Project: unicorn

Language c++
OSS-Fuzz project link
Project repository link
Build status: Fuzzers succeeding: Build log
Build status: Code coverage succeeding: Build log
Build status: Fuzz Introspector succeeding: Build log
Fuzzer count 13
Lines of code 214899
Lines covered 96714
Code coverage 45.00%
Code coverage report Report link
Static reachability 0.25%
Fuzz Introspector report Report link (from 2025-03-27)
Fuzzer Code coverage (lines) Latest Report Comments
fuzz_emu_arm64_arm 20.5% (avg: 20.43%, max: 20.5%) 2025-03-27
fuzz_emu_arm64_armbe 20.2% (avg: 20.13%, max: 20.2%) 2025-03-27
fuzz_emu_arm_arm 14.85% (avg: 14.84%, max: 14.85%) 2025-03-27
fuzz_emu_arm_armbe 9.92% (avg: 9.92%, max: 9.92%) 2025-03-27
fuzz_emu_arm_thumb 14.82% (avg: 14.8%, max: 14.82%) 2025-03-27
fuzz_emu_m68k_be 7.47% (avg: 7.48%, max: 7.49%) 2025-03-27
fuzz_emu_mips_32be 11.47% (avg: 11.45%, max: 11.49%) 2025-03-27
fuzz_emu_mips_32le 11.68% (avg: 11.57%, max: 11.69%) 2025-03-27
fuzz_emu_s390x_be 12.54% (avg: 12.53%, max: 12.54%) 2025-03-27
fuzz_emu_sparc_32be 4.4% (avg: 4.39%, max: 4.48%) 2025-03-27
fuzz_emu_x86_16 2.48% (avg: 2.48%, max: 2.49%) 2025-03-27
fuzz_emu_x86_32 11.54% (avg: 11.39%, max: 11.55%) 2025-03-27
fuzz_emu_x86_64 11.62% (avg: 11.37%, max: 11.61%) 2025-03-27

Historical Progression

Per Fuzzer Progression

Functions of interest to fuzz

This section outlines functions that may be of interest to fuzz. They are based on ranking functions that have a lot of complexity but currently exhibit low code coverage. The complexity is calculated based on the function itself as well as the functions called by the given function, i.e. the tree of code that the function triggers.


This is only a minor amount of introspection information available for this project. Please consult the Fuzz Introspector report for more information, e.g. the introspection table of all functions in the target project available here.

Function name Function source file Accumulated cyclomatic complexity Code coverage
decode_nanomips_opc /src/unicorn/qemu/target/mips/translate.c 8303 0.0%
decode_nanomips_32_48_opc /src/unicorn/qemu/target/mips/translate.c 8165 0.0%
decode_micromips_opc /src/unicorn/qemu/target/mips/translate.c 7320 0.0%
decode_micromips32_opc /src/unicorn/qemu/target/mips/translate.c 7290 0.0%
tricore_tr_translate_insn /src/unicorn/qemu/target/tricore/translate.c 4838 0.0%
decode_32Bit_opc /src/unicorn/qemu/target/tricore/translate.c 4674 0.0%
disas_sve_aarch64 /src/unicorn/qemu/target/arm/decode-sve.inc.c 3734 0.0%
gen_pool32axf /src/unicorn/qemu/target/mips/translate.c 3665 0.0%
gen_pool32f_nanomips_insn /src/unicorn/qemu/target/mips/translate.c 3649 0.0%
riscv_tr_translate_insn /src/unicorn/qemu/target/riscv/translate.c 3328 0.0%