Call Sites

Find function call sites in a binary.

When to use

• Find all locations where a specific function is called
• Identify callers of a function
• Check if a function contains calls to other specific functions
• Filter call sites based on caller criteria

Instructions

List function calls

Using the VulHunt MCP tools, open the project (open_project) and run the following Lua query (query_project) to get all the function calls:

local calls = project:calls_matching{
  to = <target_call>,