336	5 : View List ['sfast', 'sdissect', 'malloc', 'sslow', 'sbackref']	284	336	smatcher	call site: 00000	/src/keystone/llvm/lib/Support/regengine.inc:186
185	185	1 : View List ['bothcases']	185	185	ordinary	call site: 00000	/src/keystone/llvm/lib/Support/regcomp.c:946
14	14	3 : View List ['othercase', 'mccase', '__ctype_b_loc']	19	235	p_bracket	call site: 00000	/src/keystone/llvm/lib/Support/regcomp.c:708
9	9	1 : View List ['enlarge']	9	9	doemit	call site: 00000	/src/keystone/llvm/lib/Support/regcomp.c:1357
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
3	191	3 : View List ['firstch', 'ordinary', 'freeset']	3	191	p_bracket	call site: 00000	/src/keystone/llvm/lib/Support/regcomp.c:737
2	2	1 : View List ['strlen']	288	340	smatcher	call site: 00000	/src/keystone/llvm/lib/Support/regengine.inc:148
2	2	1 : View List ['mcinvert']	5	221	p_bracket	call site: 00000	/src/keystone/llvm/lib/Support/regcomp.c:721
2	2	2 : View List ['seterr', 'free']	2	2	allocset	call site: 00000	/src/keystone/llvm/lib/Support/regcomp.c:1101
0	66	1 : View List ['(anonymous namespace)::AsmParser::enterIncludeFile(std::__1::basic_string , std::__1::allocator > const&)']	0	66	(anonymousnamespace)::AsmParser::parseDirectiveInclude()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:4854
0	0	None	288	340	smatcher	call site: 00000	/src/keystone/llvm/lib/Support/regengine.inc:146

Runtime coverage analysis

Covered functions

2686

Functions that are reachable but not covered

854

Reachable functions

2894

Percentage of reachable functions covered

70.49%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_arm64_arm.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_ppc64

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1901	53.2%
gold	[1:9]	237	6.63%
yellow	[10:29]	26	0.72%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1409	39.4%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
12	12	12 : View List ['memcmp', '(anonymous namespace)::AsmParser::parseExpression(llvm_ks::MCExpr const*&)', 'llvm_ks::cast_retty ::ret_type llvm_ks::dyn_cast (llvm_ks::MCExpr const*)', 'llvm_ks::MCAsmLexer::isNot(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::MCAsmParser::getTok() const', 'llvm_ks::MCAsmLexer::is(llvm_ks::AsmToken::TokenKind) const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::StringRef::StringRef(char const*)', 'llvm_ks::MCConstantExpr::getValue() const', 'llvm_ks::AsmToken::getIntVal(bool&) const', 'llvm_ks::AsmToken::getLoc() const', 'llvm_ks::MCContext::isValidDwarfFileNumber(unsigned int, unsigned int)']	12	12	(anonymousnamespace)::AsmParser::parseDirectiveLoc()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:3400
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
2	2	2 : View List ['memcmp', 'llvm_ks::StringRef::StringRef(char const*)']	2	2	(anonymousnamespace)::PPCAsmBackend::getPointerSize()const	call site: 00000	/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp:188
0	66	4 : View List ['std::__1::basic_string , std::__1::allocator >::basic_string[abi:ne180100]()', 'llvm_ks::MCAsmLexer::isNot(llvm_ks::AsmToken::TokenKind) const', 'std::__1::basic_string , std::__1::allocator >::~basic_string()', '(anonymous namespace)::AsmParser::enterIncludeFile(std::__1::basic_string , std::__1::allocator > const&)']	0	66	(anonymousnamespace)::AsmParser::parseDirectiveInclude()	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:4839
0	0	None	96	1815	ks_open	call site: 00005	/src/keystone/llvm/keystone/ks.cpp:269
0	0	None	16	207	ks_open	call site: 01960	/src/keystone/llvm/keystone/ks.cpp:447
0	0	None	16	16	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:531
0	0	10 : View List ['llvm_ks::MCSection::setBeginSymbol(llvm_ks::MCSymbol*)', 'llvm_ks::MCStreamer::getCurrentSection() const', 'llvm_ks::StringRef::StringRef()', 'llvm_ks::MCContext::getMainFileName() const', 'std::__1::basic_string , std::__1::allocator >::length[abi:ne180100]() const', 'llvm_ks::MCSection::getBeginSymbol()', 'std::__1::basic_string , std::__1::allocator >::data[abi:ne180100]() const', 'llvm_ks::MCContext::addGenDwarfSection(llvm_ks::MCSection*)', 'llvm_ks::MCContext::setGenDwarfFileNumber(unsigned int)', 'llvm_ks::MCContext::createTempSymbol(bool)']	12	14	(anonymousnamespace)::AsmParser::Run(bool,unsignedlong,bool)	call site: 00000	/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp:695
0	0	None	8	199	ks_open	call site: 01961	/src/keystone/llvm/keystone/ks.cpp:453
0	0	None	8	8	ks_open	call site: 01961	/src/keystone/llvm/keystone/ks.cpp:460
0	0	None	8	8	ks_close	call site: 03556	/src/keystone/llvm/keystone/ks.cpp:534

Runtime coverage analysis

Covered functions

2410

Functions that are reachable but not covered

894

Reachable functions

2894

Percentage of reachable functions covered

69.11%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_ppc64.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2

Fuzzer: fuzz_asm_sparc64be

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1199	33.5%
gold	[1:9]	253	7.08%
yellow	[10:29]	9	0.25%
greenyellow	[30:49]	31	0.86%
lawngreen	50+	2081	58.2%
All colors	3573	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
284	336	5 : View List ['sfast', 'sdissect', 'malloc', 'sslow', 'sbackref']	284	336	smatcher	call site: 00000	/src/keystone/llvm/lib/Support/regengine.inc:186
185	185	1 : View List ['bothcases']	185	185	ordinary	call site: 00000	/src/keystone/llvm/lib/Support/regcomp.c:946
78	78	2 : View List ['(anonymous namespace)::X86AsmParser::ParseIntelOffsetOfOperator(unsigned int&)', '(anonymous namespace)::X86AsmParser::ParseIntelOperator(unsigned int, unsigned int&)']	94	252	(anonymousnamespace)::X86AsmParser::ParseIntelOperand(std::__1::basic_string ,std::__1::allocator >,unsignedint&)	call site: 00000	/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp:1958
25	25	1 : View List ['(anonymous namespace)::MipsAsmParser::parseDirectiveModuleFP()']	25	25	(anonymousnamespace)::MipsAsmParser::parseDirectiveModule()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5899
21	21	1 : View List ['(anonymous namespace)::MipsAsmParser::parseSetNoOddSPRegDirective()']	21	21	(anonymousnamespace)::MipsAsmParser::parseDirectiveSet()	call site: 00000	/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp:5628
14	14	3 : View List ['othercase', 'mccase', '__ctype_b_loc']	19	235	p_bracket	call site: 00000	/src/keystone/llvm/lib/Support/regcomp.c:708
9	9	1 : View List ['enlarge']	9	9	doemit	call site: 00000	/src/keystone/llvm/lib/Support/regcomp.c:1357
8	8	2 : View List ['ks_struct::~ks_struct()', 'operator delete(void*)']	8	8	ks_open	call site: 01965	/src/keystone/llvm/keystone/ks.cpp:514
7	7	1 : View List ['EVM_opcode(char const*)']	7	7	ks_asm	call site: 01978	/src/keystone/llvm/keystone/ks.cpp:617
3	191	3 : View List ['firstch', 'ordinary', 'freeset']	3	191	p_bracket	call site: 00000	/src/keystone/llvm/lib/Support/regcomp.c:737
2	2	1 : View List ['strlen']	288	340	smatcher	call site: 00000	/src/keystone/llvm/lib/Support/regengine.inc:148
2	2	1 : View List ['mcinvert']	5	221	p_bracket	call site: 00000	/src/keystone/llvm/lib/Support/regcomp.c:721

Runtime coverage analysis

Covered functions

5269

Functions that are reachable but not covered

472

Reachable functions

2894

Percentage of reachable functions covered

83.69%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/keystone/suite/fuzz/fuzz_asm_sparc64be.c	1
/src/keystone/llvm/keystone/ks.cpp	8
/src/keystone/llvm/keystone/ks_priv.h	2
/src/keystone/llvm/include/llvm/Support/SourceMgr.h	12
/src/keystone/llvm/lib/MC/MCTargetOptions.cpp	2
/src/keystone/llvm/include/llvm/MC/MCObjectFileInfo.h	3
/src/keystone/llvm/include/llvm/ADT/Triple.h	32
/src/keystone/llvm/include/llvm/MC/MCTargetOptions.h	3
/src/keystone/llvm/lib/Support/SourceMgr.cpp	2
/src/keystone/llvm/include/llvm/Support/TargetSelect.h	3
/src/keystone/llvm/lib/Target/AArch64/TargetInfo/AArch64TargetInfo.cpp	2
/src/keystone/llvm/lib/Support/TargetRegistry.cpp	4
/src/keystone/llvm/include/llvm/Support/TargetRegistry.h	90
/src/keystone/llvm/lib/Target/ARM/TargetInfo/ARMTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Hexagon/TargetInfo/HexagonTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/TargetInfo/MipsTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/PowerPC/TargetInfo/PowerPCTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/Sparc/TargetInfo/SparcTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/TargetInfo/SystemZTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/X86/TargetInfo/X86TargetInfo.cpp	1
/src/keystone/llvm/lib/Target/RISCV/TargetInfo/RISCVTargetInfo.cpp	1
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoDarwin.cpp	1
/src/keystone/llvm/lib/MC/MCAsmInfo.cpp	2
/src/keystone/llvm/lib/MC/MCAsmInfoELF.cpp	1
/src/keystone/llvm/include/llvm/MC/MCAsmInfoELF.h	1
/src/keystone/llvm/lib/MC/MCRegisterInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCDwarf.h	6
/src/keystone/llvm/include/llvm/ADT/StringRef.h	10
/src/keystone/llvm/include/llvm/MC/MCAsmInfo.h	9
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenInstrInfo.inc	1
/src/keystone/llvm/include/llvm/MC/MCInstrInfo.h	1
/src/keystone/llvm/include/llvm/MC/MCRegisterInfo.h	7
/src/keystone/llvm/include/llvm/ADT/DenseMap.h	180
/src/keystone/llvm/include/llvm/ADT/EpochTracker.h	3
/src/keystone/llvm/include/llvm/ADT/DenseMapInfo.h	16
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/ErrorHandling.cpp	3
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenSubtargetInfo.inc	1
/src/keystone/llvm/include/llvm/ADT/ArrayRef.h	23
/src/keystone/llvm/lib/MC/MCSubtargetInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/SubtargetFeature.h	2
/src/keystone/llvm/lib/MC/SubtargetFeature.cpp	12
/src/keystone/llvm/include/llvm/ADT/SmallVector.h	186
/src/keystone/llvm/lib/Support/StringRef.cpp	2
/src/keystone/llvm/lib/Support/SmallVector.cpp	1
/src/keystone/llvm/lib/Support/raw_ostream.cpp	16
/src/keystone/llvm/include/llvm/Support/raw_ostream.h	18
/src/keystone/llvm/include/llvm/ADT/Twine.h	21
/src/keystone/llvm/lib/Support/Twine.cpp	5
/src/keystone/llvm/include/llvm/Support/Format.h	4
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/MC/MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64AsmBackend.cpp	4
/src/keystone/llvm/include/llvm/MC/MCELFObjectWriter.h	1
/src/keystone/llvm/lib/MC/MCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCAsmInfo.cpp	4
/src/keystone/llvm/include/llvm/MC/MCAsmInfoDarwin.h	1
/src/keystone/llvm/lib/MC/MCAsmInfoCOFF.cpp	3
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Support/Triple.cpp	27
/src/keystone/llvm/lib/Support/TargetParser.cpp	9
/src/keystone/llvm/include/llvm/ADT/SmallString.h	16
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMMCCodeEmitter.cpp	3
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMAsmBackend.cpp	5
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackendELF.h	1
/src/keystone/llvm/keystone/../lib/Target/ARM/MCTargetDesc/ARMAsmBackend.h	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsMCCodeEmitter.h	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsAsmBackend.cpp	4
/src/keystone/llvm/keystone/../lib/Target/Mips/MCTargetDesc/MipsAsmBackend.h	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCAsmInfo.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCMCCodeEmitter.cpp	2
/src/keystone/llvm/include/llvm/MC/MCContext.h	12
/src/keystone/llvm/lib/Target/PowerPC/MCTargetDesc/PPCAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCTargetDesc.cpp	6
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcMCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/Sparc/MCTargetDesc/SparcAsmBackend.cpp	3
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCTargetDesc.cpp	5
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmInfo.cpp	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenRegisterInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/SystemZ/MCTargetDesc/SystemZMCAsmBackend.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCTargetDesc.cpp	9
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCAsmInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/MCAsmInfoCOFF.h	3
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenRegisterInfo.inc	1
/src/keystone/llvm/include/llvm/Support/MathExtras.h	7
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86MCCodeEmitter.cpp	2
/src/keystone/llvm/lib/Target/X86/MCTargetDesc/X86AsmBackend.cpp	8
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCTargetDesc.cpp	7
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCAsmInfo.cpp	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenInstrInfo.inc	1
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenRegisterInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.cpp	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCSubtargetInfo.h	4
/src/keystone/llvm/lib/Target/RISCV/Utils/RISCVBaseInfo.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVMCCodeEmitter.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenSubtargetInfo.inc	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVELFStreamer.cpp	2
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCStreamer.cpp	4
/src/keystone/llvm/include/llvm/MC/MCStreamer.h	4
/src/keystone/llvm/include/llvm/MC/MCObjectStreamer.h	1
/src/keystone/llvm/include/llvm/MC/MCAssembler.h	5
/src/keystone/llvm/keystone/../lib/Target/RISCV/MCTargetDesc/RISCVAsmBackend.h	1
/src/keystone/llvm/lib/Target/RISCV/MCTargetDesc/RISCVTargetStreamer.h	1
/src/keystone/llvm/lib/Target/AArch64/AsmParser/AArch64AsmParser.cpp	2
/src/keystone/llvm/lib/MC/MCParser/MCTargetAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParserExtension.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringMap.h	73
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmParserExtension.h	2
/src/keystone/llvm/lib/Target/AArch64/MCTargetDesc/AArch64TargetStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/ConstantPools.h	1
/src/keystone/llvm/include/llvm/ADT/MapVector.h	1
/src/keystone/llvm/keystone/../lib/Target/AArch64/AArch64GenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/MC/MCParser/MCTargetAsmParser.h	2
/src/keystone/llvm/include/llvm/Support/Allocator.h	34
/src/keystone/llvm/lib/Target/ARM/AsmParser/ARMAsmParser.cpp	4
/src/keystone/llvm/lib/Target/ARM/MCTargetDesc/ARMTargetStreamer.cpp	1
/src/keystone/llvm/keystone/../lib/Target/ARM/ARMGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Hexagon/AsmParser/HexagonAsmParser.cpp	2
/src/keystone/llvm/lib/Target/Hexagon/MCTargetDesc/HexagonMCInstrInfo.cpp	1
/src/keystone/llvm/include/llvm/MC/MCInst.h	6
/src/keystone/llvm/include/llvm/Support/SMLoc.h	1
/src/keystone/llvm/keystone/../lib/Target/Hexagon/HexagonGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Mips/AsmParser/MipsAsmParser.cpp	3
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.cpp	1
/src/keystone/llvm/lib/Target/Mips/MCTargetDesc/MipsABIInfo.h	6
/src/keystone/llvm/keystone/../lib/Target/Mips/MipsGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/STLExtras.h	2
/src/keystone/llvm/lib/Target/PowerPC/AsmParser/PPCAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/PowerPC/PPCGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/Sparc/AsmParser/SparcAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/Sparc/SparcGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/SystemZ/AsmParser/SystemZAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/SystemZ/SystemZGenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/X86/X86GenAsmMatcher.inc	1
/src/keystone/llvm/lib/Target/X86/AsmParser/X86AsmInstrumentation.cpp	2
/src/keystone/llvm/lib/Target/RISCV/AsmParser/RISCVAsmParser.cpp	2
/src/keystone/llvm/keystone/../lib/Target/RISCV/RISCVGenAsmMatcher.inc	1
/src/keystone/llvm/include/llvm/ADT/iterator_range.h	4
/src/keystone/llvm/include/llvm/MC/MCAsmBackend.h	1
/src/keystone/llvm/include/llvm/MC/MCTargetOptionsCommandFlags.h	1
/src/keystone/llvm/keystone/EVMMapping.cpp	1
/src/keystone/llvm/lib/MC/MCContext.cpp	12
/src/keystone/llvm/include/llvm/MC/MCCodeView.h	1
/src/keystone/llvm/include/llvm/ADT/SetVector.h	3
/src/keystone/llvm/include/llvm/ADT/DenseSet.h	5
/src/keystone/llvm/lib/Support/Unix/Path.inc	4
/src/keystone/llvm/include/llvm/Support/FileSystem.h	5
/src/keystone/llvm/lib/Support/Path.cpp	9
/src/keystone/llvm/include/llvm/Support/Path.h	4
/src/keystone/llvm/include/llvm/Support/AlignOf.h	9
/src/keystone/llvm/include/llvm/MC/MCSectionMachO.h	1
/src/keystone/llvm/lib/MC/MCSection.cpp	2
/src/keystone/llvm/include/llvm/ADT/ilist.h	27
/src/keystone/llvm/lib/MC/MCFragment.cpp	5
/src/keystone/llvm/include/llvm/ADT/ilist_node.h	7
/src/keystone/llvm/include/llvm/MC/MCSection.h	3
/src/keystone/llvm/include/llvm/Support/Casting.h	88
/src/keystone/llvm/include/llvm/MC/MCFragment.h	31
/src/keystone/llvm/lib/MC/MCSectionELF.cpp	1
/src/keystone/llvm/lib/MC/MCSectionCOFF.cpp	1
/src/keystone/llvm/lib/MC/MCObjectFileInfo.cpp	5
/src/keystone/llvm/include/llvm/MC/SectionKind.h	13
/src/keystone/llvm/lib/Support/StringMap.cpp	3
/src/keystone/llvm/include/llvm/ADT/StringExtras.h	1
/src/keystone/llvm/lib/MC/MCSymbol.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSymbolCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSymbol.h	7
/src/keystone/llvm/include/llvm/ADT/PointerIntPair.h	5
/src/keystone/llvm/include/llvm/MC/MCSymbolELF.h	2
/src/keystone/llvm/include/llvm/MC/MCSymbolMachO.h	1
/src/keystone/llvm/lib/MC/MCSectionMachO.cpp	1
/src/keystone/llvm/include/llvm/MC/MCSectionCOFF.h	1
/src/keystone/llvm/include/llvm/MC/MCSectionELF.h	1
/src/keystone/llvm/lib/MC/MCSymbolELF.cpp	1
/src/keystone/llvm/lib/MC/MCELFStreamer.cpp	1
/src/keystone/llvm/include/llvm/MC/MCELFStreamer.h	1
/src/keystone/llvm/lib/MC/MCObjectStreamer.cpp	2
/src/keystone/llvm/lib/MC/MCAssembler.cpp	2
/src/keystone/llvm/include/llvm/ADT/SmallPtrSet.h	8
/src/keystone/llvm/lib/Support/SmallPtrSet.cpp	1
/src/keystone/llvm/include/llvm/MC/MCLinkerOptimizationHint.h	3
/src/keystone/llvm/include/llvm/MC/MCWinEH.h	1
/src/keystone/llvm/lib/Support/MemoryBuffer.cpp	5
/src/keystone/llvm/include/llvm/Support/MemoryBuffer.h	3
/src/keystone/llvm/include/llvm/Support/ErrorOr.h	8
/src/keystone/llvm/lib/MC/MCParser/AsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmParser.cpp	3
/src/keystone/llvm/lib/MC/MCParser/AsmLexer.cpp	3
/src/keystone/llvm/lib/MC/MCParser/MCAsmLexer.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/MCAsmLexer.h	3
/src/keystone/llvm/include/llvm/ADT/APInt.h	8
/src/keystone/llvm/lib/Support/APInt.cpp	2
/src/keystone/llvm/include/llvm/MC/MCParser/AsmCond.h	1
/src/keystone/llvm/lib/MC/MCParser/DarwinAsmParser.cpp	2