High level conclusions

Fuzzers reach 24.55% of cyclomatic complexity.

Fuzzers reach 21.22% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

2715 / 12790

Cyclomatic complexity statically reachable by fuzzers

19738 / 80375

Runtime code coverage of functions

2430 / 12790

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: csv_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	12	100.%
All colors	12	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	0	csv_parse_impl	call site: 00004	/src/tarantool/src/lib/csv/csv.c:128
0	0	None	0	0	csv_parse_impl	call site: 00007	/src/tarantool/src/lib/csv/csv.c:142
0	0	None	0	0	csv_parse_impl	call site: 00007	/src/tarantool/src/lib/csv/csv.c:196

Runtime coverage analysis

Covered functions

9

Functions that are reachable but not covered

2

Reachable functions

9

Percentage of reachable functions covered

77.78%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/csv_fuzzer.c	1
/src/tarantool/src/lib/csv/csv.c	6

Fuzzer: decimal_to_int64_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6	15.7%
gold	[1:9]	0	0.0%
yellow	[10:29]	5	13.1%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	27	71.0%
All colors	38	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2	2	1 : View List ['decSetMaxValue']	2	2	decSetOverflow	call site: 00016	/src/tarantool/third_party/decNumber/decNumber.c:7482
0	121	1 : View List ['decSetSubnormal']	0	192	decFinalize	call site: 00021	/src/tarantool/third_party/decNumber/decNumber.c:7407
0	0	None	0	44	decCompare	call site: 00021	/src/tarantool/third_party/decNumber/decNumber.c:6281
0	0	None	0	44	decCompare	call site: 00021	/src/tarantool/third_party/decNumber/decNumber.c:6306
0	0	1 : View List ['malloc']	0	24	decUnitCompare	call site: 00022	/src/tarantool/third_party/decNumber/decNumber.c:6371
0	0	None	0	24	decApplyRound	call site: 00014	/src/tarantool/third_party/decNumber/decNumber.c:7260
0	0	None	0	12	decFinalize	call site: 00027	/src/tarantool/third_party/decNumber/decNumber.c:7427
0	0	None	0	0	decUnitAddSub	call site: 00018	/src/tarantool/third_party/decNumber/decNumber.c:6464
0	0	None	0	0	decUnitAddSub	call site: 00018	/src/tarantool/third_party/decNumber/decNumber.c:6469
0	0	None	0	0	decUnitAddSub	call site: 00018	/src/tarantool/third_party/decNumber/decNumber.c:6473
0	0	None	0	0	decUnitAddSub	call site: 00018	/src/tarantool/third_party/decNumber/decNumber.c:6513
0	0	None	0	0	decUnitAddSub	call site: 00018	/src/tarantool/third_party/decNumber/decNumber.c:6565

Runtime coverage analysis

Covered functions

19

Functions that are reachable but not covered

6

Reachable functions

25

Percentage of reachable functions covered

76.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/decimal_to_int64_fuzzer.c	1
/src/tarantool/src/trivia/util.h	1
/src/tarantool/src/lib/core/decimal.c	2
/src/tarantool/third_party/decNumber/decNumber.c	14
/src/tarantool/third_party/decNumber/decContext.c	3

Fuzzer: vclock_from_string_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	5	15.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	4	12.5%
lawngreen	50+	23	71.8%
All colors	32	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
2	2	LLVMFuzzerTestOneInput	call site: 00002	fprintf
2	28	vclock_iterator_next	call site: 00028	load_u64
1	25	vclock_iterator_init	call site: 00025	load_u64

Runtime coverage analysis

Covered functions

10

Functions that are reachable but not covered

10

Reachable functions

20

Percentage of reachable functions covered

50.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/vclock_from_string_fuzzer.c	1
/src/tarantool/src/trivia/util.h	1
/src/tarantool/src/lib/vclock/vclock.h	5
/src/tarantool/src/lib/vclock/vclock.c	1
/src/tarantool/src/lib/bit/bit.h	4

Fuzzer: http_parser_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	6	100.%
All colors	6	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	0	http_parse_status_line	call site: 00005	/src/tarantool/src/lib/http_parser/http_parser.c:85
0	0	None	0	0	http_parse_status_line	call site: 00005	/src/tarantool/src/lib/http_parser/http_parser.c:91
0	0	None	0	0	http_parse_status_line	call site: 00005	/src/tarantool/src/lib/http_parser/http_parser.c:97
0	0	None	0	0	http_parse_status_line	call site: 00005	/src/tarantool/src/lib/http_parser/http_parser.c:103
0	0	None	0	0	http_parse_status_line	call site: 00005	/src/tarantool/src/lib/http_parser/http_parser.c:109

Runtime coverage analysis

Covered functions

4

Functions that are reachable but not covered

2

Reachable functions

6

Percentage of reachable functions covered

66.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/http_parser_fuzzer.c	1
/src/tarantool/src/lib/http_parser/http_parser.c	3

Fuzzer: swim_proto_meta_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	265	44.8%
gold	[1:9]	17	2.87%
yellow	[10:29]	6	1.01%
greenyellow	[30:49]	20	3.38%
lawngreen	50+	283	47.8%
All colors	591	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
569	569	1 : View List ['cord_on_demand']	582	582	fiber_set_name_n	call site: 00205	/src/tarantool/src/lib/core/fiber.c:1228
569	569	1 : View List ['fiber_delete']	569	569	cord_collect_garbage	call site: 00343	/src/tarantool/src/lib/core/fiber.c:1918
23	23	4 : View List ['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1810']	23	23	clock_monotonic	call site: 00467	/src/tarantool/src/lib/core/clock.c:51
23	23	4 : View List ['__errno_location', 'exit', 'say_log_level_is_enabled.1527', 'tt_strerror']	23	23	clock_lowres_signal_init	call site: 00481	/src/tarantool/src/lib/core/clock_lowres.c:69
23	23	3 : View List ['_say_strerror', '__errno_location', 'say_log_level_is_enabled.373']	23	23	signal_stack_free	call site: 00283	/src/tarantool/src/lib/core/fiber.c:260
21	21	1 : View List ['mmap_checked']	21	34	slab_arena_create	call site: 00012	/src/tarantool/src/lib/small/small/slab_arena.c:204
13	13	3 : View List ['realloc', 'panic', 'malloc']	13	13	fiber_set_name_n	call site: 00206	/src/tarantool/src/lib/core/fiber.c:1231
11	11	1 : View List ['panic']	11	11	error_ref	call site: 00431	/src/tarantool/src/lib/core/diag.c:45
11	11	1 : View List ['panic']	11	11	fiber_init	call site: 00039	/src/tarantool/src/lib/core/fiber.c:2266
10	10	5 : View List ['sigemptyset', 'pthread_sigmask', 'sigdelset', 'sigaddset', 'signalfd']	10	10	ev_signal_stop	call site: 00302	/src/tarantool/third_party/libev/ev.c:4711
8	8	1 : View List ['tt_pthread_setname']	8	8	cord_set_name	call site: 00217	/src/tarantool/src/lib/core/fiber.c:2241
6	6	3 : View List ['sigaddset', 'sigemptyset', 'pthread_sigmask']	6	6	ev_signal_start	call site: 00144	/src/tarantool/third_party/libev/ev.c:4680

Runtime coverage analysis

Covered functions

147

Functions that are reachable but not covered

141

Reachable functions

277

Percentage of reachable functions covered

49.1%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/swim_proto_meta_fuzzer.c	1
/src/tarantool/src/lib/core/memory.c	2
/src/tarantool/src/lib/small/include/small/quota.h	3
/src/tarantool/src/lib/small/small/slab_arena.c	6
/src/tarantool/src/lib/small/include/small/lf_lifo.h	4
/src/tarantool/src/lib/small/include/small/util.h	4
/src/tarantool/src/lib/core/fiber.c	25
/src/tarantool/third_party/libev/ev.c	32
/src/tarantool/third_party/libev/ev_iouring.c	5
/src/tarantool/third_party/libev/ev_epoll.c	3
/src/tarantool/third_party/libev/ev_poll.c	2
/src/tarantool/third_party/libev/ev_select.c	2
/src/tarantool/src/lib/core/say.c	2
/src/tarantool/src/lib/core/say.h	1
/src/tarantool/src/trivia/util.h	3
/src/tarantool/src/lib/core/cord_on_demand.cc	4
/src/tarantool/src/lib/small/include/small/slab_cache.h	9
/src/tarantool/src/lib/small/small/slab_cache.c	11
/src/tarantool/src/lib/small/include/small/slab_list.h	2
/src/tarantool/src/lib/small/include/small/mempool.h	8
/src/tarantool/src/lib/small/small/mempool.c	8
/src/tarantool/src/lib/salad/mhash.h	2
/src/tarantool/src/lib/core/diag.h	5
/src/tarantool/src/lib/small/include/small/region.h	2
/src/tarantool/src/lib/core/fiber.h	2
/src/tarantool/src/tt_pthread.h	1
/src/tarantool/src/lib/core/trigger.cc	3
/src/tarantool/src/lib/core/tt_strerror.c	1
/src/tarantool/src/lib/core/tt_static.h	1
/src/tarantool/src/lib/small/include/small/static.h	3
/src/tarantool/third_party/libev/ev.h	2
/src/tarantool/src/lib/core/trigger.h	1
/src/tarantool/src/lib/small/small/region.c	1
/src/tarantool/src/lib/core/exception.cc	12
/src/tarantool/src/lib/core/diag.c	8
/src/tarantool/src/lib/core/error_payload.c	2
/src/tarantool/src/lib/core/exception.h	1
/src/tarantool/src/lib/core/clock_lowres.c	1
/src/tarantool/src/lib/core/clock.c	1
/src/tarantool/src/lib/core/tt_sigaction.c	1
/src/tarantool/src/lib/swim/swim_proto.c	7
/src/tarantool/src/lib/msgpuck/msgpuck.h	8
/src/tarantool/src/lib/swim/swim_proto.h	1

Fuzzer: xrow_decode_call_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	320	61.3%
gold	[1:9]	66	12.6%
yellow	[10:29]	2	0.38%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	134	25.6%
All colors	522	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
569	569	1 : View List ['cord_on_demand']	582	582	fiber_set_name_n	call site: 00217	/src/tarantool/src/lib/core/fiber.c:1228
23	23	4 : View List ['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1810']	23	23	clock_monotonic	call site: 00000	/src/tarantool/src/lib/core/clock.c:51
23	23	4 : View List ['__errno_location', 'exit', 'say_log_level_is_enabled.1527', 'tt_strerror']	23	23	clock_lowres_signal_init	call site: 00000	/src/tarantool/src/lib/core/clock_lowres.c:69
21	21	1 : View List ['mmap_checked']	21	34	slab_arena_create	call site: 00000	/src/tarantool/src/lib/small/small/slab_arena.c:204
13	13	3 : View List ['realloc', 'panic', 'malloc']	13	13	fiber_set_name_n	call site: 00218	/src/tarantool/src/lib/core/fiber.c:1231
11	11	1 : View List ['panic']	11	11	error_ref	call site: 00450	/src/tarantool/src/lib/core/diag.c:45
11	11	1 : View List ['panic']	11	11	fiber_init	call site: 00000	/src/tarantool/src/lib/core/fiber.c:2266
8	8	1 : View List ['tt_pthread_setname']	8	8	cord_set_name	call site: 00233	/src/tarantool/src/lib/core/fiber.c:2241
6	6	3 : View List ['sigaddset', 'sigemptyset', 'pthread_sigmask']	6	6	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4680
4	4	2 : View List ['atoi', 'getenv']	81	189	loop_init	call site: 00000	/src/tarantool/third_party/libev/ev.c:3302
4	4	2 : View List ['close', 'dup2']	4	8	evpipe_alloc	call site: 00000	/src/tarantool/third_party/libev/ev.c:2764
2	39	4 : View List ['ev_io_start', '__errno_location', 'ev_unref', 'fd_intern']	24	134	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4629

Runtime coverage analysis

Covered functions

145

Functions that are reachable but not covered

154

Reachable functions

255

Percentage of reachable functions covered

39.61%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/xrow_decode_call_fuzzer.c	1
/src/tarantool/src/lib/msgpuck/msgpuck.h	22
/src/tarantool/src/box/xrow.c	2
/src/tarantool/src/lib/core/say.h	1
/src/tarantool/src/box/error.cc	4
/src/tarantool/src/lib/core/exception.cc	10
/src/tarantool/src/trivia/util.h	3
/src/tarantool/src/lib/core/diag.c	8
/src/tarantool/src/lib/core/error_payload.c	7
/src/tarantool/src/lib/core/rmean.c	1
/src/tarantool/src/box/errcode.h	1
/src/tarantool/src/lib/core/diag.h	9
/src/tarantool/src/lib/salad/grp_alloc.h	9
/src/tarantool/src/box/tuple.h	3
/src/tarantool/src/box/error.h	1
/src/tarantool/src/lib/core/cord_on_demand.cc	4
/src/tarantool/src/lib/core/fiber.c	21
/src/tarantool/src/lib/small/include/small/slab_cache.h	9
/src/tarantool/src/lib/small/small/slab_cache.c	11
/src/tarantool/src/lib/small/include/small/util.h	3
/src/tarantool/src/lib/small/include/small/slab_list.h	2
/src/tarantool/src/lib/small/include/small/mempool.h	8
/src/tarantool/src/lib/small/small/mempool.c	8
/src/tarantool/src/lib/salad/mhash.h	2
/src/tarantool/src/lib/small/include/small/region.h	2
/src/tarantool/src/lib/core/fiber.h	1
/src/tarantool/src/lib/core/say.c	2
/src/tarantool/src/tt_pthread.h	1
/src/tarantool/src/lib/core/trigger.cc	3
/src/tarantool/src/lib/core/tt_strerror.c	1
/src/tarantool/src/lib/core/tt_static.h	1
/src/tarantool/src/lib/small/include/small/static.h	3
/src/tarantool/src/lib/small/small/slab_arena.c	1
/src/tarantool/src/lib/small/include/small/lf_lifo.h	3
/src/tarantool/third_party/libev/ev.c	14
/src/tarantool/third_party/libev/ev.h	2
/src/tarantool/third_party/libev/ev_iouring.c	2
/src/tarantool/third_party/libev/ev_epoll.c	1
/src/tarantool/third_party/libev/ev_poll.c	1
/src/tarantool/third_party/libev/ev_select.c	1
/src/tarantool/src/lib/core/trigger.h	1
/src/tarantool/src/lib/small/small/region.c	1
/src/tarantool/src/lib/small/include/small/quota.h	1
/src/tarantool/src/lib/core/exception.h	1
/src/tarantool/src/box/iproto_constants.h	1

Fuzzer: xrow_decode_raft_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	365	68.9%
gold	[1:9]	66	12.4%
yellow	[10:29]	1	0.18%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	97	18.3%
All colors	529	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
569	569	1 : View List ['cord_on_demand']	582	582	fiber_set_name_n	call site: 00217	/src/tarantool/src/lib/core/fiber.c:1228
244	244	5 : View List ['mp_decode_map', 'mp_decode_bool', 'mp_next', 'mp_decode_uint', 'mp_decode_vclock_ignore0']	252	1932	xrow_decode_raft	call site: 00019	/src/tarantool/src/box/xrow.c:1488
23	23	4 : View List ['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1810']	23	23	clock_monotonic	call site: 00000	/src/tarantool/src/lib/core/clock.c:51
23	23	4 : View List ['__errno_location', 'exit', 'say_log_level_is_enabled.1527', 'tt_strerror']	23	23	clock_lowres_signal_init	call site: 00000	/src/tarantool/src/lib/core/clock_lowres.c:69
21	21	1 : View List ['mmap_checked']	21	34	slab_arena_create	call site: 00000	/src/tarantool/src/lib/small/small/slab_arena.c:204
13	13	3 : View List ['realloc', 'panic', 'malloc']	13	13	fiber_set_name_n	call site: 00218	/src/tarantool/src/lib/core/fiber.c:1231
11	11	1 : View List ['panic']	11	11	error_ref	call site: 00450	/src/tarantool/src/lib/core/diag.c:45
11	11	1 : View List ['panic']	11	11	fiber_init	call site: 00000	/src/tarantool/src/lib/core/fiber.c:2266
8	8	1 : View List ['tt_pthread_setname']	8	8	cord_set_name	call site: 00233	/src/tarantool/src/lib/core/fiber.c:2241
6	6	3 : View List ['sigaddset', 'sigemptyset', 'pthread_sigmask']	6	6	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4680
4	4	2 : View List ['atoi', 'getenv']	81	189	loop_init	call site: 00000	/src/tarantool/third_party/libev/ev.c:3302
4	4	2 : View List ['close', 'dup2']	4	8	evpipe_alloc	call site: 00000	/src/tarantool/third_party/libev/ev.c:2764

Runtime coverage analysis

Covered functions

138

Functions that are reachable but not covered

166

Reachable functions

261

Percentage of reachable functions covered

36.4%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/xrow_decode_raft_fuzzer.c	1
/src/tarantool/src/lib/msgpuck/msgpuck.h	23
/src/tarantool/src/box/xrow.c	4
/src/tarantool/src/lib/core/say.h	1
/src/tarantool/src/box/error.cc	4
/src/tarantool/src/lib/core/exception.cc	10
/src/tarantool/src/trivia/util.h	3
/src/tarantool/src/lib/core/diag.c	8
/src/tarantool/src/lib/core/error_payload.c	7
/src/tarantool/src/lib/core/rmean.c	1
/src/tarantool/src/box/errcode.h	1
/src/tarantool/src/lib/core/diag.h	9
/src/tarantool/src/lib/salad/grp_alloc.h	9
/src/tarantool/src/box/tuple.h	3
/src/tarantool/src/box/error.h	1
/src/tarantool/src/lib/core/cord_on_demand.cc	4
/src/tarantool/src/lib/core/fiber.c	21
/src/tarantool/src/lib/small/include/small/slab_cache.h	9
/src/tarantool/src/lib/small/small/slab_cache.c	11
/src/tarantool/src/lib/small/include/small/util.h	3
/src/tarantool/src/lib/small/include/small/slab_list.h	2
/src/tarantool/src/lib/small/include/small/mempool.h	8
/src/tarantool/src/lib/small/small/mempool.c	8
/src/tarantool/src/lib/salad/mhash.h	2
/src/tarantool/src/lib/small/include/small/region.h	2
/src/tarantool/src/lib/core/fiber.h	1
/src/tarantool/src/lib/core/say.c	2
/src/tarantool/src/tt_pthread.h	1
/src/tarantool/src/lib/core/trigger.cc	3
/src/tarantool/src/lib/core/tt_strerror.c	1
/src/tarantool/src/lib/core/tt_static.h	1
/src/tarantool/src/lib/small/include/small/static.h	3
/src/tarantool/src/lib/small/small/slab_arena.c	1
/src/tarantool/src/lib/small/include/small/lf_lifo.h	3
/src/tarantool/third_party/libev/ev.c	14
/src/tarantool/third_party/libev/ev.h	2
/src/tarantool/third_party/libev/ev_iouring.c	2
/src/tarantool/third_party/libev/ev_epoll.c	1
/src/tarantool/third_party/libev/ev_poll.c	1
/src/tarantool/third_party/libev/ev_select.c	1
/src/tarantool/src/lib/core/trigger.h	1
/src/tarantool/src/lib/small/small/region.c	1
/src/tarantool/src/lib/small/include/small/quota.h	1
/src/tarantool/src/lib/core/exception.h	1
/src/tarantool/src/lib/vclock/vclock.h	3
/src/tarantool/src/lib/vclock/vclock.c	1

Fuzzer: xrow_decode_sql_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	310	59.1%
gold	[1:9]	66	12.5%
yellow	[10:29]	10	1.90%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	138	26.3%
All colors	524	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
569	569	1 : View List ['cord_on_demand']	582	582	fiber_set_name_n	call site: 00218	/src/tarantool/src/lib/core/fiber.c:1228
23	23	4 : View List ['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1810']	23	23	clock_monotonic	call site: 00000	/src/tarantool/src/lib/core/clock.c:51
23	23	4 : View List ['__errno_location', 'exit', 'say_log_level_is_enabled.1527', 'tt_strerror']	23	23	clock_lowres_signal_init	call site: 00000	/src/tarantool/src/lib/core/clock_lowres.c:69
21	21	1 : View List ['mmap_checked']	21	34	slab_arena_create	call site: 00000	/src/tarantool/src/lib/small/small/slab_arena.c:204
13	13	3 : View List ['realloc', 'panic', 'malloc']	13	13	fiber_set_name_n	call site: 00219	/src/tarantool/src/lib/core/fiber.c:1231
11	11	1 : View List ['panic']	11	11	error_ref	call site: 00451	/src/tarantool/src/lib/core/diag.c:45
11	11	1 : View List ['panic']	11	11	fiber_init	call site: 00000	/src/tarantool/src/lib/core/fiber.c:2266
8	8	1 : View List ['tt_pthread_setname']	8	8	cord_set_name	call site: 00234	/src/tarantool/src/lib/core/fiber.c:2241
6	6	3 : View List ['sigaddset', 'sigemptyset', 'pthread_sigmask']	6	6	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4680
4	4	2 : View List ['atoi', 'getenv']	81	189	loop_init	call site: 00000	/src/tarantool/third_party/libev/ev.c:3302
4	4	2 : View List ['close', 'dup2']	4	8	evpipe_alloc	call site: 00000	/src/tarantool/third_party/libev/ev.c:2764
2	39	4 : View List ['ev_io_start', '__errno_location', 'ev_unref', 'fd_intern']	24	134	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4629

Runtime coverage analysis

Covered functions

148

Functions that are reachable but not covered

153

Reachable functions

257

Percentage of reachable functions covered

40.47%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/xrow_decode_sql_fuzzer.c	1
/src/tarantool/src/lib/msgpuck/msgpuck.h	21
/src/tarantool/src/box/xrow.c	2
/src/tarantool/src/lib/core/say.h	1
/src/tarantool/src/box/error.cc	4
/src/tarantool/src/lib/core/exception.cc	10
/src/tarantool/src/trivia/util.h	3
/src/tarantool/src/lib/core/diag.c	8
/src/tarantool/src/lib/core/error_payload.c	7
/src/tarantool/src/lib/core/rmean.c	1
/src/tarantool/src/box/errcode.h	1
/src/tarantool/src/lib/core/diag.h	9
/src/tarantool/src/lib/salad/grp_alloc.h	9
/src/tarantool/src/box/tuple.h	3
/src/tarantool/src/box/error.h	1
/src/tarantool/src/lib/core/cord_on_demand.cc	4
/src/tarantool/src/lib/core/fiber.c	21
/src/tarantool/src/lib/small/include/small/slab_cache.h	9
/src/tarantool/src/lib/small/small/slab_cache.c	11
/src/tarantool/src/lib/small/include/small/util.h	3
/src/tarantool/src/lib/small/include/small/slab_list.h	2
/src/tarantool/src/lib/small/include/small/mempool.h	8
/src/tarantool/src/lib/small/small/mempool.c	8
/src/tarantool/src/lib/salad/mhash.h	2
/src/tarantool/src/lib/small/include/small/region.h	2
/src/tarantool/src/lib/core/fiber.h	1
/src/tarantool/src/lib/core/say.c	2
/src/tarantool/src/tt_pthread.h	1
/src/tarantool/src/lib/core/trigger.cc	3
/src/tarantool/src/lib/core/tt_strerror.c	1
/src/tarantool/src/lib/core/tt_static.h	3
/src/tarantool/src/lib/small/include/small/static.h	4
/src/tarantool/src/lib/small/small/slab_arena.c	1
/src/tarantool/src/lib/small/include/small/lf_lifo.h	3
/src/tarantool/third_party/libev/ev.c	14
/src/tarantool/third_party/libev/ev.h	2
/src/tarantool/third_party/libev/ev_iouring.c	2
/src/tarantool/third_party/libev/ev_epoll.c	1
/src/tarantool/third_party/libev/ev_poll.c	1
/src/tarantool/third_party/libev/ev_select.c	1
/src/tarantool/src/lib/core/trigger.h	1
/src/tarantool/src/lib/small/small/region.c	1
/src/tarantool/src/lib/small/include/small/quota.h	1
/src/tarantool/src/lib/core/exception.h	1
/src/tarantool/src/box/iproto_constants.h	1

Fuzzer: swim_proto_member_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	266	42.9%
gold	[1:9]	23	3.70%
yellow	[10:29]	20	3.22%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	311	50.1%
All colors	620	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
569	569	1 : View List ['cord_on_demand']	582	582	fiber_set_name_n	call site: 00205	/src/tarantool/src/lib/core/fiber.c:1228
569	569	1 : View List ['fiber_delete']	569	569	cord_collect_garbage	call site: 00343	/src/tarantool/src/lib/core/fiber.c:1918
23	23	4 : View List ['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1810']	23	23	clock_monotonic	call site: 00467	/src/tarantool/src/lib/core/clock.c:51
23	23	4 : View List ['__errno_location', 'exit', 'say_log_level_is_enabled.1527', 'tt_strerror']	23	23	clock_lowres_signal_init	call site: 00481	/src/tarantool/src/lib/core/clock_lowres.c:69
23	23	3 : View List ['_say_strerror', '__errno_location', 'say_log_level_is_enabled.373']	23	23	signal_stack_free	call site: 00283	/src/tarantool/src/lib/core/fiber.c:260
21	21	1 : View List ['mmap_checked']	21	34	slab_arena_create	call site: 00012	/src/tarantool/src/lib/small/small/slab_arena.c:204
13	13	3 : View List ['realloc', 'panic', 'malloc']	13	13	fiber_set_name_n	call site: 00206	/src/tarantool/src/lib/core/fiber.c:1231
11	11	1 : View List ['panic']	11	11	error_ref	call site: 00431	/src/tarantool/src/lib/core/diag.c:45
11	11	1 : View List ['panic']	11	11	fiber_init	call site: 00039	/src/tarantool/src/lib/core/fiber.c:2266
10	10	5 : View List ['sigemptyset', 'pthread_sigmask', 'sigdelset', 'sigaddset', 'signalfd']	10	10	ev_signal_stop	call site: 00302	/src/tarantool/third_party/libev/ev.c:4711
8	8	1 : View List ['tt_pthread_setname']	8	8	cord_set_name	call site: 00217	/src/tarantool/src/lib/core/fiber.c:2241
6	6	3 : View List ['sigaddset', 'sigemptyset', 'pthread_sigmask']	6	6	ev_signal_start	call site: 00144	/src/tarantool/third_party/libev/ev.c:4680

Runtime coverage analysis

Covered functions

155

Functions that are reachable but not covered

142

Reachable functions

286

Percentage of reachable functions covered

50.35%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/swim_proto_member_fuzzer.c	1
/src/tarantool/src/lib/core/memory.c	2
/src/tarantool/src/lib/small/include/small/quota.h	3
/src/tarantool/src/lib/small/small/slab_arena.c	6
/src/tarantool/src/lib/small/include/small/lf_lifo.h	4
/src/tarantool/src/lib/small/include/small/util.h	4
/src/tarantool/src/lib/core/fiber.c	25
/src/tarantool/third_party/libev/ev.c	32
/src/tarantool/third_party/libev/ev_iouring.c	5
/src/tarantool/third_party/libev/ev_epoll.c	3
/src/tarantool/third_party/libev/ev_poll.c	2
/src/tarantool/third_party/libev/ev_select.c	2
/src/tarantool/src/lib/core/say.c	2
/src/tarantool/src/lib/core/say.h	1
/src/tarantool/src/trivia/util.h	3
/src/tarantool/src/lib/core/cord_on_demand.cc	4
/src/tarantool/src/lib/small/include/small/slab_cache.h	9
/src/tarantool/src/lib/small/small/slab_cache.c	11
/src/tarantool/src/lib/small/include/small/slab_list.h	2
/src/tarantool/src/lib/small/include/small/mempool.h	8
/src/tarantool/src/lib/small/small/mempool.c	8
/src/tarantool/src/lib/salad/mhash.h	2
/src/tarantool/src/lib/core/diag.h	5
/src/tarantool/src/lib/small/include/small/region.h	2
/src/tarantool/src/lib/core/fiber.h	2
/src/tarantool/src/tt_pthread.h	1
/src/tarantool/src/lib/core/trigger.cc	3
/src/tarantool/src/lib/core/tt_strerror.c	1
/src/tarantool/src/lib/core/tt_static.h	1
/src/tarantool/src/lib/small/include/small/static.h	3
/src/tarantool/third_party/libev/ev.h	2
/src/tarantool/src/lib/core/trigger.h	1
/src/tarantool/src/lib/small/small/region.c	1
/src/tarantool/src/lib/core/exception.cc	12
/src/tarantool/src/lib/core/diag.c	8
/src/tarantool/src/lib/core/error_payload.c	2
/src/tarantool/src/lib/core/exception.h	1
/src/tarantool/src/lib/core/clock_lowres.c	1
/src/tarantool/src/lib/core/clock.c	1
/src/tarantool/src/lib/core/tt_sigaction.c	1
/src/tarantool/src/lib/swim/swim_proto.c	10
/src/tarantool/src/lib/msgpuck/msgpuck.h	11
/src/tarantool/src/lib/core/tt_uuid.h	2
/src/tarantool/src/lib/swim/swim_proto.h	1

Fuzzer: xrow_decode_id_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	315	59.7%
gold	[1:9]	66	12.5%
yellow	[10:29]	2	0.37%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	144	27.3%
All colors	527	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
569	569	1 : View List ['cord_on_demand']	582	582	fiber_set_name_n	call site: 00217	/src/tarantool/src/lib/core/fiber.c:1228
23	23	4 : View List ['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1810']	23	23	clock_monotonic	call site: 00000	/src/tarantool/src/lib/core/clock.c:51
23	23	4 : View List ['__errno_location', 'exit', 'say_log_level_is_enabled.1527', 'tt_strerror']	23	23	clock_lowres_signal_init	call site: 00000	/src/tarantool/src/lib/core/clock_lowres.c:69
21	21	1 : View List ['mmap_checked']	21	34	slab_arena_create	call site: 00000	/src/tarantool/src/lib/small/small/slab_arena.c:204
13	13	3 : View List ['realloc', 'panic', 'malloc']	13	13	fiber_set_name_n	call site: 00218	/src/tarantool/src/lib/core/fiber.c:1231
11	11	1 : View List ['panic']	11	11	error_ref	call site: 00450	/src/tarantool/src/lib/core/diag.c:45
11	11	1 : View List ['panic']	11	11	fiber_init	call site: 00000	/src/tarantool/src/lib/core/fiber.c:2266
8	8	1 : View List ['tt_pthread_setname']	8	8	cord_set_name	call site: 00233	/src/tarantool/src/lib/core/fiber.c:2241
6	6	3 : View List ['sigaddset', 'sigemptyset', 'pthread_sigmask']	6	6	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4680
4	4	2 : View List ['atoi', 'getenv']	81	189	loop_init	call site: 00000	/src/tarantool/third_party/libev/ev.c:3302
4	4	2 : View List ['close', 'dup2']	4	8	evpipe_alloc	call site: 00000	/src/tarantool/third_party/libev/ev.c:2764
2	39	4 : View List ['ev_io_start', '__errno_location', 'ev_unref', 'fd_intern']	24	134	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4629

Runtime coverage analysis

Covered functions

155

Functions that are reachable but not covered

154

Reachable functions

261

Percentage of reachable functions covered

41.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/xrow_decode_id_fuzzer.c	1
/src/tarantool/src/lib/msgpuck/msgpuck.h	25
/src/tarantool/src/box/xrow.c	2
/src/tarantool/src/lib/core/say.h	1
/src/tarantool/src/box/error.cc	4
/src/tarantool/src/lib/core/exception.cc	10
/src/tarantool/src/trivia/util.h	3
/src/tarantool/src/lib/core/diag.c	8
/src/tarantool/src/lib/core/error_payload.c	7
/src/tarantool/src/lib/core/rmean.c	1
/src/tarantool/src/box/errcode.h	1
/src/tarantool/src/lib/core/diag.h	9
/src/tarantool/src/lib/salad/grp_alloc.h	9
/src/tarantool/src/box/tuple.h	3
/src/tarantool/src/box/error.h	1
/src/tarantool/src/lib/core/cord_on_demand.cc	4
/src/tarantool/src/lib/core/fiber.c	21
/src/tarantool/src/lib/small/include/small/slab_cache.h	9
/src/tarantool/src/lib/small/small/slab_cache.c	11
/src/tarantool/src/lib/small/include/small/util.h	3
/src/tarantool/src/lib/small/include/small/slab_list.h	2
/src/tarantool/src/lib/small/include/small/mempool.h	8
/src/tarantool/src/lib/small/small/mempool.c	8
/src/tarantool/src/lib/salad/mhash.h	2
/src/tarantool/src/lib/small/include/small/region.h	2
/src/tarantool/src/lib/core/fiber.h	1
/src/tarantool/src/lib/core/say.c	2
/src/tarantool/src/tt_pthread.h	1
/src/tarantool/src/lib/core/trigger.cc	3
/src/tarantool/src/lib/core/tt_strerror.c	1
/src/tarantool/src/lib/core/tt_static.h	1
/src/tarantool/src/lib/small/include/small/static.h	3
/src/tarantool/src/lib/small/small/slab_arena.c	1
/src/tarantool/src/lib/small/include/small/lf_lifo.h	3
/src/tarantool/third_party/libev/ev.c	14
/src/tarantool/third_party/libev/ev.h	2
/src/tarantool/third_party/libev/ev_iouring.c	2
/src/tarantool/third_party/libev/ev_epoll.c	1
/src/tarantool/third_party/libev/ev_poll.c	1
/src/tarantool/third_party/libev/ev_select.c	1
/src/tarantool/src/lib/core/trigger.h	1
/src/tarantool/src/lib/small/small/region.c	1
/src/tarantool/src/lib/small/include/small/quota.h	1
/src/tarantool/src/lib/core/exception.h	1
/src/tarantool/src/box/iproto_features.h	2
/src/tarantool/src/box/iproto_features.c	1
/src/tarantool/src/lib/bit/bit.h	1

Fuzzer: uri_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	3	6.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	47	94.0%
All colors	50	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	0	None	0	0	uri_create	call site: 00002	/src/tarantool/src/lib/uri/uri.c:257

Runtime coverage analysis

Covered functions

11

Functions that are reachable but not covered

12

Reachable functions

23

Percentage of reachable functions covered

47.83%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/uri_fuzzer.c	1
/src/tarantool/src/lib/uri/uri.c	9
/src/tarantool/build/src/lib/uri/src/lib/uri/uri_parser.rl	1
/src/tarantool/src/trivia/util.h	1

Fuzzer: datetime_strptime_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	28	15.5%
gold	[1:9]	2	1.11%
yellow	[10:29]	5	2.77%
greenyellow	[30:49]	1	0.55%
lawngreen	50+	144	80.0%
All colors	180	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
46	8309	8 : View List ['__ctype_b_loc', 'first_wday_of', 'strlcpy', 'strncasecmp', 'tnt_strptime', 'strlen', 'timezone_tm_lookup', 'strtol']	46	8309	tnt_strptime	call site: 00021	/src/tarantool/src/lib/tzcode/strptime.c:150
46	8309	8 : View List ['__ctype_b_loc', 'first_wday_of', 'strlcpy', 'strncasecmp', 'tnt_strptime', 'strlen', 'timezone_tm_lookup', 'strtol']	46	8309	tnt_strptime	call site: 00021	/src/tarantool/src/lib/tzcode/strptime.c:169
25	25	1 : View List ['gmtsub']	25	25	localsub	call site: 00164	/src/tarantool/src/lib/tzcode/localtime.c:1431
3	3	1 : View List ['getqzname']	3	150	tzparse	call site: 00104	/src/tarantool/src/lib/tzcode/localtime.c:1106
2	2	1 : View List ['__errno_location']	2	2	tzloadbody	call site: 00082	/src/tarantool/src/lib/tzcode/localtime.c:398
2	2	1 : View List ['update_tzname_etc']	2	2	localsub	call site: 00173	/src/tarantool/src/lib/tzcode/localtime.c:1504
0	289	1 : View List ['tzload']	3	447	tzparse	call site: 00099	/src/tarantool/src/lib/tzcode/localtime.c:1092
0	56	1 : View List ['mh_strnptr_put']	0	56	mh_strnptr_put	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:319
0	12	1 : View List ['getnum']	0	12	getsecs	call site: 00101	/src/tarantool/src/lib/tzcode/localtime.c:860
0	0	None	30	467	tzloadbody	call site: 00071	/src/tarantool/src/lib/tzcode/localtime.c:346
0	0	None	30	467	tzloadbody	call site: 00071	/src/tarantool/src/lib/tzcode/localtime.c:352
0	0	None	8	439	tzloadbody	call site: 00092	/src/tarantool/src/lib/tzcode/localtime.c:489

Runtime coverage analysis

Covered functions

62

Functions that are reachable but not covered

19

Reachable functions

70

Percentage of reachable functions covered

72.86%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/datetime_strptime_fuzzer.cc	1
/src/tarantool/src/lib/core/datetime.c	5
/src/tarantool/third_party/c-dt/dt_core.c	8
/src/tarantool/third_party/c-dt/dt_tm.c	1
/src/tarantool/src/lib/tzcode/strptime.c	2
/src/tarantool/src/lib/core/util.c	1
/src/tarantool/src/lib/tzcode/timezone.c	5
/src/tarantool/src/lib/tzcode/localtime.c	29
/src/tarantool/third_party/c-dt/dt_util.c	3

Fuzzer: xrow_decode_watch_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	314	60.0%
gold	[1:9]	66	12.6%
yellow	[10:29]	2	0.38%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	141	26.9%
All colors	523	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
569	569	1 : View List ['cord_on_demand']	582	582	fiber_set_name_n	call site: 00217	/src/tarantool/src/lib/core/fiber.c:1228
23	23	4 : View List ['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1810']	23	23	clock_monotonic	call site: 00000	/src/tarantool/src/lib/core/clock.c:51
23	23	4 : View List ['__errno_location', 'exit', 'say_log_level_is_enabled.1527', 'tt_strerror']	23	23	clock_lowres_signal_init	call site: 00000	/src/tarantool/src/lib/core/clock_lowres.c:69
21	21	1 : View List ['mmap_checked']	21	34	slab_arena_create	call site: 00000	/src/tarantool/src/lib/small/small/slab_arena.c:204
13	13	3 : View List ['realloc', 'panic', 'malloc']	13	13	fiber_set_name_n	call site: 00218	/src/tarantool/src/lib/core/fiber.c:1231
11	11	1 : View List ['panic']	11	11	error_ref	call site: 00450	/src/tarantool/src/lib/core/diag.c:45
11	11	1 : View List ['panic']	11	11	fiber_init	call site: 00000	/src/tarantool/src/lib/core/fiber.c:2266
8	8	1 : View List ['tt_pthread_setname']	8	8	cord_set_name	call site: 00233	/src/tarantool/src/lib/core/fiber.c:2241
6	6	3 : View List ['sigaddset', 'sigemptyset', 'pthread_sigmask']	6	6	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4680
4	4	2 : View List ['atoi', 'getenv']	81	189	loop_init	call site: 00000	/src/tarantool/third_party/libev/ev.c:3302
4	4	2 : View List ['close', 'dup2']	4	8	evpipe_alloc	call site: 00000	/src/tarantool/third_party/libev/ev.c:2764
2	39	4 : View List ['ev_io_start', '__errno_location', 'ev_unref', 'fd_intern']	24	134	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4629

Runtime coverage analysis

Covered functions

147

Functions that are reachable but not covered

154

Reachable functions

257

Percentage of reachable functions covered

40.08%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/xrow_decode_watch_fuzzer.c	1
/src/tarantool/src/lib/msgpuck/msgpuck.h	24
/src/tarantool/src/box/xrow.c	2
/src/tarantool/src/lib/core/say.h	1
/src/tarantool/src/box/error.cc	4
/src/tarantool/src/lib/core/exception.cc	10
/src/tarantool/src/trivia/util.h	3
/src/tarantool/src/lib/core/diag.c	8
/src/tarantool/src/lib/core/error_payload.c	7
/src/tarantool/src/lib/core/rmean.c	1
/src/tarantool/src/box/errcode.h	1
/src/tarantool/src/lib/core/diag.h	9
/src/tarantool/src/lib/salad/grp_alloc.h	9
/src/tarantool/src/box/tuple.h	3
/src/tarantool/src/box/error.h	1
/src/tarantool/src/lib/core/cord_on_demand.cc	4
/src/tarantool/src/lib/core/fiber.c	21
/src/tarantool/src/lib/small/include/small/slab_cache.h	9
/src/tarantool/src/lib/small/small/slab_cache.c	11
/src/tarantool/src/lib/small/include/small/util.h	3
/src/tarantool/src/lib/small/include/small/slab_list.h	2
/src/tarantool/src/lib/small/include/small/mempool.h	8
/src/tarantool/src/lib/small/small/mempool.c	8
/src/tarantool/src/lib/salad/mhash.h	2
/src/tarantool/src/lib/small/include/small/region.h	2
/src/tarantool/src/lib/core/fiber.h	1
/src/tarantool/src/lib/core/say.c	2
/src/tarantool/src/tt_pthread.h	1
/src/tarantool/src/lib/core/trigger.cc	3
/src/tarantool/src/lib/core/tt_strerror.c	1
/src/tarantool/src/lib/core/tt_static.h	1
/src/tarantool/src/lib/small/include/small/static.h	3
/src/tarantool/src/lib/small/small/slab_arena.c	1
/src/tarantool/src/lib/small/include/small/lf_lifo.h	3
/src/tarantool/third_party/libev/ev.c	14
/src/tarantool/third_party/libev/ev.h	2
/src/tarantool/third_party/libev/ev_iouring.c	2
/src/tarantool/third_party/libev/ev_epoll.c	1
/src/tarantool/third_party/libev/ev_poll.c	1
/src/tarantool/third_party/libev/ev_select.c	1
/src/tarantool/src/lib/core/trigger.h	1
/src/tarantool/src/lib/small/small/region.c	1
/src/tarantool/src/lib/small/include/small/quota.h	1
/src/tarantool/src/lib/core/exception.h	1
/src/tarantool/src/box/iproto_constants.h	1

Fuzzer: xrow_decode_begin_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	309	59.1%
gold	[1:9]	79	15.1%
yellow	[10:29]	2	0.38%
greenyellow	[30:49]	1	0.19%
lawngreen	50+	131	25.0%
All colors	522	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
569	569	1 : View List ['cord_on_demand']	582	582	fiber_set_name_n	call site: 00120	/src/tarantool/src/lib/core/fiber.c:1228
23	23	4 : View List ['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1810']	23	23	clock_monotonic	call site: 00000	/src/tarantool/src/lib/core/clock.c:51
23	23	4 : View List ['__errno_location', 'exit', 'say_log_level_is_enabled.1527', 'tt_strerror']	23	23	clock_lowres_signal_init	call site: 00000	/src/tarantool/src/lib/core/clock_lowres.c:69
21	21	1 : View List ['mmap_checked']	21	34	slab_arena_create	call site: 00000	/src/tarantool/src/lib/small/small/slab_arena.c:204
13	13	3 : View List ['realloc', 'panic', 'malloc']	13	13	fiber_set_name_n	call site: 00121	/src/tarantool/src/lib/core/fiber.c:1231
11	11	1 : View List ['panic']	11	11	error_ref	call site: 00353	/src/tarantool/src/lib/core/diag.c:45
11	11	1 : View List ['panic']	11	11	fiber_init	call site: 00000	/src/tarantool/src/lib/core/fiber.c:2266
8	8	1 : View List ['tt_pthread_setname']	8	8	cord_set_name	call site: 00136	/src/tarantool/src/lib/core/fiber.c:2241
6	6	3 : View List ['sigaddset', 'sigemptyset', 'pthread_sigmask']	6	6	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4680
4	4	2 : View List ['atoi', 'getenv']	81	189	loop_init	call site: 00000	/src/tarantool/third_party/libev/ev.c:3302
4	4	2 : View List ['close', 'dup2']	4	8	evpipe_alloc	call site: 00000	/src/tarantool/third_party/libev/ev.c:2764
2	39	4 : View List ['ev_io_start', '__errno_location', 'ev_unref', 'fd_intern']	24	134	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4629

Runtime coverage analysis

Covered functions

149

Functions that are reachable but not covered

154

Reachable functions

260

Percentage of reachable functions covered

40.77%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/xrow_decode_begin_fuzzer.c	1
/src/tarantool/src/lib/msgpuck/msgpuck.h	25
/src/tarantool/src/box/xrow.c	2
/src/tarantool/src/lib/core/say.h	1
/src/tarantool/src/lib/core/exception.cc	12
/src/tarantool/src/trivia/util.h	3
/src/tarantool/src/lib/core/diag.c	8
/src/tarantool/src/lib/core/error_payload.c	7
/src/tarantool/src/lib/core/cord_on_demand.cc	4
/src/tarantool/src/lib/core/fiber.c	21
/src/tarantool/src/lib/small/include/small/slab_cache.h	9
/src/tarantool/src/lib/small/small/slab_cache.c	11
/src/tarantool/src/lib/small/include/small/util.h	3
/src/tarantool/src/lib/small/include/small/slab_list.h	2
/src/tarantool/src/lib/small/include/small/mempool.h	8
/src/tarantool/src/lib/small/small/mempool.c	8
/src/tarantool/src/lib/salad/mhash.h	2
/src/tarantool/src/lib/core/diag.h	9
/src/tarantool/src/lib/small/include/small/region.h	2
/src/tarantool/src/lib/core/fiber.h	1
/src/tarantool/src/lib/core/say.c	2
/src/tarantool/src/tt_pthread.h	1
/src/tarantool/src/lib/core/trigger.cc	3
/src/tarantool/src/lib/core/tt_strerror.c	1
/src/tarantool/src/lib/core/tt_static.h	1
/src/tarantool/src/lib/small/include/small/static.h	3
/src/tarantool/src/lib/small/small/slab_arena.c	1
/src/tarantool/src/lib/small/include/small/lf_lifo.h	3
/src/tarantool/third_party/libev/ev.c	14
/src/tarantool/third_party/libev/ev.h	2
/src/tarantool/third_party/libev/ev_iouring.c	2
/src/tarantool/third_party/libev/ev_epoll.c	1
/src/tarantool/third_party/libev/ev_poll.c	1
/src/tarantool/third_party/libev/ev_select.c	1
/src/tarantool/src/lib/core/trigger.h	1
/src/tarantool/src/lib/small/small/region.c	1
/src/tarantool/src/lib/small/include/small/quota.h	1
/src/tarantool/src/lib/core/exception.h	1
/src/tarantool/src/box/error.cc	4
/src/tarantool/src/lib/core/rmean.c	1
/src/tarantool/src/box/errcode.h	1
/src/tarantool/src/lib/salad/grp_alloc.h	9
/src/tarantool/src/box/tuple.h	3
/src/tarantool/src/box/error.h	1

Fuzzer: xrow_decode_auth_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	313	60.0%
gold	[1:9]	66	12.6%
yellow	[10:29]	9	1.72%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	133	25.5%
All colors	521	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
569	569	1 : View List ['cord_on_demand']	582	582	fiber_set_name_n	call site: 00217	/src/tarantool/src/lib/core/fiber.c:1228
23	23	4 : View List ['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1810']	23	23	clock_monotonic	call site: 00000	/src/tarantool/src/lib/core/clock.c:51
23	23	4 : View List ['__errno_location', 'exit', 'say_log_level_is_enabled.1527', 'tt_strerror']	23	23	clock_lowres_signal_init	call site: 00000	/src/tarantool/src/lib/core/clock_lowres.c:69
21	21	1 : View List ['mmap_checked']	21	34	slab_arena_create	call site: 00000	/src/tarantool/src/lib/small/small/slab_arena.c:204
13	13	3 : View List ['realloc', 'panic', 'malloc']	13	13	fiber_set_name_n	call site: 00218	/src/tarantool/src/lib/core/fiber.c:1231
11	11	1 : View List ['panic']	11	11	error_ref	call site: 00450	/src/tarantool/src/lib/core/diag.c:45
11	11	1 : View List ['panic']	11	11	fiber_init	call site: 00000	/src/tarantool/src/lib/core/fiber.c:2266
8	8	1 : View List ['tt_pthread_setname']	8	8	cord_set_name	call site: 00233	/src/tarantool/src/lib/core/fiber.c:2241
6	6	3 : View List ['sigaddset', 'sigemptyset', 'pthread_sigmask']	6	6	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4680
4	4	2 : View List ['atoi', 'getenv']	81	189	loop_init	call site: 00000	/src/tarantool/third_party/libev/ev.c:3302
4	4	2 : View List ['close', 'dup2']	4	8	evpipe_alloc	call site: 00000	/src/tarantool/third_party/libev/ev.c:2764
2	39	4 : View List ['ev_io_start', '__errno_location', 'ev_unref', 'fd_intern']	24	134	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4629

Runtime coverage analysis

Covered functions

145

Functions that are reachable but not covered

154

Reachable functions

255

Percentage of reachable functions covered

39.61%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/xrow_decode_auth_fuzzer.c	1
/src/tarantool/src/lib/msgpuck/msgpuck.h	22
/src/tarantool/src/box/xrow.c	2
/src/tarantool/src/lib/core/say.h	1
/src/tarantool/src/box/error.cc	4
/src/tarantool/src/lib/core/exception.cc	10
/src/tarantool/src/trivia/util.h	3
/src/tarantool/src/lib/core/diag.c	8
/src/tarantool/src/lib/core/error_payload.c	7
/src/tarantool/src/lib/core/rmean.c	1
/src/tarantool/src/box/errcode.h	1
/src/tarantool/src/lib/core/diag.h	9
/src/tarantool/src/lib/salad/grp_alloc.h	9
/src/tarantool/src/box/tuple.h	3
/src/tarantool/src/box/error.h	1
/src/tarantool/src/lib/core/cord_on_demand.cc	4
/src/tarantool/src/lib/core/fiber.c	21
/src/tarantool/src/lib/small/include/small/slab_cache.h	9
/src/tarantool/src/lib/small/small/slab_cache.c	11
/src/tarantool/src/lib/small/include/small/util.h	3
/src/tarantool/src/lib/small/include/small/slab_list.h	2
/src/tarantool/src/lib/small/include/small/mempool.h	8
/src/tarantool/src/lib/small/small/mempool.c	8
/src/tarantool/src/lib/salad/mhash.h	2
/src/tarantool/src/lib/small/include/small/region.h	2
/src/tarantool/src/lib/core/fiber.h	1
/src/tarantool/src/lib/core/say.c	2
/src/tarantool/src/tt_pthread.h	1
/src/tarantool/src/lib/core/trigger.cc	3
/src/tarantool/src/lib/core/tt_strerror.c	1
/src/tarantool/src/lib/core/tt_static.h	1
/src/tarantool/src/lib/small/include/small/static.h	3
/src/tarantool/src/lib/small/small/slab_arena.c	1
/src/tarantool/src/lib/small/include/small/lf_lifo.h	3
/src/tarantool/third_party/libev/ev.c	14
/src/tarantool/third_party/libev/ev.h	2
/src/tarantool/third_party/libev/ev_iouring.c	2
/src/tarantool/third_party/libev/ev_epoll.c	1
/src/tarantool/third_party/libev/ev_poll.c	1
/src/tarantool/third_party/libev/ev_select.c	1
/src/tarantool/src/lib/core/trigger.h	1
/src/tarantool/src/lib/small/small/region.c	1
/src/tarantool/src/lib/small/include/small/quota.h	1
/src/tarantool/src/lib/core/exception.h	1
/src/tarantool/src/box/iproto_constants.h	1

Fuzzer: xrow_greeting_decode_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	2	4.54%
gold	[1:9]	0	0.0%
yellow	[10:29]	2	4.54%
greenyellow	[30:49]	5	11.3%
lawngreen	50+	35	79.5%
All colors	44	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2	2	1 : View List ['abort']	2	2	mh_strnptr_resize	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:494
0	56	1 : View List ['mh_strnptr_put']	0	56	mh_strnptr_put	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:319
0	0	None	0	0	tt_uuid_from_strl	call site: 00031	/src/tarantool/src/lib/core/tt_uuid.c:98
0	0	None	0	0	mh_strnptr_resize	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:482
0	0	None	0	0	mh_strnptr_start_resize	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:505
0	0	None	0	0	mh_strnptr_start_resize	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:509
0	0	None	0	0	mh_strnptr_put	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:330

Runtime coverage analysis

Covered functions

29

Functions that are reachable but not covered

11

Reachable functions

23

Percentage of reachable functions covered

52.17%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/xrow_greeting_decode_fuzzer.c	1
/src/tarantool/src/lib/msgpuck/msgpuck.h	4
/src/tarantool/src/trivia/util.h	1
/src/tarantool/src/box/xrow.c	1
/src/tarantool/src/version.h	1
/src/tarantool/src/lib/core/tt_uuid.c	1
/src/tarantool/src/lib/core/tt_uuid.h	1
/src/tarantool/src/lib/core/util.c	1
/src/tarantool/third_party/base64.c	2

Fuzzer: xrow_decode_error_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	234	27.5%
gold	[1:9]	135	15.9%
yellow	[10:29]	8	0.94%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	471	55.5%
All colors	848	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
569	569	1 : View List ['fiber_delete']	569	569	cord_collect_garbage	call site: 00400	/src/tarantool/src/lib/core/fiber.c:1918
97	97	1 : View List ['ev_loop_destroy']	97	1260	cord_destroy	call site: 00331	/src/tarantool/src/lib/core/fiber.c:1950
26	26	1 : View List ['slab_put_large']	26	26	slab_put	call site: 00428	/src/tarantool/src/lib/small/small/slab_cache.c:382
23	23	3 : View List ['_say_strerror', '__errno_location', 'say_log_level_is_enabled.373']	23	23	signal_stack_free	call site: 00323	/src/tarantool/src/lib/core/fiber.c:260
20	20	1 : View List ['slab_get_large']	20	34	slab_get	call site: 00580	/src/tarantool/src/lib/small/small/slab_cache.c:321
13	13	3 : View List ['realloc', 'panic', 'malloc']	13	13	fiber_set_name_n	call site: 00242	/src/tarantool/src/lib/core/fiber.c:1231
11	11	1 : View List ['panic']	11	11	error_ref	call site: 00474	/src/tarantool/src/lib/core/diag.c:45
4	4	2 : View List ['__errno_location', 'strerror_r']	4	4	munmap_checked	call site: 00601	/src/tarantool/src/lib/small/small/slab_arena.c:76
2	2	1 : View List ['mp_store_u64']	2	4	mp_encode_uint	call site: 00139	/src/tarantool/src/lib/msgpuck/msgpuck.h:2225
2	2	1 : View List ['abort']	2	2	mh_strnptr_resize	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:494
0	569	1 : View List ['cord_on_demand']	13	582	fiber_set_name_n	call site: 00241	/src/tarantool/src/lib/core/fiber.c:1228
0	56	1 : View List ['mh_strnptr_put']	0	56	mh_strnptr_put	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:319

Runtime coverage analysis

Covered functions

228

Functions that are reachable but not covered

116

Reachable functions

368

Percentage of reachable functions covered

68.48%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/xrow_decode_error_fuzzer.c	1
/src/tarantool/src/lib/msgpuck/msgpuck.h	27
/src/tarantool/src/box/xrow.c	1
/src/tarantool/src/box/error.cc	5
/src/tarantool/src/lib/core/exception.cc	10
/src/tarantool/src/trivia/util.h	3
/src/tarantool/src/lib/core/diag.c	10
/src/tarantool/src/lib/core/error_payload.c	8
/src/tarantool/src/lib/core/rmean.c	1
/src/tarantool/src/box/errcode.h	1
/src/tarantool/src/lib/core/diag.h	15
/src/tarantool/src/lib/salad/grp_alloc.h	9
/src/tarantool/src/box/tuple.h	3
/src/tarantool/src/box/error.h	7
/src/tarantool/src/lib/core/reflection.h	1
/src/tarantool/src/lib/core/cord_on_demand.cc	4
/src/tarantool/src/lib/core/fiber.c	21
/src/tarantool/src/lib/small/include/small/slab_cache.h	9
/src/tarantool/src/lib/small/small/slab_cache.c	18
/src/tarantool/src/lib/small/include/small/util.h	4
/src/tarantool/src/lib/small/include/small/slab_list.h	2
/src/tarantool/src/lib/small/include/small/mempool.h	8
/src/tarantool/src/lib/small/small/mempool.c	8
/src/tarantool/src/lib/salad/mhash.h	2
/src/tarantool/src/lib/small/include/small/region.h	12
/src/tarantool/src/lib/core/fiber.h	1
/src/tarantool/src/lib/core/say.c	2
/src/tarantool/src/lib/core/say.h	2
/src/tarantool/src/tt_pthread.h	1
/src/tarantool/src/lib/core/trigger.cc	3
/src/tarantool/src/lib/core/tt_strerror.c	1
/src/tarantool/src/lib/core/tt_static.h	1
/src/tarantool/src/lib/small/include/small/static.h	3
/src/tarantool/src/lib/small/small/slab_arena.c	5
/src/tarantool/src/lib/small/include/small/lf_lifo.h	4
/src/tarantool/third_party/libev/ev.c	14
/src/tarantool/third_party/libev/ev.h	2
/src/tarantool/third_party/libev/ev_iouring.c	2
/src/tarantool/third_party/libev/ev_epoll.c	1
/src/tarantool/third_party/libev/ev_poll.c	1
/src/tarantool/third_party/libev/ev_select.c	1
/src/tarantool/src/lib/core/trigger.h	1
/src/tarantool/src/lib/small/small/region.c	3
/src/tarantool/src/lib/small/include/small/quota.h	2
/src/tarantool/src/lib/core/exception.h	15
/src/tarantool/src/box/mp_error.cc	7
/src/tarantool/src/lib/core/ssl_error.h	2

Fuzzer: datetime_parse_full_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	25	12.2%
gold	[1:9]	10	4.90%
yellow	[10:29]	7	3.43%
greenyellow	[30:49]	8	3.92%
lawngreen	50+	154	75.4%
All colors	204	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
25	25	1 : View List ['gmtsub']	25	25	localsub	call site: 00178	/src/tarantool/src/lib/tzcode/localtime.c:1431
2	2	1 : View List ['__errno_location']	2	2	tzloadbody	call site: 00109	/src/tarantool/src/lib/tzcode/localtime.c:398
2	2	1 : View List ['update_tzname_etc']	2	2	localsub	call site: 00187	/src/tarantool/src/lib/tzcode/localtime.c:1504
0	56	1 : View List ['mh_strnptr_put']	0	56	mh_strnptr_put	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:319
0	6	1 : View List ['getnum']	0	6	getsecs	call site: 00129	/src/tarantool/src/lib/tzcode/localtime.c:866
0	0	None	26	467	tzloadbody	call site: 00098	/src/tarantool/src/lib/tzcode/localtime.c:346
0	0	None	26	467	tzloadbody	call site: 00098	/src/tarantool/src/lib/tzcode/localtime.c:352
0	0	None	4	439	tzloadbody	call site: 00119	/src/tarantool/src/lib/tzcode/localtime.c:489
0	0	None	4	439	tzloadbody	call site: 00119	/src/tarantool/src/lib/tzcode/localtime.c:493
0	0	None	4	439	tzloadbody	call site: 00122	/src/tarantool/src/lib/tzcode/localtime.c:544
0	0	None	4	439	tzloadbody	call site: 00122	/src/tarantool/src/lib/tzcode/localtime.c:556
0	0	None	4	439	tzloadbody	call site: 00122	/src/tarantool/src/lib/tzcode/localtime.c:570

Runtime coverage analysis

Covered functions

70

Functions that are reachable but not covered

19

Reachable functions

78

Percentage of reachable functions covered

75.64%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/datetime_parse_full_fuzzer.c	1
/src/tarantool/src/trivia/util.h	1
/src/tarantool/src/lib/core/datetime.c	3
/src/tarantool/third_party/c-dt/dt_parse_iso.c	9
/src/tarantool/third_party/c-dt/dt_core.c	7
/src/tarantool/third_party/c-dt/dt_util.c	5
/src/tarantool/src/lib/tzcode/timezone.c	6
/src/tarantool/src/lib/tzcode/localtime.c	29
/src/tarantool/src/lib/core/util.c	1

Fuzzer: mp_datetime_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	0	0.0%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	6	100.%
All colors	6	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
0	56	1 : View List ['mh_strnptr_put']	0	56	mh_strnptr_put	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:319
0	0	None	0	0	mh_strnptr_put	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:330

Runtime coverage analysis

Covered functions

16

Functions that are reachable but not covered

1

Reachable functions

5

Percentage of reachable functions covered

80.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/mp_datetime_fuzzer.c	1
/src/tarantool/src/lib/core/mp_datetime.c	1
/src/tarantool/src/lib/bit/bit.h	1
/src/tarantool/src/lib/core/datetime.h	1

Fuzzer: luaL_loadbuffer_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	286	17.1%
gold	[1:9]	31	1.86%
yellow	[10:29]	17	1.02%
greenyellow	[30:49]	13	0.78%
lawngreen	50+	1317	79.1%
All colors	1664	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
1978	1996	2 : View List ['luaL_gsub', 'lua_remove']	1978	2654	setpath	call site: 00000	/src/tarantool/third_party/luajit/src/lib_package.c:573
697	11953	4 : View List ['lj_opt_fold', 'lj_ir_kint', 'rec_idx_abc', 'lj_ffrecord_select_mode']	697	11964	rec_varg	call site: 00000	/src/tarantool/third_party/luajit/src/lj_record.c:1871
598	598	3 : View List ['snap_restoredata', 'lj_ctype_info', 'lj_cdata_newx']	678	685	snap_unsink	call site: 00000	/src/tarantool/third_party/luajit/src/lj_snap.c:834
557	557	1 : View List ['cconv_err_conv']	557	557	lj_cconv_ct_ct	call site: 00000	/src/tarantool/third_party/luajit/src/lj_cconv.c:269
545	2571	6 : View List ['lj_gc_step', 'lj_mem_newgco', 'lj_cconv_ct_ct', 'lj_ctype_intern', 'lj_ctype_size', 'lj_assert_fail']	545	2571	carith_ptr	call site: 00000	/src/tarantool/third_party/luajit/src/lj_carith.c:139
465	3773	5 : View List ['lj_ir_kint64', 'lj_opt_fold', 'lj_ctype_intern', 'lj_ctype_size', 'lj_ir_kint']	465	3773	crec_arith_ptr	call site: 00000	/src/tarantool/third_party/luajit/src/lj_crecord.c:1404
448	448	1 : View List ['crec_tailcall']	448	459	crec_arith_meta	call site: 00000	/src/tarantool/third_party/luajit/src/lj_crecord.c:1455
445	445	1 : View List ['lj_err_caller']	445	445	lua_setmetatable	call site: 00000	/src/tarantool/third_party/luajit/src/lj_api.c:1068
441	441	1 : View List ['lj_err_mem']	441	441	lj_mem_newgco	call site: 00137	/src/tarantool/third_party/luajit/src/lj_gc.c:889
441	441	1 : View List ['lj_err_mem']	441	441	lex_more	call site: 00706	/src/tarantool/third_party/luajit/src/lj_lex.c:51
156	156	7 : View List ['ctype_preptype', 'ctype_appc', 'ctype_prepnum', 'ctype_prepc', 'ctype_prepqual', 'ctype_appnum', 'lj_assert_fail']	156	228	ctype_repr	call site: 00000	/src/tarantool/third_party/luajit/src/lj_ctype.c:535
86	86	9 : View List ['lua_setallocf', 'lj_wbuf_test_flag', '__errno_location', 'lj_wbuf_terminate', 'lua_getallocf', 'lj_wbuf_addbyte', 'lj_wbuf_errno', 'lj_wbuf_flush', 'lj_assert_fail']	86	86	lj_memprof_stop	call site: 01622	/src/tarantool/third_party/luajit/src/lj_memprof.c:321

Runtime coverage analysis

Covered functions

3497

Functions that are reachable but not covered

76

Reachable functions

547

Percentage of reachable functions covered

86.11%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/luaL_loadbuffer/luaL_loadbuffer_fuzzer.cc	4
/src/tarantool/third_party/luajit/src/lib_aux.c	4
/src/tarantool/third_party/luajit/src/lj_state.c	10
/src/tarantool/third_party/luajit/src/lj_dispatch.c	3
/src/tarantool/third_party/luajit/src/lj_gc.c	32
/src/tarantool/third_party/luajit/src/lj_assert.c	1
/src/tarantool/third_party/luajit/src/lj_err.c	14
/src/tarantool/third_party/luajit/src/lj_str.c	3
/src/tarantool/third_party/luajit/src/lj_strfmt.c	9
/src/tarantool/third_party/luajit/src/lj_buf.c	6
/src/tarantool/third_party/luajit/src/lj_strfmt_num.c	9
/src/tarantool/third_party/luajit/src/lj_api.c	24
/src/tarantool/third_party/luajit/src/lj_debug.c	8
/src/tarantool/third_party/luajit/src/lj_tab.c	18
/src/tarantool/third_party/luajit/src/lj_meta.c	6
/src/tarantool/third_party/luajit/src/lj_lex.c	14
/src/tarantool/third_party/luajit/src/lj_ctype.c	5
/src/tarantool/third_party/luajit/src/lj_obj.c	1
/src/tarantool/third_party/luajit/src/lj_trace.c	5
/src/tarantool/third_party/luajit/src/lj_func.c	7
/src/tarantool/third_party/luajit/src/lj_mcode.c	2
/src/tarantool/third_party/luajit/src/lj_ccallback.c	1
/src/tarantool/third_party/luajit/src/lj_vmevent.c	2
/src/tarantool/test/fuzz/luaL_loadbuffer/serializer.cc	75
/src/tarantool/third_party/luajit/src/lib_init.c	1
/src/tarantool/third_party/luajit/src/lj_load.c	6
/src/tarantool/third_party/luajit/src/lj_bcread.c	15
/src/tarantool/third_party/luajit/src/lib_ffi.c	2
/src/tarantool/third_party/luajit/src/lj_lib.c	3
/src/tarantool/third_party/luajit/src/lj_memprof.c	2
/src/tarantool/third_party/luajit/src/lj_wbuf.c	9
/src/tarantool/third_party/luajit/src/lj_symtab.c	1
/src/tarantool/third_party/luajit/src/lj_utils_leb128.c	1
/src/tarantool/third_party/luajit/src/lj_clib.c	2
/src/tarantool/third_party/luajit/src/lj_udata.c	1
/src/tarantool/third_party/luajit/src/lj_parse.c	116
/src/tarantool/third_party/luajit/src/lj_strscan.c	6
/src/tarantool/third_party/luajit/src/lj_vmmath.c	1
/src/tarantool/third_party/luajit/src/lj_mapi.c	1
/src/tarantool/third_party/luajit/src/lj_profile.c	1
/src/tarantool/third_party/luajit/src/lj_profile_timer.c	1

Fuzzer: xrow_decode_dml_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	319	58.8%
gold	[1:9]	66	12.1%
yellow	[10:29]	1	0.18%
greenyellow	[30:49]	1	0.18%
lawngreen	50+	155	28.5%
All colors	542	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
569	569	1 : View List ['cord_on_demand']	582	582	fiber_set_name_n	call site: 00219	/src/tarantool/src/lib/core/fiber.c:1228
23	23	4 : View List ['tt_strerror', '__errno_location', 'exit', 'say_log_level_is_enabled.1810']	23	23	clock_monotonic	call site: 00000	/src/tarantool/src/lib/core/clock.c:51
23	23	4 : View List ['__errno_location', 'exit', 'say_log_level_is_enabled.1527', 'tt_strerror']	23	23	clock_lowres_signal_init	call site: 00000	/src/tarantool/src/lib/core/clock_lowres.c:69
21	21	1 : View List ['mmap_checked']	21	34	slab_arena_create	call site: 00000	/src/tarantool/src/lib/small/small/slab_arena.c:204
13	13	3 : View List ['realloc', 'panic', 'malloc']	13	13	fiber_set_name_n	call site: 00220	/src/tarantool/src/lib/core/fiber.c:1231
11	11	1 : View List ['panic']	11	11	error_ref	call site: 00452	/src/tarantool/src/lib/core/diag.c:45
11	11	1 : View List ['panic']	11	11	fiber_init	call site: 00000	/src/tarantool/src/lib/core/fiber.c:2266
8	862	8 : View List ['diag_set_error', '__errno_location', 'diag_get', 'BuildClientError', 'dump_row_hex', 'bit_ctz_u64', 'iproto_key_name', 'say_log_level_is_enabled']	8	862	xrow_decode_dml_internal	call site: 00533	/src/tarantool/src/box/xrow.c:1051
8	8	1 : View List ['tt_pthread_setname']	8	8	cord_set_name	call site: 00235	/src/tarantool/src/lib/core/fiber.c:2241
6	6	3 : View List ['sigaddset', 'sigemptyset', 'pthread_sigmask']	6	6	ev_signal_start	call site: 00000	/src/tarantool/third_party/libev/ev.c:4680
4	4	2 : View List ['atoi', 'getenv']	81	189	loop_init	call site: 00000	/src/tarantool/third_party/libev/ev.c:3302
4	4	2 : View List ['close', 'dup2']	4	8	evpipe_alloc	call site: 00000	/src/tarantool/third_party/libev/ev.c:2764

Runtime coverage analysis

Covered functions

151

Functions that are reachable but not covered

156

Reachable functions

263

Percentage of reachable functions covered

40.68%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/xrow_decode_dml_fuzzer.c	1
/src/tarantool/src/lib/msgpuck/msgpuck.h	27
/src/tarantool/src/box/xrow.h	1
/src/tarantool/src/box/xrow.c	2
/src/tarantool/src/lib/core/say.h	1
/src/tarantool/src/box/error.cc	4
/src/tarantool/src/lib/core/exception.cc	10
/src/tarantool/src/trivia/util.h	3
/src/tarantool/src/lib/core/diag.c	8
/src/tarantool/src/lib/core/error_payload.c	7
/src/tarantool/src/lib/core/rmean.c	1
/src/tarantool/src/box/errcode.h	1
/src/tarantool/src/lib/core/diag.h	9
/src/tarantool/src/lib/salad/grp_alloc.h	9
/src/tarantool/src/box/tuple.h	3
/src/tarantool/src/box/error.h	1
/src/tarantool/src/lib/core/cord_on_demand.cc	4
/src/tarantool/src/lib/core/fiber.c	21
/src/tarantool/src/lib/small/include/small/slab_cache.h	9
/src/tarantool/src/lib/small/small/slab_cache.c	11
/src/tarantool/src/lib/small/include/small/util.h	3
/src/tarantool/src/lib/small/include/small/slab_list.h	2
/src/tarantool/src/lib/small/include/small/mempool.h	8
/src/tarantool/src/lib/small/small/mempool.c	8
/src/tarantool/src/lib/salad/mhash.h	2
/src/tarantool/src/lib/small/include/small/region.h	2
/src/tarantool/src/lib/core/fiber.h	1
/src/tarantool/src/lib/core/say.c	2
/src/tarantool/src/tt_pthread.h	1
/src/tarantool/src/lib/core/trigger.cc	3
/src/tarantool/src/lib/core/tt_strerror.c	1
/src/tarantool/src/lib/core/tt_static.h	1
/src/tarantool/src/lib/small/include/small/static.h	3
/src/tarantool/src/lib/small/small/slab_arena.c	1
/src/tarantool/src/lib/small/include/small/lf_lifo.h	3
/src/tarantool/third_party/libev/ev.c	14
/src/tarantool/third_party/libev/ev.h	2
/src/tarantool/third_party/libev/ev_iouring.c	2
/src/tarantool/third_party/libev/ev_epoll.c	1
/src/tarantool/third_party/libev/ev_poll.c	1
/src/tarantool/third_party/libev/ev_select.c	1
/src/tarantool/src/lib/core/trigger.h	1
/src/tarantool/src/lib/small/small/region.c	1
/src/tarantool/src/lib/small/include/small/quota.h	1
/src/tarantool/src/lib/core/exception.h	1
/src/tarantool/src/box/iproto_constants.h	2
/src/tarantool/src/lib/bit/bit.h	1

Fuzzer: xrow_header_decode_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	277	51.8%
gold	[1:9]	105	19.6%
yellow	[10:29]	11	2.05%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	141	26.4%
All colors	534	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
569	569	1 : View List ['fiber_delete']	569	569	cord_collect_garbage	call site: 00405	/src/tarantool/src/lib/core/fiber.c:1918
97	97	1 : View List ['ev_loop_destroy']	97	1260	cord_destroy	call site: 00336	/src/tarantool/src/lib/core/fiber.c:1950
23	23	3 : View List ['_say_strerror', '__errno_location', 'say_log_level_is_enabled.373']	23	23	signal_stack_free	call site: 00328	/src/tarantool/src/lib/core/fiber.c:260
21	21	1 : View List ['mmap_checked']	21	34	slab_arena_create	call site: 00000	/src/tarantool/src/lib/small/small/slab_arena.c:204
13	13	3 : View List ['realloc', 'panic', 'malloc']	13	13	fiber_set_name_n	call site: 00246	/src/tarantool/src/lib/core/fiber.c:1231
11	11	1 : View List ['panic']	11	11	error_ref	call site: 00478	/src/tarantool/src/lib/core/diag.c:45
4	858	6 : View List ['diag_set_error', 'dump_row_hex', '__errno_location', 'say_log_level_is_enabled', 'diag_get', 'BuildClientError']	4	858	xrow_decode	call site: 00066	/src/tarantool/src/box/xrow.c:266
2	2	1 : View List ['abort']	2	2	mh_strnptr_resize	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:494
0	569	1 : View List ['cord_on_demand']	13	582	fiber_set_name_n	call site: 00245	/src/tarantool/src/lib/core/fiber.c:1228
0	56	1 : View List ['mh_strnptr_put']	0	56	mh_strnptr_put	call site: 00000	/src/tarantool/src/lib/salad/mhash.h:319
0	0	None	15	19	dump_row_hex	call site: 00528	/src/tarantool/src/box/xrow.c:154
0	0	1 : View List ['free']	6	6	error_vformat_msg	call site: 00097	/src/tarantool/src/lib/core/diag.c:199

Runtime coverage analysis

Covered functions

136

Functions that are reachable but not covered

138

Reachable functions

258

Percentage of reachable functions covered

46.51%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/xrow_header_decode_fuzzer.c	1
/src/tarantool/src/lib/msgpuck/msgpuck.h	25
/src/tarantool/src/box/xrow.c	2
/src/tarantool/src/lib/core/say.h	1
/src/tarantool/src/box/error.cc	4
/src/tarantool/src/lib/core/exception.cc	10
/src/tarantool/src/trivia/util.h	3
/src/tarantool/src/lib/core/diag.c	8
/src/tarantool/src/lib/core/error_payload.c	7
/src/tarantool/src/lib/core/rmean.c	1
/src/tarantool/src/box/errcode.h	1
/src/tarantool/src/lib/core/diag.h	10
/src/tarantool/src/lib/salad/grp_alloc.h	9
/src/tarantool/src/box/tuple.h	3
/src/tarantool/src/box/error.h	1
/src/tarantool/src/lib/core/cord_on_demand.cc	4
/src/tarantool/src/lib/core/fiber.c	21
/src/tarantool/src/lib/small/include/small/slab_cache.h	9
/src/tarantool/src/lib/small/small/slab_cache.c	11
/src/tarantool/src/lib/small/include/small/util.h	3
/src/tarantool/src/lib/small/include/small/slab_list.h	2
/src/tarantool/src/lib/small/include/small/mempool.h	8
/src/tarantool/src/lib/small/small/mempool.c	8
/src/tarantool/src/lib/salad/mhash.h	2
/src/tarantool/src/lib/small/include/small/region.h	2
/src/tarantool/src/lib/core/fiber.h	1
/src/tarantool/src/lib/core/say.c	2
/src/tarantool/src/tt_pthread.h	1
/src/tarantool/src/lib/core/trigger.cc	3
/src/tarantool/src/lib/core/tt_strerror.c	1
/src/tarantool/src/lib/core/tt_static.h	1
/src/tarantool/src/lib/small/include/small/static.h	3
/src/tarantool/src/lib/small/small/slab_arena.c	1
/src/tarantool/src/lib/small/include/small/lf_lifo.h	3
/src/tarantool/third_party/libev/ev.c	14
/src/tarantool/third_party/libev/ev.h	2
/src/tarantool/third_party/libev/ev_iouring.c	2
/src/tarantool/third_party/libev/ev_epoll.c	1
/src/tarantool/third_party/libev/ev_poll.c	1
/src/tarantool/third_party/libev/ev_select.c	1
/src/tarantool/src/lib/core/trigger.h	1
/src/tarantool/src/lib/small/small/region.c	1
/src/tarantool/src/lib/small/include/small/quota.h	1
/src/tarantool/src/lib/core/exception.h	1

Fuzzer: sql_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	8499	77.6%
gold	[1:9]	200	1.82%
yellow	[10:29]	97	0.88%
greenyellow	[30:49]	59	0.53%
lawngreen	50+	2091	19.1%
All colors	10946	100

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
20861	20882	6 : View List ['sqlExprCacheRemove', 'sqlExprCanBeNull', 'codeExprOrVector', 'codeAllEqualityTerms', 'sqlExprIsVector', 'space_by_id_fast.11202']	20889	45391	sqlWhereCodeOneLoopStart	call site: 06583	/src/tarantool/src/box/sql/wherecode.c:730
15916	16706	12 : View List ['in_txn.10437', 'sqlVdbeSetChanges', '__errno_location', 'box_txn_rollback', 'sqlVdbeCloseStatement', 'diag_set_error.10436', 'diag_get', 'BuildClientError', 'txn_commit', 'sqlRollbackAll', 'sqlCloseSavepoints', 'say_log_level_is_enabled.10432']	15916	29620	sqlVdbeHalt	call site: 09914	/src/tarantool/src/box/sql/vdbeaux.c:1788
13651	32248	32 : View List ['sql_generate_column_name', 'sql_lookup_space', 'sqlMPrintf', 'BuildClientError', 'tableAndColumnIndex', 'sql_expr_list_delete', 'sql_view_compile', 'sql_template_space_new', 'strcmp', 'sqlExprListSetName', 'tt_sprintf.8569', 'sqlMatchSpanName', 'sqlSelectSetName', 'sqlProcessJoin', 'sql_xfree', 'sqlIdListIndex', 'withExpand', 'sqlTokenInit', 'strlen', 'sql_xstrdup', 'sqlIndexedByLookup', 'diag_set_error.8655', 'expr_autoname_is_required', 'say_log_level_is_enabled.8651', 'sqlColumnsFromExprList', '__errno_location', 'sqlSrcListAssignCursors', 'sql_expr_list_append', 'diag_get', 'sqlWalkSelect', 'sqlPExpr', 'sql_expr_new_named.8823']	13651	32248	selectExpander	call site: 00000	/src/tarantool/src/box/sql/select.c:4916
6982	6982	1 : View List ['multiSelect']	9406	9446	sqlSelect	call site: 04959	/src/tarantool/src/box/sql/select.c:5633
6962	6962	1 : View List ['codeVectorCompare']	6962	6972	sqlExprCodeTarget	call site: 05204	/src/tarantool/src/box/sql/expr.c:3796
4785	4785	2 : View List ['columnno_by_name', 'resolve_link']	5028	5162	sql_create_foreign_key	call site: 04355	/src/tarantool/src/box/sql/build.c:2075
4605	22400	10 : View List ['sqlResolveSelectNames', 'sql_expr_delete', 'sql_expr_new', 'sqlResolveExprNames', 'sqlExprIsConstantOrFunction', 'tt_sprintf.8219', 'resolveCompoundOrderBy', 'sqlResolveExprListNames', 'resolveOrderGroupBy', 'sql_select_op_name']	4621	25576	resolveSelectStep	call site: 00000	/src/tarantool/src/box/sql/resolve.c:1271
4195	4493	9 : View List ['sqlVdbeAddOp0', 'sqlVdbeAddOp1', 'sqlVdbeChangeP5', 'sqlGetVdbe', 'sqlVdbeAddOp3', 'sql_set_multi_write', 'vdbe_emit_new_sec_index_id', 'sqlVdbeAddOp2', 'vdbe_emit_create_index']	4195	4837	sql_create_index	call site: 02701	/src/tarantool/src/box/sql/build.c:2919
3464	3464	2 : View List ['sqlTreeViewSelect', 'sqlDebugPrintf']	3464	3464	flattenSubquery	call site: 04956	/src/tarantool/src/box/sql/select.c:4332
3299	4232	9 : View List ['__errno_location', 'vdbe_emit_ck_constraint_create', 'diag_set_error.5768', 'say_log_level_is_enabled.5765', 'diag_get', 'BuildClientError', 'sql_space_by_src', 'sqlGetVdbe', 'sqlVdbeAddOp2']	3299	4232	sql_create_check_contraint	call site: 04265	/src/tarantool/src/box/sql/build.c:831
2892	5799	8 : View List ['minMaxQuery', 'sqlIndexedByLookup', 'is_simple_count', 'vdbe_emit_open_cursor', 'sql_expr_list_delete', 'explain_simple_count', 'sqlWhereBreakLabel', 'sql_expr_list_dup']	5316	46889	sqlSelect	call site: 04960	/src/tarantool/src/box/sql/select.c:6074
2340	2340	2 : View List ['whereLoopPrint', 'sqlDebugPrintf']	2340	2340	whereLoopInsert	call site: 06293	/src/tarantool/src/box/sql/where.c:1486

Runtime coverage analysis

Covered functions

3791

Functions that are reachable but not covered

1890

Reachable functions

2863

Percentage of reachable functions covered

33.99%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/tarantool/test/fuzz/sql_fuzzer/sql_fuzzer.cc	2
/src/tarantool/test/fuzz/sql_fuzzer/sql_query_proto_to_string.cc	68
/src/tarantool/src/box/sql.c	32
/src/tarantool/src/box/sql/prepare.c	3
/src/tarantool/src/box/session.h	6
/src/tarantool/src/lib/core/cord_on_demand.cc	4
/src/tarantool/src/trivia/util.h	4
/src/tarantool/src/lib/core/fiber.c	56
/src/tarantool/src/lib/small/include/small/slab_cache.h	10
/src/tarantool/src/lib/small/small/slab_cache.c	18
/src/tarantool/src/lib/small/include/small/util.h	4
/src/tarantool/src/lib/small/include/small/slab_list.h	2
/src/tarantool/src/lib/small/include/small/mempool.h	9
/src/tarantool/src/lib/small/small/mempool.c	11
/src/tarantool/src/lib/salad/mhash.h	91
/src/tarantool/src/lib/core/diag.h	19
/src/tarantool/src/lib/small/include/small/region.h	21
/src/tarantool/src/lib/core/fiber.h	4
/src/tarantool/src/lib/core/say.c	2
/src/tarantool/src/lib/core/say.h	2
/src/tarantool/src/tt_pthread.h	1
/src/tarantool/src/lib/core/trigger.cc	9
/src/tarantool/src/lib/core/tt_strerror.c	1
/src/tarantool/src/lib/core/tt_static.h	5
/src/tarantool/src/lib/small/include/small/static.h	4
/src/tarantool/src/lib/small/small/slab_arena.c	5
/src/tarantool/src/lib/small/include/small/lf_lifo.h	4
/src/tarantool/third_party/libev/ev.c	22
/src/tarantool/third_party/libev/ev.h	2
/src/tarantool/third_party/libev/ev_iouring.c	2
/src/tarantool/third_party/libev/ev_epoll.c	1
/src/tarantool/third_party/libev/ev_poll.c	1
/src/tarantool/third_party/libev/ev_select.c	1
/src/tarantool/src/lib/core/trigger.h	3
/src/tarantool/src/lib/small/small/region.c	4
/src/tarantool/src/lib/small/include/small/quota.h	2
/src/tarantool/src/lib/core/exception.cc	20
/src/tarantool/src/lib/core/diag.c	9
/src/tarantool/src/lib/core/error_payload.c	7
/src/tarantool/src/lib/core/exception.h	1
/src/tarantool/src/box/session.c	6
/src/tarantool/src/box/user.cc	5
/src/tarantool/src/box/lua/session.c	1
/src/tarantool/third_party/luajit/src/lj_api.c	31
/src/tarantool/third_party/luajit/src/lj_assert.c	1
/src/tarantool/third_party/luajit/src/lj_str.c	3
/src/tarantool/third_party/luajit/src/lj_err.c	19
/src/tarantool/third_party/luajit/src/lj_strfmt.c	9
/src/tarantool/third_party/luajit/src/lj_buf.c	6
/src/tarantool/third_party/luajit/src/lj_gc.c	28
/src/tarantool/third_party/luajit/src/lj_strfmt_num.c	9
/src/tarantool/third_party/luajit/src/lj_state.c	4
/src/tarantool/third_party/luajit/src/lj_debug.c	13
/src/tarantool/third_party/luajit/src/lj_meta.c	5
/src/tarantool/third_party/luajit/src/lj_tab.c	20
/src/tarantool/third_party/luajit/src/lj_obj.c	1
/src/tarantool/third_party/luajit/src/lib_aux.c	3
/src/tarantool/third_party/luajit/src/lj_strscan.c	7
/src/tarantool/src/box/sql_stmt_cache.c	4
/src/tarantool/src/box/sql/vdbeapi.c	4
/src/tarantool/src/lib/core/assoc.h	2
/src/tarantool/third_party/PMurHash.c	2
/src/tarantool/src/box/user.h	1
/src/tarantool/src/box/error.cc	6
/src/tarantool/src/lib/core/rmean.c	1
/src/tarantool/src/box/errcode.h	2
/src/tarantool/src/lib/msgpuck/msgpuck.h	63
/src/tarantool/src/lib/salad/grp_alloc.h	9
/src/tarantool/src/box/tuple.h	34
/src/tarantool/src/box/error.h	1
/src/tarantool/src/box/sql/malloc.c	6
/src/tarantool/src/box/sql/tokenize.c	8
/src/tarantool/build/src/box/sql/parse.c	13
/src/tarantool/build/src/box/sql/keywordhash.h	1
/src/tarantool/src/box/sql/expr.c	120
/src/tarantool/src/box/sql/select.c	62
/src/tarantool/src/box/sql/build.c	85
/src/tarantool/src/box/sql/trigger.c	23
/src/tarantool/src/box/sql/parse_def.c	7
/src/tarantool/src/box/sql/parse_def.h	19
/src/tarantool/src/box/sql/vdbeaux.c	67
/src/tarantool/src/lib/salad/stailq.h	6
/src/tarantool/src/box/schema.cc	1
/src/tarantool/src/box/sql/sqlInt.h	9
/src/tarantool/src/box/sql/util.c	20
/src/tarantool/src/box/identifier.c	1
/src/tarantool/src/lib/core/util.c	4
/src/tarantool/src/box/sql/parse.y	9
/src/tarantool/src/box/key_def.c	14
/src/tarantool/src/lib/coll/coll.c	2
/src/tarantool/src/box/sql/mem.c	11
/src/tarantool/src/lib/mpstream/mpstream.c	9
/src/tarantool/src/box/sql/vdbeInt.h	1
/src/tarantool/src/lib/mpstream/mpstream.h	4
/src/tarantool/src/box/field_def.h	7
/src/tarantool/src/box/space_cache.h	5
/src/tarantool/src/box/space_cache.c	2
/src/tarantool/src/lib/core/decimal.c	19
/src/tarantool/third_party/decNumber/decNumber.c	34
/src/tarantool/third_party/decNumber/decContext.c	3
/src/tarantool/src/lib/core/mp_decimal.c	3
/src/tarantool/third_party/decNumber/decPacked.c	2
/src/tarantool/src/box/sql/walker.c	6
/src/tarantool/src/box/sql/printf.c	21
/src/tarantool/src/box/sql/mem.h	4
/src/tarantool/src/lib/msgpuck/msgpuck.c	3
/src/tarantool/src/lib/core/tt_uuid.c	1
/src/tarantool/src/lib/core/tt_uuid.h	1
/src/tarantool/src/lib/core/datetime.c	3
/src/tarantool/third_party/c-dt/dt_core.c	3
/src/tarantool/src/lib/tzcode/timezone.c	1
/src/tarantool/src/box/space.h	14
/src/tarantool/src/box/space.c	10
/src/tarantool/src/box/schema_def.h	1
/src/tarantool/src/box/index_def.h	2
/src/tarantool/src/box/sql/resolve.c	7
/src/tarantool/src/box/coll_id_cache.c	3
/src/tarantool/src/box/tuple_format.h	11
/src/tarantool/src/lib/json/json.h	7
/src/tarantool/src/lib/json/json.c	24
/src/tarantool/src/box/key_def.h	11
/src/tarantool/src/lib/coll/coll.h	1
/src/tarantool/src/box/column_mask.h	2
/src/tarantool/src/box/tuple_compare.cc	210
/src/tarantool/src/box/tuple_hash.cc	1
/src/tarantool/src/box/tuple_extract_key.cc	12
/src/tarantool/src/box/index_def.c	3
/src/tarantool/src/cfg.c	4
/src/tarantool/third_party/luajit/src/lj_load.c	6
/src/tarantool/third_party/luajit/src/lj_lex.c	13
/src/tarantool/third_party/luajit/src/lj_bcread.c	15
/src/tarantool/third_party/luajit/src/lib_ffi.c	2
/src/tarantool/third_party/luajit/src/lj_ctype.c	16
/src/tarantool/third_party/luajit/src/lj_lib.c	4
/src/tarantool/third_party/luajit/src/lj_dispatch.c	2
/src/tarantool/third_party/luajit/src/lj_vmevent.c	2
/src/tarantool/third_party/luajit/src/lj_func.c	4
/src/tarantool/third_party/luajit/src/lj_memprof.c	1
/src/tarantool/third_party/luajit/src/lj_wbuf.c	6
/src/tarantool/third_party/luajit/src/lj_symtab.c	1
/src/tarantool/third_party/luajit/src/lj_utils_leb128.c	1
/src/tarantool/third_party/luajit/src/lj_clib.c	2
/src/tarantool/third_party/luajit/src/lj_udata.c	1
/src/tarantool/third_party/luajit/src/lj_parse.c	116
/src/tarantool/third_party/luajit/src/lj_vmmath.c	1
/src/tarantool/src/lua/utils.c	9
/src/tarantool/src/lua/error.c	7
/src/tarantool/third_party/luajit/src/lj_cconv.c	16
/src/tarantool/third_party/luajit/src/lj_ccallback.c	6
/src/tarantool/third_party/luajit/src/lj_mcode.c	1
/src/tarantool/third_party/luajit/src/lj_cdata.c	1
/src/tarantool/src/box/sql/hash.c	9
/src/tarantool/src/box/sql/func.c	10
/src/tarantool/src/box/func_cache.c	3
/src/tarantool/src/box/sql/treeview.c	9
/src/tarantool/src/box/sql/where.c	55
/src/tarantool/src/box/sql/whereexpr.c	23
/src/tarantool/src/box/field_def.c	3
/src/tarantool/src/box/index.h	7
/src/tarantool/src/box/sql/wherecode.c	9
/src/tarantool/src/box/sql/delete.c	5
/src/tarantool/src/box/sql/update.c	1
/src/tarantool/src/box/sql/insert.c	9
/src/tarantool/src/lib/bit/bit.h	8
/src/tarantool/src/box/sql/pragma.c	9
/src/tarantool/src/box/index.cc	17
/src/tarantool/src/box/index_weak_ref.h	5
/src/tarantool/src/box/index_weak_ref.c	1
/src/tarantool/src/box/field_map.h	2
/src/tarantool/src/box/tuple.c	11
/src/tarantool/src/lib/small/small/small.c	9
/src/tarantool/src/lib/small/include/small/small_class.h	2
/src/tarantool/src/box/schema.h	1
/src/tarantool/src/box/user_def.c	1
/src/tarantool/src/box/schema_def.c	1
/src/tarantool/src/scoped_guard.h	3
/src/tarantool/src/box/box.cc	3
/src/tarantool/third_party/base64.c	3
/src/tarantool/src/box/tuple_compare.h	1
/src/tarantool/src/lib/core/mp_datetime.c	2
/src/tarantool/src/lib/core/datetime.h	1
/src/tarantool/src/box/iterator_type.h	2
/src/tarantool/src/box/txn.h	19
/src/tarantool/src/box/txn.c	26
/src/tarantool/src/box/space_def.h	1
/src/tarantool/src/box/engine.h	5
/src/tarantool/src/box/box.h	1
/src/tarantool/src/lib/core/clock_lowres.h	2
/src/tarantool/src/lib/core/clock_lowres.c	1
/src/tarantool/src/box/sql/alter.c	1
/src/tarantool/src/box/sql/vdbesort.c	7
/src/tarantool/src/box/sql/os.c	3
/src/tarantool/src/box/sql/cursor.c	2
/src/tarantool/src/box/field_default_func.c	1
/src/tarantool/src/box/tuple_format.c	8
/src/tarantool/src/box/tuple_constraint.c	1
/src/tarantool/src/box/tuple_constraint_def.c	3
/src/tarantool/src/box/tuple_dictionary.c	4
/src/tarantool/src/box/field_default_func.h	1
/src/tarantool/src/lib/core/event.h	3
/src/tarantool/src/lib/core/event.c	7
/src/tarantool/src/box/space_upgrade.h	1
/src/tarantool/src/box/space_def.c	1
/src/tarantool/src/box/space_upgrade.c	1
/src/tarantool/src/box/txn_event_trigger.c	10
/src/tarantool/src/box/port.c	3
/src/tarantool/src/lib/core/func_adapter.h	2
/src/tarantool/src/lib/core/port.c	1
/src/tarantool/src/box/memtx_tx.c	20
/src/tarantool/src/box/journal.c	6
/src/tarantool/src/box/journal.h	6
/src/tarantool/src/box/txn_limbo.c	20
/src/tarantool/src/box/txn_limbo.h	5
/src/tarantool/src/lib/core/fiber_cond.c	3
/src/tarantool/src/lib/core/ratelimit.h	1
/src/tarantool/src/lib/vclock/vclock.c	3
/src/tarantool/src/lib/vclock/vclock.h	5
/src/tarantool/src/box/xrow.h	1
/src/tarantool/src/lib/core/clock.c	1
/src/tarantool/src/box/watcher.c	18
/src/tarantool/third_party/coro/coro.c	1
/src/tarantool/src/box/xrow.c	3
/src/tarantool/src/box/iproto_constants.h	2
/src/tarantool/src/box/sql/main.c	2