Project: cppcheck

Language c++
OSS-Fuzz project link
Build status: Fuzzers succeeding: Build log
Build status: Code coverage succeeding: Build log
Build status: Fuzz Introspector succeeding: Build log
Fuzzer count 1
Lines of code 107689
Lines covered 27099
Code coverage 25.16%
Code coverage report Report link
Static reachability 43.31%
Fuzz Introspector report Report link (from 2024-04-20)

Historical progression

Functions of interest to fuzz

This section outlines functions that may be of interest to fuzz. They are based on ranking functions that have a lot of complexity but currently exhibit low code coverage. The complexity is calculated based on the function itself as well as the functions called by the given function, i.e. the tree of code that the function triggers.


This is only a minor amount of introspection information available for this project. Please consult the Fuzz Introspector report for more information, e.g. the introspection table of all functions in the target project available here.

Function name Function source file Accumulated cyclomatic complexity Code coverage
CppCheck::check(FileSettingsconst&) /src/cppcheck/oss-fuzz/build/cppcheck.cpp 38464 0.0%
CppCheck::check(std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>const&) /src/cppcheck/oss-fuzz/build/cppcheck.cpp 38276 0.0%
CppCheck::checkClang(std::__1::basic_string<char,std::__1::char_traits<char>,std::__1::allocator<char>>const&) /src/cppcheck/oss-fuzz/build/cppcheck.cpp 14573 0.0%
clangimport::parseClangAstDump(Tokenizer&,std::__1::basic_istream<char,std::__1::char_traits<char>>&) /src/cppcheck/oss-fuzz/build/clangimport.cpp 11725 0.0%
TemplateSimplifier::simplifyTemplates(long) /src/cppcheck/oss-fuzz/build/templatesimplifier.cpp 9865 12.14%
valueFlowForLoop(TokenList&,SymbolDatabaseconst&,ErrorLogger&,Settingsconst&) /src/cppcheck/oss-fuzz/build/valueflow.cpp 9563 7.575%
valueFlowForLoopSimplify(Token*,Tokenconst*,bool,longlong,TokenListconst&,ErrorLogger&,Settingsconst&) /src/cppcheck/oss-fuzz/build/valueflow.cpp 8288 0.0%
getProgramMemory(Tokenconst*,Tokenconst*,ValueFlow::Valueconst&,Settingsconst&) /src/cppcheck/oss-fuzz/build/programmemory.cpp 8116 0.0%
getInitialProgramState(Tokenconst*,Tokenconst*,Settingsconst&,std::__1::unordered_map<ExprIdToken,ValueFlow::Value,ExprIdToken::Hash,std::__1::equal_to<ExprIdToken>,std::__1::allocator<std::__1::pair<ExprIdTokenconst,ValueFlow::Value>>>const&) /src/cppcheck/oss-fuzz/build/programmemory.cpp 8097 0.0%
(anonymousnamespace)::Executor::executeMultiCondition(bool,Tokenconst*)::{lambda(Tokenconst*)#1}::operator()(Tokenconst*)const /src/cppcheck/oss-fuzz/build/programmemory.cpp 8016 0.0%